Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013.cer
File:                     b15f8fb3-7cfd-4593-ada0-a231ef250013.cer (raw, json)
Hash identifier:          kGfd8I/gC9Obw+UQDkbLHshFDoBskjx0o7pYRgNq9uY=
Subject key identifier:   F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584DF4D3AA138014C5214E7FC420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 May 2026 00:45:17 +0000
Certificate not after:    Mon 28 Aug 2028 00:45:17 +0000
Subordinate resources:    IP: 199.84.132.0 -- 199.84.134.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:d3:aa:13:80:14:c5:21:4e:7f:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: May 26 00:45:17 2026 GMT
            Not After : Aug 28 00:45:17 2028 GMT
        Subject: CN=b15f8fb3-7cfd-4593-ada0-a231ef250013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:3e:21:45:49:c3:55:b1:f5:0f:f6:ac:d2:
                    93:68:b0:0b:24:51:b0:2a:37:c4:3a:88:a5:34:df:
                    ad:59:ef:44:27:cf:e4:85:5a:01:16:22:e7:a5:66:
                    bc:2f:37:66:92:8b:56:83:b5:bc:32:80:4b:97:0f:
                    5d:3b:0d:4d:c3:cc:51:90:02:f3:fe:37:7a:cf:31:
                    70:29:84:1b:74:9b:91:14:d9:c0:1e:74:5f:2c:96:
                    16:59:52:81:16:a2:4b:50:5b:2b:d1:b1:88:a6:b1:
                    f5:b0:5b:a2:42:b8:66:c7:11:ee:e8:5c:5b:ea:ed:
                    ba:56:73:7c:45:f5:df:25:51:d0:99:c7:af:d4:4c:
                    9f:eb:26:9a:f0:21:99:ae:a5:f1:30:af:a9:9a:10:
                    ac:f0:3c:11:4a:a9:5c:9a:1e:b2:9e:54:6a:e9:c0:
                    a6:1e:41:bd:4a:f3:ac:b7:63:c4:f1:bc:87:6f:4e:
                    81:97:53:68:49:58:a7:b1:f2:19:a5:4e:74:0e:63:
                    49:92:58:a7:ee:f1:8e:9a:01:e7:cd:ef:82:0b:30:
                    33:0e:92:a3:c6:f5:57:f8:c2:a8:d4:92:15:bb:a9:
                    6a:38:67:49:52:1d:a3:0f:60:4e:6d:6e:06:59:10:
                    79:6e:8d:4d:ab:65:b2:59:d4:a2:13:82:a3:dd:2b:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:BE:4F:7B:D1:B7:79:F4:5A:8F:58:F8:7D:D5:78:0B:F0:C7:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b15f8fb3-7cfd-4593-ada0-a231ef250013/b15f8fb3-7cfd-4593-ada0-a231ef250013.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.132.0-199.84.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:46:95:28:83:6e:6e:ef:30:91:7c:54:c2:07:c6:96:e4:c3:
         04:29:a1:d5:64:c9:1d:08:39:ed:3d:49:21:b8:33:ae:69:78:
         a9:0f:0e:b4:e4:f4:18:95:64:7d:3d:e1:6f:de:18:62:68:0f:
         7b:b4:20:5c:b6:33:bf:dd:6c:b9:5e:ec:18:a6:72:20:f8:ae:
         e4:8a:8e:6d:bd:42:80:c5:77:fa:93:14:4a:4f:c5:a3:7a:da:
         ad:b3:f4:88:b6:e2:f8:5a:cc:76:16:66:d1:90:a5:ae:b5:ee:
         9f:f4:dc:d2:66:38:6f:d6:81:6a:58:04:e4:24:5f:13:25:b0:
         38:55:51:d1:4e:e4:b8:a6:2d:7b:48:8b:64:93:8b:1d:79:4a:
         d2:09:c3:ab:21:85:27:a1:69:91:ae:99:2f:d9:f6:d6:a0:20:
         7b:0d:f0:e9:6c:3e:e7:6b:ac:5e:84:94:fb:2c:37:e6:84:54:
         77:26:7e:95:ea:07:82:88:42:ee:6a:ac:b4:c0:c7:24:c5:22:
         03:5c:b6:43:4d:12:88:6c:a3:95:fb:f1:93:af:88:81:86:29:
         af:63:b4:01:32:b4:b3:ee:91:f0:30:06:b1:74:59:e0:28:47:
         0f:a3:14:b6:dc:b4:7d:ff:72:e8:13:b5:54:a3:b1:f4:e7:ac:
         c5:45:36:32
-----BEGIN CERTIFICATE-----
MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWE3006oTgBTFIU5/xCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDUyNjAwNDUxN1oXDTI4MDgyODAwNDUxN1owLzEtMCsGA1UEAxMk
YjE1ZjhmYjMtN2NmZC00NTkzLWFkYTAtYTIzMWVmMjUwMDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq90+IUVJw1Wx9Q/2rNKTaLALJFGwKjfEOoil
NN+tWe9EJ8/khVoBFiLnpWa8LzdmkotWg7W8MoBLlw9dOw1Nw8xRkALz/jd6zzFw
KYQbdJuRFNnAHnRfLJYWWVKBFqJLUFsr0bGIprH1sFuiQrhmxxHu6Fxb6u26VnN8
RfXfJVHQmcev1Eyf6yaa8CGZrqXxMK+pmhCs8DwRSqlcmh6ynlRq6cCmHkG9SvOs
t2PE8byHb06Bl1NoSVinsfIZpU50DmNJklin7vGOmgHnze+CCzAzDpKjxvVX+MKo
1JIVu6lqOGdJUh2jD2BObW4GWRB5bo1Nq2WyWdSiE4Kj3SteYQIDAQABo4IEBzCC
BAMwHQYDVR0OBBYEFPF+vk970bd59FqPWPh91XgL8MeWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9i
MTVmOGZiMy03Y2ZkLTQ1OTMtYWRhMC1hMjMxZWYyNTAwMTMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2IxNWY4ZmIzLTdjZmQtNDU5My1h
ZGEwLWEyMzFlZjI1MDAxMy9iMTVmOGZiMy03Y2ZkLTQ1OTMtYWRhMC1hMjMxZWYy
NTAwMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJwYIKwYBBQUH
AQcBAf8EGDAWMBQEAgABMA4wDAMEAsdUhAMEAMdUhjBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHRpUog25u
7zCRfFTCB8aW5MMEKaHVZMkdCDntPUkhuDOuaXipDw605PQYlWR9PeFv3hhiaA97
tCBctjO/3Wy5XuwYpnIg+K7kio5tvUKAxXf6kxRKT8Wjetqts/SItuL4Wsx2FmbR
kKWute6f9NzSZjhv1oFqWATkJF8TJbA4VVHRTuS4pi17SItkk4sdeUrSCcOrIYUn
oWmRrpkv2fbWoCB7DfDpbD7na6xehJT7LDfmhFR3Jn6V6geCiELuaqy0wMckxSID
XLZDTRKIbKOV+/GTr4iBhimvY7QBMrSz7pHwMAaxdFngKEcPoxS23LR9/3LoE7VU
o7H056zFRTYy
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:10 2026 by rpki-client