Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
File:                     122e6c80-f523-4555-a85c-d2640af24cd2.cer (raw, json)
Hash identifier:          FH/TnRsRKWO8buCzDOQNOKOmT362JGQ2JUFi9jPR9As=
Subject key identifier:   D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D5FF2236B73D84AAB7E395FE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Apr 2026 16:51:15 +0000
Certificate not after:    Tue 06 Jun 2028 17:38:24 +0000
Subordinate resources:    AS: 402256
                          IP: 2620:8:f080::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:f2:23:6b:73:d8:4a:ab:7e:39:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr  2 16:51:15 2026 GMT
            Not After : Jun  6 17:38:24 2028 GMT
        Subject: CN=122e6c80-f523-4555-a85c-d2640af24cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:6a:01:89:0a:9f:69:65:ee:60:27:50:1a:
                    59:dd:95:c8:b7:37:6b:f1:b6:a6:a5:f9:bb:9b:a9:
                    43:ab:a4:af:c6:01:cd:d4:22:44:90:21:cb:50:7b:
                    5a:a1:8e:cd:2b:78:da:8e:e2:60:23:59:48:70:77:
                    d6:a1:12:e2:0b:f1:da:13:a6:8a:03:55:dc:48:ab:
                    73:6f:63:5b:ad:45:cc:eb:1f:d7:19:5c:e0:84:0d:
                    e5:5f:09:5b:71:45:f8:97:c9:2a:1e:60:04:30:66:
                    7a:aa:8c:eb:6c:00:66:1f:8c:e5:aa:d7:aa:ec:65:
                    4b:69:c0:ef:fe:40:49:8a:83:98:69:37:da:b1:9d:
                    16:a5:c4:d1:d2:87:88:13:43:f5:3a:a5:fa:be:89:
                    0e:55:f2:80:16:65:f7:d9:52:2c:50:55:17:fd:7f:
                    d9:8b:39:0c:8a:6e:e9:ef:f0:77:40:02:71:a5:0a:
                    ae:45:0f:e4:20:c2:f0:89:bd:04:10:9c:61:46:92:
                    b7:4e:0d:b8:f6:04:3b:78:5d:b1:a0:14:a1:77:32:
                    c5:8f:d4:76:ec:23:a5:ea:30:fb:2f:a0:5f:82:f7:
                    23:f5:41:d5:52:14:52:e3:ac:1f:76:29:4d:3d:c0:
                    6f:d8:17:2e:ef:15:1a:b9:05:50:c4:cd:47:2f:00:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:f080::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402256

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d9:7b:49:23:c9:d5:a2:79:50:dd:a1:b2:a2:9a:04:8e:88:
         80:fb:bc:9f:ec:d2:2f:1d:cf:91:b9:7e:8c:e1:44:4d:54:5a:
         8d:fa:77:da:4f:e8:34:ea:c5:4f:27:aa:31:6c:b3:1b:88:62:
         93:7a:ea:3d:d6:d2:cd:8f:ea:1b:9b:b4:54:8a:43:28:cd:b2:
         2f:3c:05:b0:6e:90:8c:00:11:b8:7e:ad:2a:9f:40:43:86:34:
         42:6e:e2:6c:35:83:fc:fe:07:ff:05:73:a9:09:4e:31:9a:e3:
         65:79:be:5f:84:89:74:c1:e5:ba:6d:06:bd:17:23:05:2a:0b:
         28:b8:85:f3:a0:19:1e:33:c7:7b:4f:84:f8:8c:d1:8e:fd:79:
         72:a0:94:01:55:e6:d6:4b:ac:94:ac:ac:60:24:c5:17:71:f1:
         b8:35:38:58:5f:52:64:ab:f8:09:82:60:07:18:50:9f:13:7e:
         5d:23:aa:8a:85:b1:d3:18:6c:d7:f4:4c:b5:96:84:0c:0a:e8:
         66:1a:00:3d:13:5e:a3:56:90:6c:4a:14:ae:41:c1:e4:41:d9:
         04:2a:cc:c4:a9:08:31:7d:1f:b6:8b:79:15:8e:31:a7:01:32:
         57:07:66:45:42:9a:b5:5e:fa:2b:97:7d:73:44:64:51:cd:98:
         df:e9:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:15 2026 by rpki-client