Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399.cer
File:                     2328a8c9-308b-4876-95dd-0dc937d46399.cer (raw, json)
Hash identifier:          ElCpg/EySNk8UpsKZSothMp6ki+UOPCDlv5IQ8wE2jw=
Subject key identifier:   AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D7EE631510D4C5C29C9D4D780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Apr 2026 18:57:14 +0000
Certificate not after:    Wed 12 Jul 2028 19:39:44 +0000
Subordinate resources:    AS: 402385
                          IP: 23.156.84.0/24
                          IP: 2602:f3fe::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:e6:31:51:0d:4c:5c:29:c9:d4:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr 13 18:57:14 2026 GMT
            Not After : Jul 12 19:39:44 2028 GMT
        Subject: CN=2328a8c9-308b-4876-95dd-0dc937d46399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:93:36:09:73:91:28:44:2d:33:7e:8e:1c:
                    9f:17:40:bf:bd:d0:71:da:d5:04:22:6c:be:1f:3b:
                    fa:38:4b:92:c2:f0:9a:36:4d:f7:58:84:b3:cb:32:
                    32:79:24:a3:73:64:ca:b8:7d:ed:ff:87:d3:96:da:
                    35:fb:c4:28:8b:01:fa:af:0e:ad:02:f8:1a:b2:87:
                    a6:54:e1:fc:a5:09:09:02:df:8d:c9:33:eb:60:f0:
                    de:27:ab:f1:7a:fa:24:00:1d:2b:d6:f7:b2:94:ef:
                    83:3a:de:00:2f:fa:c4:a3:1c:ec:10:47:87:f0:ef:
                    5a:05:3d:47:d5:88:16:e9:0b:71:27:07:c8:90:cc:
                    7d:2e:32:7b:da:5b:0c:9e:ad:f3:f7:87:b9:ee:09:
                    2a:31:ec:ac:6e:5b:7d:1d:28:77:3c:21:31:8e:8c:
                    2d:b2:60:8a:c5:83:85:e6:de:0e:2f:fb:40:15:ae:
                    ce:84:d5:4e:10:84:3e:af:90:89:06:30:5d:52:55:
                    62:50:2a:ea:48:a5:49:80:69:cc:7b:a6:86:ba:45:
                    70:1d:69:cc:51:49:94:cc:2d:68:eb:ce:3b:84:3e:
                    b7:cb:43:41:76:26:e6:e3:2d:98:07:07:a9:26:d4:
                    a6:5c:e8:9f:59:b9:bc:ce:fe:ed:78:1c:a7:6d:e0:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E8:6A:02:F0:41:05:8C:5D:47:A3:68:ED:92:2D:01:B4:76:F3:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2328a8c9-308b-4876-95dd-0dc937d46399/2328a8c9-308b-4876-95dd-0dc937d46399.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.84.0/24
                IPv6:
                  2602:f3fe::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402385

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ff:fb:bf:03:01:3e:3b:72:26:8d:bf:0f:7d:b7:8a:39:6b:
         0f:2a:e7:a3:95:67:f6:5e:39:9d:f1:fe:fb:cd:f2:e1:7f:0a:
         d7:2b:2c:45:e8:cc:8c:97:05:58:26:1f:18:79:56:7b:3e:e6:
         95:df:b4:7e:5c:8e:8d:00:f4:4f:ca:ef:b3:6f:94:25:60:36:
         50:bb:fa:a0:5c:9d:90:19:30:a4:55:46:38:90:0c:27:14:d0:
         a6:41:7f:e7:b8:95:fc:cc:9e:7d:ef:66:3c:31:e6:7e:b2:34:
         dc:e1:e2:2c:0d:8a:11:12:fc:25:d1:c3:25:bd:1f:3a:c0:57:
         df:55:09:df:36:36:15:6a:3b:69:66:4c:3b:e0:de:71:20:97:
         2b:bd:c7:0f:bb:ab:8a:48:61:e3:8c:a6:a1:75:34:e3:12:d3:
         6a:4e:65:08:89:41:99:dc:cd:95:84:36:7a:47:66:05:f0:46:
         d4:82:4c:cb:03:45:2d:ae:f8:48:3f:f1:c2:90:df:dc:4d:53:
         5a:e3:0f:82:0c:b3:e2:49:37:69:90:a3:97:90:63:9a:63:ad:
         d5:b6:81:62:ad:0e:ec:a3:98:f3:f4:bd:0e:f2:90:86:9a:63:
         54:8f:8c:dc:61:dc:20:0d:b6:d9:60:11:99:f6:23:65:b4:71:
         94:40:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:46 2026 by rpki-client