Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ca0924f-d037-45bd-81f7-1aae49137c4e.cer
File:                     8ca0924f-d037-45bd-81f7-1aae49137c4e.cer (raw, json)
Hash identifier:          Du0yiR0LWN9XnLFdcpl8KT9lilawpFk+OTayqqTj5aQ=
Subject key identifier:   18:F2:0F:6B:D2:11:D3:13:A5:15:ED:15:EC:E2:75:59:EA:57:27:B9
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D710E26E2EC3972C5BFA35180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ca0924f-d037-45bd-81f7-1aae49137c4e/8ca0924f-d037-45bd-81f7-1aae49137c4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ca0924f-d037-45bd-81f7-1aae49137c4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Apr 2026 19:56:26 +0000
Certificate not after:    Tue 11 Jul 2028 19:56:26 +0000
Subordinate resources:    AS: 33562
                          IP: 204.153.16.0/22
                          IP: 2604:b440::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:0e:26:e2:ec:39:72:c5:bf:a3:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr  8 19:56:26 2026 GMT
            Not After : Jul 11 19:56:26 2028 GMT
        Subject: CN=8ca0924f-d037-45bd-81f7-1aae49137c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:09:11:02:22:4f:34:21:26:e4:2b:67:de:
                    08:ee:b2:6f:c9:41:59:0a:5e:eb:30:b6:bc:9e:d2:
                    d9:b7:39:78:83:16:e0:98:7c:61:4a:7e:85:da:4b:
                    fb:8e:4d:bc:2e:83:f7:94:e0:07:1a:09:6c:85:1a:
                    35:d9:9a:6e:92:15:04:10:d0:fa:6d:54:53:1e:c0:
                    ee:8e:2e:ab:42:69:31:38:96:5a:7b:61:ea:8f:d4:
                    55:6a:e4:49:4a:31:ae:a5:28:d8:9f:d7:c4:7d:b4:
                    aa:8a:42:cb:1d:e4:44:27:ad:32:d7:21:7a:8c:6c:
                    98:ee:e3:78:2d:4b:1f:b3:28:24:a6:28:9f:1f:fe:
                    bc:08:c8:34:8a:d2:3f:2a:80:fc:36:66:3e:8a:4e:
                    5e:22:87:f7:43:40:00:fe:16:b7:18:f0:3a:9b:c8:
                    d7:fe:26:f2:fc:f7:e9:57:34:a6:4c:ae:22:53:6b:
                    62:be:01:96:10:27:1d:6f:3e:ae:ef:a6:20:1f:3d:
                    7e:d2:e1:70:b0:15:b8:c8:4c:3e:5c:8d:51:3d:de:
                    5b:bf:c8:ca:55:f0:10:84:f6:64:f1:94:8b:59:8c:
                    ea:ce:65:60:b6:bb:5a:f2:e5:9b:01:ab:95:36:36:
                    1b:33:f1:9f:c3:f1:2c:f7:06:d6:c5:66:f8:78:f1:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:0F:6B:D2:11:D3:13:A5:15:ED:15:EC:E2:75:59:EA:57:27:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ca0924f-d037-45bd-81f7-1aae49137c4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ca0924f-d037-45bd-81f7-1aae49137c4e/8ca0924f-d037-45bd-81f7-1aae49137c4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.16.0/22
                IPv6:
                  2604:b440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33562

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:10:b8:59:26:8c:b4:47:5f:ac:6b:f3:19:da:ab:c0:0f:f3:
         92:a4:c6:12:ac:8b:50:7d:83:38:d9:56:4d:02:27:2d:1c:9e:
         b7:20:3d:4e:55:8a:84:46:8d:b5:35:d3:c6:62:a8:c7:4a:f7:
         d7:86:c2:ca:d5:f8:00:99:db:00:c7:9e:85:e2:07:2f:dc:79:
         dd:40:f9:1d:ee:25:7b:db:6d:4c:42:fd:f7:3f:db:55:fc:a9:
         58:ec:fd:8d:f2:a4:7f:16:33:be:64:7d:47:65:1b:f0:7f:f2:
         73:e5:33:a6:8e:8c:c9:c4:a5:89:06:74:05:d3:2a:8d:1b:d0:
         2f:ae:a7:cb:5a:77:73:5a:25:59:36:88:d7:e8:ea:61:c2:20:
         d2:3d:4d:1c:75:5d:4d:1a:21:40:c0:d3:30:d1:90:e3:d0:ac:
         fb:55:68:d2:36:5c:b2:06:cd:41:47:b7:ad:f4:17:5a:4e:d7:
         ca:b3:73:cd:57:cf:f8:60:4d:ea:78:fb:ab:f6:cb:e9:29:d8:
         f9:24:3e:51:b2:41:09:30:99:49:56:a7:9d:9b:ce:56:df:b5:
         ef:c7:de:a2:4f:2c:ef:2f:d0:73:ae:9d:29:93:56:02:2d:dd:
         2e:94:1f:91:48:40:dc:18:a1:89:72:d4:47:0b:d6:9c:04:9c:
         4c:85:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:18 2026 by rpki-client