Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.cer
File:                     c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.cer (raw, json)
Hash identifier:          OdEvBQzMajYdDBjZd7XpNZ48RT+/x3byIFkPlU9cKfk=
Subject key identifier:   C0:74:67:0C:23:3A:E6:90:0D:2F:55:B9:06:94:32:F6:29:D0:86:47
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584CEAFA84E6258C3285C91B14C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Feb 2026 19:18:33 +0000
Certificate not after:    Wed 24 May 2028 18:18:33 +0000
Subordinate resources:    AS: 896
                          IP: 23.247.240.0/22
                          IP: 2606:f0c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:fa:84:e6:25:8c:32:85:c9:1b:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Feb 19 19:18:33 2026 GMT
            Not After : May 24 18:18:33 2028 GMT
        Subject: CN=c8dddc8e-9bc3-46e4-a1dc-ff5066958d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:d3:1b:e3:b7:60:66:70:bc:48:cd:9f:8d:
                    b8:d8:3c:75:40:be:13:98:fa:b8:3c:2e:43:b2:56:
                    e3:02:38:51:3a:11:fe:a7:ca:e2:f7:c8:e0:ed:31:
                    51:64:13:c9:2c:4d:b8:d1:0f:28:cb:b1:e5:48:13:
                    ba:9d:eb:55:73:69:ba:55:f1:2e:00:87:5a:90:cd:
                    ce:81:ea:d5:1f:a5:68:bc:ca:26:24:d1:fa:55:76:
                    83:bf:6c:d7:50:2c:e1:e5:28:dd:5f:e9:32:2b:30:
                    c8:9b:95:3d:e8:0a:36:d4:2c:77:a5:45:51:cc:23:
                    d0:a4:90:db:40:eb:fd:d5:f6:d5:1d:41:15:ca:a9:
                    a1:15:59:56:f8:33:21:98:4c:01:95:1e:0f:48:6f:
                    2c:bc:43:a6:8f:24:4b:71:c9:47:9e:fb:36:c2:3f:
                    d4:46:4e:04:67:26:fd:b6:cd:9c:bc:80:cf:1c:71:
                    7e:af:46:6e:43:47:78:e1:e3:e9:12:e0:f8:98:77:
                    64:18:61:55:05:ad:b2:75:3b:53:6b:2a:c2:f1:93:
                    d6:89:54:14:0f:64:90:ed:c8:c0:03:65:e7:e9:77:
                    dd:2a:84:29:b8:3e:29:f3:ed:0e:4b:e5:92:6a:e5:
                    2e:e7:a9:37:f8:55:fc:f5:41:8b:0f:ad:bf:11:ae:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:74:67:0C:23:3A:E6:90:0D:2F:55:B9:06:94:32:F6:29:D0:86:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83/c8dddc8e-9bc3-46e4-a1dc-ff5066958d83.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.240.0/22
                IPv6:
                  2606:f0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  896

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:99:65:70:11:91:74:68:03:4b:b0:9b:6a:88:a5:a4:b4:dc:
         1f:45:b0:9d:90:7d:b0:b3:3c:eb:9f:5c:32:bc:10:da:8b:79:
         da:ab:ea:3d:23:de:c6:2b:92:03:8e:51:fb:d0:78:44:f9:87:
         c9:ce:0b:6a:c4:25:ef:6c:10:5d:2b:71:39:4b:b6:d5:3a:dc:
         a2:89:8e:63:16:ca:99:48:b3:29:fa:70:7c:0a:59:8a:5c:92:
         71:20:6c:5f:7d:3b:22:bd:fd:3e:85:f2:02:9a:8b:78:3d:fd:
         7f:35:42:22:b4:57:41:79:b9:cc:00:0e:85:48:5f:df:c8:91:
         d9:61:a7:a0:7c:a7:62:1e:d1:f7:b9:59:92:2d:47:3d:14:24:
         b4:c5:ba:f9:28:f2:84:04:4d:49:d8:d4:57:86:23:ce:3d:70:
         f1:04:f0:0b:82:cb:fa:1c:41:bd:86:cc:6c:47:fc:14:2c:02:
         1d:f0:e3:7f:95:39:a3:85:8d:2f:a2:ad:98:c4:9a:f8:d3:e5:
         0a:79:14:8a:31:1a:f4:23:55:35:aa:69:df:ea:75:27:7f:1f:
         73:90:9b:ee:e4:b3:68:9f:7b:1c:61:b7:1c:76:0b:1d:22:78:
         56:8e:24:df:6e:93:ff:3e:57:4e:34:d1:cb:73:7f:a5:ae:be:
         c2:64:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:21:12 2026 by rpki-client