Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d043b1c9-205b-47f4-aa2b-f53427117348.cer
File:                     d043b1c9-205b-47f4-aa2b-f53427117348.cer (raw, json)
Hash identifier:          gnTSdJFQh6kzPi5iEIHcX0QfnEdT2sGPWMxOArcEgeQ=
Subject key identifier:   7E:27:81:EE:E3:3A:91:E4:BA:54:E8:1C:10:F0:1C:81:AF:83:19:E9
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584CED5CDAA4E344D05F10FFB2E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d043b1c9-205b-47f4-aa2b-f53427117348/d043b1c9-205b-47f4-aa2b-f53427117348.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d043b1c9-205b-47f4-aa2b-f53427117348/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Feb 2026 15:48:18 +0000
Certificate not after:    Tue 23 May 2028 06:30:55 +0000
Subordinate resources:    AS: 22585
                          IP: 23.146.84.0/24
                          IP: 2602:f450::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:5c:da:a4:e3:44:d0:5f:10:ff:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Feb 20 15:48:18 2026 GMT
            Not After : May 23 06:30:55 2028 GMT
        Subject: CN=d043b1c9-205b-47f4-aa2b-f53427117348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:26:3d:52:14:ee:67:fb:62:7c:0a:ec:b8:
                    67:41:f2:7c:d4:5f:41:f6:24:9c:54:8b:9d:78:79:
                    c4:75:9e:31:c2:19:ed:06:b6:06:73:a5:36:86:61:
                    f6:98:be:4b:ff:e1:9b:80:64:a0:21:80:c7:33:de:
                    9d:35:d6:f9:d8:db:ce:eb:8a:c4:59:8c:e8:7f:3d:
                    bd:c9:84:36:18:36:be:2e:35:6f:45:bb:f9:f2:b0:
                    13:7b:eb:7a:41:5a:86:1b:fe:ac:7b:a5:15:67:71:
                    9a:22:3a:32:aa:e0:8f:d2:a6:0d:84:03:86:44:30:
                    2a:13:1a:07:b6:e2:e8:24:0b:fa:10:12:bb:73:73:
                    c1:a5:3a:ff:8e:34:c7:4f:37:bc:e8:58:d8:a1:22:
                    66:d8:f4:fb:8c:8e:62:34:86:3e:5b:5f:ed:ee:27:
                    7b:45:a6:14:cf:ff:cd:ef:26:69:76:c9:c9:5d:4f:
                    d3:b0:6c:88:a2:95:d0:4d:58:0c:64:c7:45:9f:f1:
                    76:e3:ae:70:cf:40:32:7d:29:d9:bf:78:85:b7:8b:
                    b3:72:78:fc:e6:49:a5:3a:d1:f0:60:2c:2e:ec:f5:
                    5c:30:4a:09:37:4c:63:70:bf:ea:d6:91:1e:9b:cd:
                    f7:49:01:3f:fc:af:27:01:4d:d2:aa:16:cf:65:5e:
                    63:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:27:81:EE:E3:3A:91:E4:BA:54:E8:1C:10:F0:1C:81:AF:83:19:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d043b1c9-205b-47f4-aa2b-f53427117348/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d043b1c9-205b-47f4-aa2b-f53427117348/d043b1c9-205b-47f4-aa2b-f53427117348.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.84.0/24
                IPv6:
                  2602:f450::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22585

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:18:59:c0:61:4d:b6:1a:c2:11:45:f2:13:b8:73:90:5f:
         3b:d5:05:40:ef:11:b5:27:96:ab:b7:5a:5f:4b:58:eb:48:95:
         ac:99:c4:60:7a:2e:46:57:d9:22:2b:db:ab:fd:a0:11:73:d7:
         b2:16:71:18:84:21:5c:b8:94:66:70:d8:d6:00:72:06:50:ec:
         05:39:21:88:ad:2f:70:27:1a:ee:38:2a:31:00:67:24:68:25:
         af:ba:5c:3c:cf:13:75:bc:ec:3f:0b:eb:0d:f6:07:a8:7f:6b:
         5b:e1:90:a1:18:c3:09:34:6a:a7:d2:a4:6a:75:b0:c2:94:a3:
         77:c2:37:e9:22:c2:30:76:53:0d:80:97:64:c1:87:fa:7d:32:
         14:3e:20:c1:8b:c9:c3:b9:8a:7a:c5:7a:8f:f5:c1:b6:f9:da:
         09:cf:cc:f0:75:71:3f:cb:38:a8:bf:06:7e:e2:0c:18:94:24:
         9b:75:0f:24:a7:6f:50:8e:38:1c:a1:49:a2:6e:52:97:d3:9a:
         0a:08:bd:20:c9:66:e4:68:03:fc:f6:5a:c6:b8:e1:7d:c3:d3:
         73:38:a8:8d:9d:47:e9:8a:47:9f:2b:1d:dd:0d:54:1e:58:f3:
         7c:72:f8:46:26:c2:3f:7c:8d:50:e8:b8:aa:10:00:a4:af:03:
         fe:86:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:31 2026 by rpki-client