Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6d688f3-aedc-4387-aa49-73afb88e36dd.cer
File:                     d6d688f3-aedc-4387-aa49-73afb88e36dd.cer (raw, json)
Hash identifier:          cwkjtLyp7K5EwMfRTprFVtqBIyJOICJbqvF2/lEhrqI=
Subject key identifier:   CF:FA:07:CB:14:C6:D9:7A:6D:4F:87:CA:38:08:87:15:8E:01:26:4E
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584CF6EE58811E74BC58C43B4A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6d688f3-aedc-4387-aa49-73afb88e36dd/d6d688f3-aedc-4387-aa49-73afb88e36dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6d688f3-aedc-4387-aa49-73afb88e36dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Feb 2026 02:03:44 +0000
Certificate not after:    Mon 29 May 2028 01:03:44 +0000
Subordinate resources:    AS: 21566
                          IP: 23.183.40.0/24
                          IP: 2602:f955::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ee:58:81:1e:74:bc:58:c4:3b:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Feb 24 02:03:44 2026 GMT
            Not After : May 29 01:03:44 2028 GMT
        Subject: CN=d6d688f3-aedc-4387-aa49-73afb88e36dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:0a:c2:c8:64:d6:09:c1:8c:7f:75:d9:dc:
                    b0:e8:c6:90:cd:5f:be:4c:99:31:33:3e:de:ee:dc:
                    0f:af:df:b3:18:54:cb:73:d7:9d:67:9d:85:4d:29:
                    ef:71:31:62:a9:47:e2:ce:35:6f:76:3b:07:73:06:
                    19:fa:05:98:92:4f:2b:6a:07:a5:ef:11:2f:22:ad:
                    3a:f2:ea:49:cf:4d:7d:b0:3a:13:1e:7c:b5:4b:38:
                    72:a3:7e:e6:c8:25:49:12:a5:e2:9e:1a:5e:18:a1:
                    0c:b7:80:5b:1d:f6:e5:a8:de:b6:c7:56:ea:a9:42:
                    69:99:8b:06:ef:f8:d5:06:cc:cb:66:3a:2b:a9:5a:
                    51:21:7c:c2:b3:6a:96:d3:fa:26:e3:a9:da:e9:ab:
                    3e:f8:de:4f:c1:ff:0f:c1:3e:bb:61:a9:63:65:86:
                    b2:94:14:36:0f:df:11:91:ee:a6:d9:4c:f5:54:ee:
                    69:cf:a9:f1:fb:07:b6:c7:00:ed:58:ef:e2:95:6f:
                    ea:4f:65:02:f0:b6:c9:d4:d0:e9:40:42:44:14:24:
                    fe:21:e8:a0:a6:21:62:f2:00:37:03:01:af:86:8d:
                    1b:ab:59:e9:00:dc:81:c9:12:48:b3:e8:cd:ff:19:
                    09:94:c0:7a:50:47:ba:68:06:ba:e8:f1:4f:aa:e8:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:07:CB:14:C6:D9:7A:6D:4F:87:CA:38:08:87:15:8E:01:26:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6d688f3-aedc-4387-aa49-73afb88e36dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6d688f3-aedc-4387-aa49-73afb88e36dd/d6d688f3-aedc-4387-aa49-73afb88e36dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.40.0/24
                IPv6:
                  2602:f955::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21566

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:d4:70:80:1a:04:4d:55:a6:16:21:9b:d3:9a:00:7a:5e:
         4f:45:84:bc:80:ae:13:dd:b4:aa:76:57:56:d1:d3:84:95:a6:
         c7:5e:4d:f8:a3:4c:d1:21:d8:91:20:a9:2d:82:8a:4c:65:10:
         dc:d5:bc:9c:91:62:f1:77:f7:b9:bc:95:aa:95:c4:97:e8:f0:
         83:fb:f1:fc:50:51:60:37:e7:b8:8d:f0:ec:66:81:9c:9b:c1:
         54:e7:61:a7:f4:44:a3:6f:f2:8e:b8:07:26:d2:be:e9:83:14:
         b8:98:b1:f2:e2:4a:bf:35:a4:a7:3b:42:79:30:9a:9f:f7:1c:
         30:5c:eb:76:33:73:f2:c6:31:01:c9:de:05:a5:38:11:3f:32:
         d8:71:f6:6a:a3:fd:66:f4:8b:6e:6a:76:de:ee:09:f3:55:c3:
         5f:55:9b:b1:db:2f:89:34:b5:3a:a6:8d:6b:1e:6b:08:76:44:
         8e:5e:32:cf:d3:6f:94:85:f6:06:32:bb:aa:21:a7:b7:0a:d6:
         76:08:c9:aa:23:45:88:09:4a:05:e3:27:35:8d:7c:df:33:d8:
         73:af:78:c2:49:36:29:2e:a1:84:88:d1:1d:e0:63:0f:e7:cb:
         10:b5:58:86:79:9d:33:ab:17:51:13:9b:b0:90:21:a1:77:2c:
         cb:b0:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:22:14 2026 by rpki-client