Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
File:                     028c0596-c3dd-44df-9761-677e68794c69.cer (raw, json)
Hash identifier:          86LYlEnd2YSkXlsuy2qp8AXMF3OKEDwIWjX14q66eEQ=
Subject key identifier:   D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584E280226CEFC9E4D1235C41E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Jun 2026 08:45:11 +0000
Certificate not after:    Fri 15 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 14371
                          AS: 26145
                          IP: 65.18.204.0/22
                          IP: 66.171.40.0/21
                          IP: 68.235.64.0/18
                          IP: 104.219.196.0/22
                          IP: 162.254.64.0/22
                          IP: 205.149.144.0/20
                          IP: 206.223.125.0/24
                          IP: 208.77.24.0/22
                          IP: 209.191.192.0/19
                          IP: 2001:504:29::/48
                          IP: 2600:6400::/28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:02:26:ce:fc:9e:4d:12:35:c4:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 13 08:45:11 2026 GMT
            Not After : Sep 15 08:45:11 2028 GMT
        Subject: CN=028c0596-c3dd-44df-9761-677e68794c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:d2:35:50:54:9b:cf:20:5e:56:63:a4:22:
                    3c:22:a1:ed:c0:0d:00:46:c9:77:45:40:bb:ec:6b:
                    65:00:aa:06:69:fe:20:2f:bc:43:f2:62:31:58:cc:
                    06:f8:22:c5:2e:ca:0e:32:2d:52:75:6d:47:7e:9e:
                    0e:5f:dc:9d:94:ea:72:31:7d:1e:a4:9b:f8:43:26:
                    90:ed:e9:fe:7a:70:8e:74:8c:10:aa:ad:05:66:7c:
                    22:fa:07:ff:aa:82:44:12:2a:6d:79:0c:e5:fc:1d:
                    a2:d9:7c:e8:cb:6d:9c:36:6e:05:e7:02:19:3b:64:
                    ae:c2:6e:a9:99:6c:49:e3:6d:83:b1:19:f6:4d:dd:
                    70:00:8c:5c:df:13:a3:0a:b6:62:f3:ea:85:5c:04:
                    ed:c7:f4:9c:e2:d0:c1:c4:e8:59:85:ba:11:ec:60:
                    28:1d:fa:96:61:6e:fd:45:32:2c:a8:8a:96:51:f8:
                    3a:b3:02:d4:3a:7f:31:e9:42:f8:43:1f:c6:9d:74:
                    45:34:84:a9:0c:56:b4:e3:c1:51:28:8c:48:25:71:
                    a8:86:0d:eb:1e:4b:15:0d:5b:72:7d:b3:36:8a:37:
                    db:e6:d1:d3:f2:33:7b:d1:09:a3:38:ee:01:ee:d4:
                    5e:2e:24:41:a5:39:a2:77:66:b8:d7:f2:68:07:55:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.18.204.0/22
                  66.171.40.0/21
                  68.235.64.0/18
                  104.219.196.0/22
                  162.254.64.0/22
                  205.149.144.0/20
                  206.223.125.0/24
                  208.77.24.0/22
                  209.191.192.0/19
                IPv6:
                  2001:504:29::/48
                  2600:6400::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14371
                  26145

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:54:63:e7:57:c9:12:b3:87:35:2a:00:5e:eb:8b:f9:2c:ae:
         4a:e5:4b:70:b1:a7:a1:fb:d9:fe:30:e1:ab:ce:e4:c1:5f:7d:
         e1:5d:a1:c5:cc:a9:07:3a:43:04:78:7f:51:ee:58:91:94:5a:
         21:f9:6d:a2:37:5b:4a:cf:07:8e:d7:73:1d:03:ca:53:ae:16:
         69:7c:6d:3a:89:4b:ce:24:9c:c3:f3:5d:82:6e:e2:be:62:96:
         97:6e:87:db:1b:eb:fb:51:80:0f:97:96:e7:7f:b8:2c:0a:2d:
         6c:24:c7:32:42:54:ba:57:3a:e5:3a:a0:07:62:13:bc:e4:a5:
         84:c3:e3:8a:fd:79:65:8a:ea:8e:51:21:30:8a:c1:6d:7a:9e:
         00:19:9e:8e:02:60:d4:a1:66:24:bc:0d:bf:72:4a:d5:33:a4:
         9e:08:65:d7:80:75:b4:f0:35:f5:af:5e:48:0d:9e:96:59:15:
         85:c4:19:48:44:09:81:1b:e2:87:1c:fe:13:26:79:17:48:db:
         9c:a5:3f:36:b2:e3:ad:73:5d:9d:a6:75:a3:90:a2:ea:bd:a6:
         e2:74:86:ef:ea:10:fa:71:4a:57:4a:d6:94:17:a3:58:a5:25:
         e4:c2:4f:7a:c1:f3:85:28:fa:3e:1d:a3:25:27:a1:1a:c8:f2:
         09:4d:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:45:49 2026 by rpki-client