Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer
File:                     1407f58d-27a8-42a5-b73e-1fe35081c6df.cer (raw, json)
Hash identifier:          0uyMSFdTpDdRGMxkO7926TQ5NgRmtWH52UgTMHhDdbo=
Subject key identifier:   A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584E03B742BF755108305CD21980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 31 May 2026 08:45:11 +0000
Certificate not after:    Sat 02 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 32586
                          IP: 52.129.28.0/22
                          IP: 52.144.27.0/24
                          IP: 148.66.40.0/21
                          IP: 168.245.238.0/23
                          IP: 173.45.192.0/19
                          IP: 192.107.144.0/24
                          IP: 199.102.128.0/22
                          IP: 204.58.15.0/24
                          IP: 208.103.158.0/24
                          IP: 2604:dc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:03:b7:42:bf:75:51:08:30:5c:d2:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 31 08:45:11 2026 GMT
            Not After : Sep  2 08:45:11 2028 GMT
        Subject: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:b8:cf:cc:cc:56:93:54:b3:1e:90:b6:b3:
                    1b:a1:f6:5c:e3:b7:37:4c:63:a2:99:20:33:d3:b4:
                    5a:52:ab:05:c1:c2:ae:51:29:e7:e3:17:55:58:90:
                    72:2d:2c:cd:d0:f8:71:1b:38:62:b0:68:83:94:eb:
                    f0:9f:4d:ec:b5:5f:c3:b6:9b:bd:8c:31:b2:23:07:
                    ba:92:99:16:21:1f:5f:db:8b:3a:23:c6:a8:0b:16:
                    4d:ff:be:13:bb:9c:b3:a7:1a:89:3b:3d:f0:ea:3a:
                    dd:dc:5b:e2:8d:e6:bb:7b:f4:f8:2f:12:aa:f1:16:
                    e4:52:38:c4:73:31:bc:52:d3:32:0d:80:f8:e0:45:
                    f6:97:f4:99:3d:b1:84:17:ed:ee:dc:d3:ce:5d:b7:
                    3c:ac:df:a6:ba:ba:75:7a:8e:7a:25:86:48:f3:56:
                    2c:46:26:46:dd:de:ac:9c:21:be:a1:c4:5a:c2:fe:
                    8d:01:15:ee:b1:28:3a:13:54:54:09:b8:67:4c:80:
                    4c:ae:e3:ff:6a:bf:aa:1d:6d:aa:3d:42:63:e7:15:
                    e8:83:d8:f4:8c:45:13:6f:41:3e:3b:cc:8f:61:e9:
                    43:2b:37:67:fe:6b:ee:5e:72:5c:38:1b:08:e7:79:
                    d1:eb:b9:07:6c:27:e2:0c:c5:6e:3d:16:a3:bc:54:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.28.0/22
                  52.144.27.0/24
                  148.66.40.0/21
                  168.245.238.0/23
                  173.45.192.0/19
                  192.107.144.0/24
                  199.102.128.0/22
                  204.58.15.0/24
                  208.103.158.0/24
                IPv6:
                  2604:dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32586

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:e0:e8:52:a5:ce:01:e8:42:9d:d1:5e:52:44:a0:65:58:
         3e:78:55:d3:5c:66:09:97:9f:e1:30:6f:58:8b:23:6e:28:e7:
         4f:6e:85:6c:95:07:42:a1:2b:a5:bd:c0:e4:09:77:9c:0f:0d:
         90:a3:fe:3e:ac:c1:88:88:86:0e:20:df:63:2b:71:8e:e3:5e:
         49:44:fa:c5:75:9d:22:f3:ad:52:16:d3:b1:03:d5:0d:bb:93:
         07:68:88:da:5c:6a:3a:9d:c9:c0:c0:8d:cd:d6:ff:54:ee:36:
         92:e9:19:b3:5d:09:05:9d:9d:2e:c2:e8:97:63:1d:b1:18:6d:
         7c:f0:39:da:79:13:7c:3f:47:82:c1:d5:e0:7a:c2:cc:36:1c:
         c9:95:aa:47:40:36:47:cc:52:6f:4b:01:01:ef:92:9b:9b:b2:
         70:9e:91:a7:73:b3:46:c6:99:31:df:88:e6:51:e1:81:d1:d8:
         28:b1:ed:70:15:d7:8d:88:5f:63:31:32:56:e9:c4:87:7c:f2:
         92:86:49:2a:c1:ce:66:d6:cb:bd:fa:a8:d2:83:60:2b:b3:c8:
         05:5f:eb:95:0b:47:f2:a8:cc:02:59:fb:ba:de:6c:5a:70:79:
         fc:b3:bd:8c:d3:a9:d8:d9:71:93:4e:83:3f:5b:33:53:bb:6c:
         e1:88:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:55 2026 by rpki-client