Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
File:                     291133eb-e436-4803-adab-f37835fc18e3.cer (raw, json)
Hash identifier:          Fu597JxUcv/v7+KeKbBOK8e1Dum8ZihEAtWlSnQC3yg=
Subject key identifier:   18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584EA66BF9B489DAA90A4DC86600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Jul 2026 15:30:15 +0000
Certificate not after:    Fri 03 Mar 2028 13:45:24 +0000
Subordinate resources:    AS: 11127
                          IP: 64.49.128.0/18
                          IP: 207.241.168.0/22
                          IP: 207.241.174.0 -- 207.241.178.255
                          IP: 207.241.185.0/24
                          IP: 2604:9580::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:6b:f9:b4:89:da:a9:0a:4d:c8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 28 15:30:15 2026 GMT
            Not After : Mar  3 13:45:24 2028 GMT
        Subject: CN=291133eb-e436-4803-adab-f37835fc18e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e2:f1:bb:0e:ba:b8:d4:67:b7:71:f1:6a:66:
                    97:8e:b5:a2:28:f4:66:e7:5e:d5:fc:23:dd:5a:26:
                    84:a3:63:e4:86:dc:c8:97:bc:be:ea:09:e4:27:6d:
                    80:75:35:4f:f5:3e:5b:e0:fb:89:23:52:c5:f9:b5:
                    e9:47:ea:c2:1f:29:29:06:f9:fb:48:5b:21:e7:f1:
                    4b:8e:9d:aa:fc:87:92:18:9a:eb:fa:e9:86:81:11:
                    b6:59:00:95:7e:45:55:20:c6:29:cf:cd:c6:3c:cd:
                    85:73:4f:ab:8a:04:0d:0a:b6:77:bd:ed:3e:92:05:
                    6a:3a:17:1f:92:5d:3d:93:d1:b5:e2:a2:82:60:08:
                    98:f5:f4:bf:00:31:99:93:72:6c:77:46:ce:b9:ac:
                    3c:ab:a5:12:de:a8:84:50:41:1c:20:1f:38:e1:fe:
                    7b:65:50:42:e1:e9:ef:2e:1b:5c:b0:70:b0:d9:d9:
                    19:2f:f9:49:aa:b6:cf:c4:03:77:ed:15:08:e2:ad:
                    bb:4f:37:32:32:c1:e7:a7:4b:6a:21:ad:98:e2:64:
                    ec:15:f3:7e:91:7a:3c:1d:38:9c:aa:f3:8f:7a:46:
                    40:2f:9e:f8:68:a0:7e:ef:78:61:64:89:4f:12:72:
                    f2:a0:c5:f2:87:49:ca:ea:36:21:19:bc:58:a2:0e:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.128.0/18
                  207.241.168.0/22
                  207.241.174.0-207.241.178.255
                  207.241.185.0/24
                IPv6:
                  2604:9580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11127

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:8b:17:0b:6d:f6:c2:27:80:e5:0e:58:97:38:91:76:5f:
         5e:16:2c:d0:6e:02:3e:d0:ee:2c:09:31:2e:dd:1f:f3:b7:2d:
         d8:e6:a6:e3:26:59:b0:07:10:51:5d:af:bc:82:0b:62:3d:e8:
         96:a1:d1:2b:51:04:18:ab:74:6c:1b:3a:52:2a:d0:51:68:e8:
         28:39:3d:5b:9b:c6:b9:ec:72:0b:40:03:26:2f:d0:25:76:80:
         ce:f7:81:27:48:fe:ac:06:7d:8a:8b:f6:48:79:86:a6:d9:14:
         16:9c:ca:a8:4b:46:70:cc:4a:c6:0a:c9:47:db:d1:c3:0b:e4:
         63:5a:86:db:46:6a:59:b3:01:af:7d:4c:88:77:99:f1:84:6b:
         a9:29:a5:4d:b1:68:e1:18:2f:bb:94:04:78:70:de:0a:c0:a0:
         55:7b:8a:e8:d3:d2:fa:24:9a:ff:1b:a3:92:8f:8b:3d:de:d6:
         d7:82:e3:c6:a2:48:7a:51:27:05:85:66:25:75:1f:33:3f:6a:
         17:b9:8a:c5:1d:f8:f7:c3:24:a9:be:0a:15:34:e9:b3:ff:29:
         ca:73:11:ef:ce:93:89:57:49:aa:38:d4:f5:e8:9b:24:e3:04:
         5f:d0:b7:ee:17:4c:a8:2c:b2:e2:f8:f5:a2:bf:58:9e:ec:67:
         72:94:09:cf
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWE6ma/m0idqpCk3IZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MDcyODE1MzAxNVoXDTI4MDMwMzEzNDUyNFowLzEtMCsGA1UEAxMk
MjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMxOGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveLxuw66uNRnt3HxamaXjrWiKPRm517V/CPd
WiaEo2PkhtzIl7y+6gnkJ22AdTVP9T5b4PuJI1LF+bXpR+rCHykpBvn7SFsh5/FL
jp2q/IeSGJrr+umGgRG2WQCVfkVVIMYpz83GPM2Fc0+rigQNCrZ3ve0+kgVqOhcf
kl09k9G14qKCYAiY9fS/ADGZk3Jsd0bOuaw8q6US3qiEUEEcIB844f57ZVBC4env
LhtcsHCw2dkZL/lJqrbPxAN37RUI4q27TzcyMsHnp0tqIa2Y4mTsFfN+kXo8HTic
qvOPekZAL574aKB+73hhZIlPEnLyoMXyh0nK6jYhGbxYog5eGwIDAQABo4IEQzCC
BD8wHQYDVR0OBBYEFBhSSTr87zPj8mSc88YLolBaDB1rMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y
OTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI5MTEzM2ViLWU0MzYtNDgwMy1h
ZGFiLWYzNzgzNWZjMThlMy8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVm
YzE4ZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwSAYIKwYBBQUH
AQcBAf8EOTA3MCYEAgABMCADBAZAMYADBALP8agwDAMEAc/xrgMEAM/xsgMEAM/x
uTANBAIAAjAHAwUAJgSVgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIrdzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQB2CIsXC232wieA5Q5YlziRdl9eFizQbgI+0O4sCTEu3R/zty3Y5qbjJlmw
BxBRXa+8ggtiPeiWodErUQQYq3RsGzpSKtBRaOgoOT1bm8a57HILQAMmL9AldoDO
94EnSP6sBn2Ki/ZIeYam2RQWnMqoS0ZwzErGCslH29HDC+RjWobbRmpZswGvfUyI
d5nxhGupKaVNsWjhGC+7lAR4cN4KwKBVe4ro09L6JJr/G6OSj4s93tbXguPGokh6
UScFhWYldR8zP2oXuYrFHfj3wySpvgoVNOmz/ynKcxHvzpOJV0mqONT16Jsk4wRf
0LfuF0yoLLLi+PWiv1ie7GdylAnP
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:53 2026 by rpki-client