Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer
File:                     5f4e01d2-e3ef-4e93-a304-b877c13a2744.cer (raw, json)
Hash identifier:          AYNaKLXGPDnARf34CFjxOqlOLpQg+zxpwYHBVgiMXG8=
Subject key identifier:   17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584FB9343822781F6D1C9D954FE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Nov 2026 01:45:12 +0000
Certificate not after:    Tue 06 Feb 2029 01:45:12 +0000
Subordinate resources:    AS: 1842
                          AS: 5663
                          IP: 130.11.0.0/16
                          IP: 130.118.0.0/16
                          IP: 136.177.0.0/16
                          IP: 144.47.0.0/16
                          IP: 152.61.0.0/16
                          IP: 192.41.204.0/24
                          IP: 192.41.213.0/24
                          IP: 192.48.124.0/24
                          IP: 192.55.108.0/24
                          IP: 192.58.223.0 -- 192.58.225.255
                          IP: 192.102.88.0/24
                          IP: 192.102.216.0/24
                          IP: 192.146.254.0/24
                          IP: 192.153.11.0/24
                          IP: 192.160.139.0 -- 192.160.141.255
                          IP: 198.187.220.0/24
                          IP: 199.242.141.0/24
                          IP: 204.68.149.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b9:34:38:22:78:1f:6d:1c:9d:95:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Nov  4 01:45:12 2026 GMT
            Not After : Feb  6 01:45:12 2029 GMT
        Subject: CN=5f4e01d2-e3ef-4e93-a304-b877c13a2744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:8e:37:b9:7d:8f:da:67:21:4f:ad:41:9b:
                    0c:6c:fc:0e:63:81:d3:44:aa:30:24:84:d8:f9:59:
                    93:c4:a0:e4:6a:e0:a1:96:a1:ea:65:97:5d:f2:0b:
                    ba:e1:35:ed:85:e3:74:79:b6:60:43:75:01:d9:cc:
                    88:0a:25:cb:ec:b6:f7:6e:d4:74:42:59:4e:0a:1a:
                    9b:ae:b7:af:0a:ac:8d:f8:64:8a:56:1a:11:24:94:
                    66:1a:ce:91:25:dc:15:40:35:d1:9e:39:69:78:d6:
                    c7:cd:3e:6c:36:0b:1e:a1:bc:be:dc:f8:83:58:05:
                    c9:c6:d9:5c:6a:42:23:b5:73:f2:44:34:36:65:e8:
                    e3:60:d4:a2:bc:28:c0:b5:6f:d9:5d:95:41:59:a3:
                    c1:f3:e9:00:89:c4:03:7a:18:fb:32:fe:cb:c1:f8:
                    e2:d1:bc:04:72:cb:94:d7:31:38:6a:b9:76:88:ea:
                    f6:be:ce:1e:8e:88:75:27:4e:e5:de:e2:74:de:b3:
                    d7:f3:60:df:ac:9c:47:f6:d1:cb:78:af:82:c6:f8:
                    70:bc:dd:e8:78:e2:ce:5c:46:7c:ed:74:a1:13:ea:
                    0d:c4:43:25:7a:75:dd:c5:1c:60:b5:84:b5:82:f2:
                    8d:f1:ff:6b:06:06:63:1f:2c:37:67:c9:5c:03:14:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BF:76:F7:EF:02:34:BD:79:28:F4:F5:10:EB:08:0F:92:94:C5:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5f4e01d2-e3ef-4e93-a304-b877c13a2744/5f4e01d2-e3ef-4e93-a304-b877c13a2744.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.11.0.0/16
                  130.118.0.0/16
                  136.177.0.0/16
                  144.47.0.0/16
                  152.61.0.0/16
                  192.41.204.0/24
                  192.41.213.0/24
                  192.48.124.0/24
                  192.55.108.0/24
                  192.58.223.0-192.58.225.255
                  192.102.88.0/24
                  192.102.216.0/24
                  192.146.254.0/24
                  192.153.11.0/24
                  192.160.139.0-192.160.141.255
                  198.187.220.0/24
                  199.242.141.0/24
                  204.68.149.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1842
                  5663

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:77:ef:d8:59:d8:72:90:1c:a2:a9:4a:b6:c2:43:ce:7f:78:
         b8:1b:bb:86:0f:66:2b:77:38:cc:e0:31:48:53:8c:7c:34:ca:
         31:20:d5:13:7d:94:dd:d7:4a:53:41:63:5c:a4:b0:d9:01:4e:
         d1:07:e4:d6:d7:86:51:ad:5b:99:c7:b2:e8:bb:66:cb:e9:bb:
         71:3f:58:86:dd:87:94:03:eb:ac:76:d9:90:71:a2:be:05:1c:
         83:00:e3:5f:7a:e5:33:6a:35:42:1c:b0:e7:37:db:07:0f:88:
         89:83:c6:4f:09:10:3e:51:00:b8:01:55:cd:d2:04:17:03:9f:
         60:77:6a:75:2f:38:61:8b:0a:dc:24:22:1f:0a:f0:0a:7f:4c:
         d0:02:27:32:35:f7:42:0e:09:24:24:62:02:72:1b:8c:53:1f:
         bc:63:47:bc:5d:b1:fc:17:6f:c0:4e:bc:ae:aa:b1:e8:0a:53:
         25:95:e0:ed:5e:ad:df:50:6a:5c:67:62:36:69:ff:e3:75:8d:
         ef:03:8f:0d:f0:c6:be:ae:f0:91:f8:cb:77:9c:51:01:32:25:
         4e:16:ba:1f:82:5e:1e:b6:9a:2d:da:83:66:b8:17:c7:e0:b4:
         7d:9a:32:76:34:76:81:cb:fd:4b:4b:0d:d9:77:98:48:ec:b2:
         b7:82:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:57 2026 by rpki-client