Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer
File:                     7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.cer (raw, json)
Hash identifier:          nFRZb+2/eAUUWDR6Is3eGJdye5QsTKvz2cpyyWsjLno=
Subject key identifier:   6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584FA9BBAD91523C3272CECD6B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Oct 2026 12:45:12 +0000
Certificate not after:    Wed 31 Jan 2029 13:45:12 +0000
Subordinate resources:    AS: 401869
                          IP: 142.248.88.0/23
                          IP: 2602:f5b9::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a9:bb:ad:91:52:3c:32:72:ce:cd:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Oct 29 12:45:12 2026 GMT
            Not After : Jan 31 13:45:12 2029 GMT
        Subject: CN=7507a0f9-2e97-4b0c-902e-44f0f1c62a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:03:21:b6:60:34:ad:91:26:08:53:1c:4f:
                    18:77:61:ad:40:19:e6:62:66:42:04:30:35:de:a5:
                    b7:25:05:38:a7:59:f3:04:57:dc:76:44:77:39:77:
                    13:03:ac:92:98:45:05:b4:8f:a0:75:8b:be:39:c2:
                    29:ef:7e:8b:13:cb:57:9e:ef:6a:88:6f:ba:d1:d1:
                    14:de:2c:79:de:5c:78:38:a4:75:49:85:41:f9:02:
                    13:7e:b5:8c:5b:6c:af:96:71:a0:1b:88:97:2d:ff:
                    32:82:21:cd:d8:9b:5f:2c:5e:e9:2b:0d:51:c8:bc:
                    6d:df:fc:d8:5a:1c:13:95:73:42:32:42:66:56:ef:
                    b6:58:1e:88:ed:f5:90:20:c4:88:fb:09:97:70:d9:
                    78:2a:8f:b6:4d:e6:79:0b:fb:95:9f:cf:94:16:a3:
                    f8:e3:25:4d:b5:a6:25:8b:2e:aa:45:b1:ac:4e:7c:
                    ca:1d:64:f2:5b:6f:19:4d:67:cc:56:65:7d:52:3d:
                    06:1b:e2:e4:d7:7e:26:16:b5:ad:2a:ba:54:c4:be:
                    87:93:75:a3:4a:cf:8d:46:6f:93:be:c4:06:6c:17:
                    82:04:90:d6:59:3f:e2:a0:a0:0c:02:34:b3:ed:ea:
                    ec:30:8a:ea:72:fe:9f:0e:7e:05:1e:46:02:09:61:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:4B:8D:BD:F7:8F:03:2A:89:5B:B9:5E:15:EF:10:86:E9:78:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c/7507a0f9-2e97-4b0c-902e-44f0f1c62a3c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.88.0/23
                IPv6:
                  2602:f5b9::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401869

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:02:ef:63:87:37:a0:e7:d8:83:01:92:7c:32:d2:aa:3d:c4:
         47:06:7e:8a:0d:4b:4a:5b:d0:f1:0a:10:db:a8:7c:97:0d:50:
         a2:02:4c:9e:63:62:15:03:19:53:8b:b0:3d:c2:a8:2d:3b:70:
         45:53:92:a6:0b:c7:cb:f4:d2:a1:40:6c:6f:71:8b:02:9f:d0:
         6a:bd:fe:20:93:6f:f0:80:a0:23:1c:18:a5:0f:b0:d3:9b:93:
         ae:97:92:38:24:ac:07:25:df:66:52:4f:f6:ab:48:f4:35:34:
         11:8d:6b:70:e8:a3:11:a6:89:61:1c:42:0a:32:2e:3c:31:b2:
         bf:da:ab:50:1b:f6:84:6c:e3:2f:99:ee:72:90:33:0c:45:7b:
         3e:60:b1:2c:b2:46:59:16:40:b2:dc:02:fc:47:75:f3:e3:09:
         c2:da:be:55:6d:ba:e1:b3:a0:8c:83:b6:3d:df:d7:db:b8:0c:
         3e:80:9a:12:0a:a3:2d:58:51:d3:9c:b8:2b:53:a4:a5:79:4d:
         81:b8:d1:1b:f2:31:dc:3b:ed:4c:c1:05:d6:42:e4:96:b3:ce:
         07:af:cc:cb:63:a4:28:1b:fb:26:f4:55:e6:0f:67:2d:78:b5:
         92:d5:0d:55:fd:cc:6a:84:91:87:bd:87:70:92:bf:70:2f:70:
         ef:21:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:35 2026 by rpki-client