Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer
File:                     7f148b73-c2cd-4595-8670-0f56bb44f8c6.cer (raw, json)
Hash identifier:          RYyfa4Ehu3XlWDVeC9NUjswlh+esiDo5lPca0cvw9Z8=
Subject key identifier:   0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584D6058E0AB6B8D5AEA009CB900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Apr 2026 20:18:15 +0000
Certificate not after:    Fri 17 Dec 2027 18:48:42 +0000
Subordinate resources:    AS: 401742
                          IP: 74.214.172.0/22
                          IP: 2602:f639::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:58:e0:ab:6b:8d:5a:ea:00:9c:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Apr  2 20:18:15 2026 GMT
            Not After : Dec 17 18:48:42 2027 GMT
        Subject: CN=7f148b73-c2cd-4595-8670-0f56bb44f8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:0e:e8:7a:dc:6d:a9:e7:23:29:bf:63:5b:
                    7f:dd:d9:b6:80:87:3c:21:dc:03:d6:5c:ec:e9:05:
                    bb:99:6e:ee:c3:04:7b:c3:c3:55:bc:53:d1:51:cb:
                    11:0c:04:90:cf:19:d4:6e:af:a3:e1:4c:6f:f2:62:
                    ba:2a:cf:63:2a:26:5b:47:1a:85:b7:d6:1e:46:e9:
                    55:1a:66:03:51:a9:2d:cc:80:0c:69:11:4e:81:57:
                    b2:1a:ac:06:1f:cd:a6:1d:2a:a3:75:b8:ca:20:cd:
                    ad:e2:c9:92:eb:e0:1c:c2:ac:f8:95:de:fd:0c:a4:
                    e1:8b:c2:fb:dc:ef:e8:e9:26:bc:a3:67:f0:bc:a3:
                    d9:29:83:00:45:a5:28:7a:d1:53:72:ba:07:ff:23:
                    f4:54:e3:88:36:a1:b0:bf:fb:2d:4b:36:50:39:fd:
                    08:60:84:d6:3e:e4:5b:0a:b0:11:57:e9:fd:18:3d:
                    ee:a8:bc:85:c3:c0:48:a6:00:5f:62:34:da:98:e8:
                    35:7f:dd:9c:91:ff:6e:2b:42:eb:88:24:03:50:38:
                    e1:9a:33:ef:5e:36:a1:67:16:f0:cc:33:bf:10:c8:
                    b0:ed:1b:38:d9:ec:fa:d7:cd:3f:d1:bb:73:e7:61:
                    62:f4:a8:04:32:01:f4:5a:b7:ee:67:6d:46:39:25:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:B7:42:61:4E:AE:6A:A2:A2:B7:F7:41:96:9E:A8:CE:0A:7D:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7f148b73-c2cd-4595-8670-0f56bb44f8c6/7f148b73-c2cd-4595-8670-0f56bb44f8c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.214.172.0/22
                IPv6:
                  2602:f639::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401742

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:5f:f2:ce:dd:cd:d7:fd:dc:bb:fb:2c:7d:94:c2:ea:4c:
         9b:42:2c:6b:71:28:36:4a:e2:34:b6:8b:b3:7d:4a:d8:3a:de:
         d0:b8:ae:c3:62:55:e1:75:99:16:6d:87:61:04:61:64:4c:c3:
         d9:f8:4e:54:f0:a7:2a:83:59:d3:01:38:a6:3f:d7:a6:83:db:
         5b:e2:96:f0:06:cb:32:18:39:2e:e5:cd:f8:c5:a3:66:a6:15:
         84:79:50:32:7f:ef:f8:c4:21:5d:a9:a7:ea:a5:0f:ab:30:4e:
         61:35:91:a5:da:4a:0c:7d:9e:c3:22:e1:a0:2e:d6:00:ca:3d:
         04:39:7e:d5:3b:2c:04:54:52:65:01:bb:7c:d2:14:81:ad:8f:
         40:ec:32:4a:86:86:80:19:a9:22:a6:a7:e9:1b:31:0d:2c:43:
         c1:41:91:45:c9:49:50:67:b1:3a:a8:48:a5:5b:fa:68:f3:7d:
         b1:27:4c:f6:bc:f5:c5:b9:1f:70:20:63:20:f3:24:25:d3:91:
         ef:85:02:f6:63:56:c2:5a:c0:d8:ec:e7:c3:ca:27:74:28:c8:
         dd:fe:6d:e7:32:b2:a5:36:e1:8b:e3:58:bb:61:f7:0d:db:4a:
         32:93:49:a5:75:d3:20:ec:61:62:f2:d4:e0:84:d4:f9:6c:75:
         69:0c:eb:e4
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1gWOCra41a6gCcuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI2MDQwMjIwMTgxNVoXDTI3MTIxNzE4NDg0MlowLzEtMCsGA1UEAxMk
N2YxNDhiNzMtYzJjZC00NTk1LTg2NzAtMGY1NmJiNDRmOGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolwO6HrcbannIym/Y1t/3dm2gIc8IdwD1lzs
6QW7mW7uwwR7w8NVvFPRUcsRDASQzxnUbq+j4Uxv8mK6Ks9jKiZbRxqFt9YeRulV
GmYDUaktzIAMaRFOgVeyGqwGH82mHSqjdbjKIM2t4smS6+Acwqz4ld79DKThi8L7
3O/o6Sa8o2fwvKPZKYMARaUoetFTcroH/yP0VOOINqGwv/stSzZQOf0IYITWPuRb
CrARV+n9GD3uqLyFw8BIpgBfYjTamOg1f92ckf9uK0LriCQDUDjhmjPvXjahZxbw
zDO/EMiw7Rs42ez6180/0btz52Fi9KgEMgH0WrfuZ21GOSX/0QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFA2qt0JhTq5qoqK390GWnqjOCn2XMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83
ZjE0OGI3My1jMmNkLTQ1OTUtODY3MC0wZjU2YmI0NGY4YzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdmMTQ4YjczLWMyY2QtNDU5NS04
NjcwLTBmNTZiYjQ0ZjhjNi83ZjE0OGI3My1jMmNkLTQ1OTUtODY3MC0wZjU2YmI0
NGY4YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAJK1qwwDgQCAAIwCAMGBCYC9jkAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYhTjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBnV/yzt3N1/3cu/ssfZTC6kyb
QixrcSg2SuI0touzfUrYOt7QuK7DYlXhdZkWbYdhBGFkTMPZ+E5U8Kcqg1nTATim
P9emg9tb4pbwBssyGDku5c34xaNmphWEeVAyf+/4xCFdqafqpQ+rME5hNZGl2koM
fZ7DIuGgLtYAyj0EOX7VOywEVFJlAbt80hSBrY9A7DJKhoaAGakipqfpGzENLEPB
QZFFyUlQZ7E6qEilW/po832xJ0z2vPXFuR9wIGMg8yQl05HvhQL2Y1bCWsDY7OfD
yid0KMjd/m3nMrKlNuGL41i7YfcN20oyk0mlddMg7GFi8tTghNT5bHVpDOvk
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:53 2026 by rpki-client