Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer
File:                     88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer (raw, json)
Hash identifier:          B7C7jm0vaunLtawOu66C4OSPIBH9Ix7dMGvxPGGhEsk=
Subject key identifier:   64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584FA2C0F8A71E3D2A876EB43140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Oct 2026 00:45:13 +0000
Certificate not after:    Mon 29 Jan 2029 01:45:13 +0000
Subordinate resources:    AS: 395412
                          AS: 399638
                          IP: 204.8.234.0/24
                          IP: 216.52.213.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c0:f8:a7:1e:3d:2a:87:6e:b4:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Oct 27 00:45:13 2026 GMT
            Not After : Jan 29 01:45:13 2029 GMT
        Subject: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:7e:69:3e:29:6f:c8:f7:02:88:ff:a7:5d:
                    3e:37:d5:28:32:fa:6a:be:8c:9c:34:65:00:32:f4:
                    dc:25:2e:fb:50:9c:3b:73:eb:cc:ad:e3:30:f2:3f:
                    bb:fd:74:8e:ba:cd:7f:d9:19:bb:88:a8:d3:1d:32:
                    d3:82:75:19:a0:cb:20:96:af:3d:15:b9:be:49:79:
                    dd:b1:cc:92:0c:2f:33:94:21:db:a8:37:21:31:9b:
                    6d:8a:4d:ea:ad:15:cd:6f:ee:58:9c:d8:4b:92:16:
                    9d:d8:42:92:cb:0f:41:f1:1e:00:9c:8d:36:af:73:
                    28:28:2e:10:fa:b4:62:63:6f:54:bc:91:97:2c:ea:
                    a1:75:56:e4:11:02:91:cd:e8:9c:d9:70:5f:c5:26:
                    56:76:cc:fe:96:b2:6c:c1:b0:96:1c:ec:56:bf:10:
                    8e:6e:be:19:d2:16:96:9d:0e:7f:ca:18:3c:70:ae:
                    7d:c8:56:0b:c2:ef:57:5d:8e:9c:50:e1:e5:d4:a9:
                    9e:4d:e5:78:a0:97:1d:75:b3:33:b4:88:18:83:67:
                    57:6d:20:dd:27:e8:4d:f6:74:90:90:e7:87:0d:3e:
                    2a:a3:0d:5d:4d:03:70:6f:4d:25:98:d2:c0:c0:35:
                    82:2b:27:a9:cb:91:b2:c1:70:6b:ae:da:05:26:e4:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.234.0/24
                  216.52.213.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395412
                  399638

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:b9:87:ec:62:e9:82:83:ac:a9:a7:ac:a0:a5:01:4f:19:
         c5:5f:c6:62:ab:48:83:10:54:0b:a1:89:e0:5e:1c:ed:27:1e:
         a0:b7:29:71:c4:d1:ca:b5:52:69:8b:67:d0:3a:36:3e:a4:a7:
         04:a6:ec:a0:40:d3:27:5f:95:ab:07:d6:c8:32:21:ed:81:9e:
         d2:de:cb:a0:52:ed:41:5a:fd:20:93:34:fb:1d:a2:09:40:57:
         fb:f1:c2:bd:f8:fc:21:19:ea:8f:65:c0:f1:74:36:bd:ef:83:
         32:4b:33:8d:3d:95:38:82:3a:e5:d8:c9:ee:7b:cf:68:a0:28:
         cf:f2:3c:62:a9:15:9a:91:a6:de:a5:3a:e5:c9:59:b2:5f:c1:
         d9:45:c5:1c:a5:5f:68:5f:99:15:93:c3:76:65:fe:31:ce:03:
         9b:30:1e:55:4a:e3:bc:44:d8:95:9d:b7:1b:19:21:bb:6c:8e:
         90:3a:83:7e:4b:74:36:97:e2:55:0f:65:74:63:16:59:0d:d4:
         b0:45:ec:56:a3:ef:e5:30:0d:da:a3:2e:bf:77:1c:9f:a9:64:
         eb:3f:50:7e:d4:df:0b:a0:7c:87:54:64:39:92:d3:76:1d:85:
         41:6c:07:80:42:26:af:e8:8b:26:8f:e1:bb:d7:cc:23:58:45:
         2f:d2:c1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:35:57 2026 by rpki-client