Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
File:                     c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer (raw, json)
Hash identifier:          qYDBXmHvAHKYV+IRPHMFzaFX/CwJt4yL6DL+FS8M5WA=
Subject key identifier:   98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584E86ED69747BCFED36C68714C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Jul 2026 08:45:11 +0000
Certificate not after:    Thu 19 Oct 2028 08:45:11 +0000
Subordinate resources:    AS: 26356
                          AS: 399507
                          AS: 401405
                          IP: 91.106.220.0/22
                          IP: 204.52.16.0/20
                          IP: 216.86.160.0/20
                          IP: 216.147.112.0/21
                          IP: 2607:a040::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:ed:69:74:7b:cf:ed:36:c6:87:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jul 17 08:45:11 2026 GMT
            Not After : Oct 19 08:45:11 2028 GMT
        Subject: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:6a:c8:1e:1d:83:4a:a7:a8:b1:d4:72:f6:
                    e5:cd:c5:e4:09:ff:b2:ab:df:db:6f:2a:24:c0:ae:
                    1c:e6:a6:f8:6c:07:98:92:59:d5:7c:c0:e6:bb:3c:
                    26:05:02:79:81:5d:1d:04:63:2b:75:64:af:89:2c:
                    1a:22:76:6f:06:10:93:a0:07:32:0e:cd:60:94:88:
                    2b:72:31:7a:57:8e:78:3d:b7:0b:7a:41:87:32:33:
                    ef:f5:8a:23:f0:71:12:bc:8f:13:0e:67:44:1d:4d:
                    98:ff:b9:1e:88:61:a4:6a:11:44:cc:05:7e:e3:db:
                    68:34:e4:77:ea:cd:45:30:cc:bb:3f:8f:47:b6:c1:
                    7c:e5:26:6b:08:62:db:3a:38:db:62:da:30:e1:00:
                    b7:a5:ca:11:0f:67:2b:ba:04:4c:83:48:ef:d1:3a:
                    07:2b:a2:0b:10:76:1e:6b:13:35:96:55:ab:d1:0e:
                    68:0d:ee:e0:9b:49:c6:bb:a8:e6:9f:f0:64:39:7f:
                    6a:f9:95:4b:42:d2:88:73:64:16:d3:23:22:43:93:
                    ca:82:75:26:30:e0:07:c1:ab:a5:f2:93:95:3b:58:
                    60:c6:1a:68:f6:22:a8:59:37:fb:0e:d6:d2:22:8c:
                    7c:19:95:58:71:46:b3:07:f1:73:95:e6:fe:0c:f1:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20
                  216.86.160.0/20
                  216.147.112.0/21
                IPv6:
                  2607:a040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26356
                  399507
                  401405

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:aa:94:38:b5:f6:84:4e:fd:46:b3:e5:c2:7d:23:7d:ad:
         36:4e:89:d1:0a:a3:96:8b:62:c0:bf:32:27:f5:e9:c0:59:94:
         31:ea:f5:21:41:8f:98:7c:2d:e5:3e:f7:d8:c0:d3:cc:c7:9d:
         59:d9:ea:9c:f2:04:4b:f8:f7:9b:e5:c2:ba:9b:39:b8:75:55:
         53:c3:ec:c8:7e:51:97:e3:5a:10:67:aa:61:a4:8d:75:b6:c4:
         42:fd:da:68:08:8e:3b:85:42:90:e2:35:8f:0f:1c:ba:d8:ba:
         c7:3d:33:fa:58:73:95:bd:a5:d4:37:2d:89:11:c9:83:5a:02:
         3e:ae:08:65:22:17:6c:00:8e:27:6d:81:0e:79:da:1a:66:b5:
         cb:52:1b:15:8a:ec:07:03:83:4f:37:42:f4:e0:df:50:5c:18:
         78:ca:b8:95:86:7c:60:2e:95:60:10:55:56:1f:84:47:8c:65:
         22:e1:58:41:e0:dd:e8:5d:66:1e:4f:0f:ec:75:89:05:50:d7:
         c9:d3:e6:50:1f:ff:b6:93:85:5a:50:fb:f2:e5:0e:f4:96:0d:
         07:78:35:87:58:e9:a8:37:41:98:b9:5b:58:77:21:35:1a:ed:
         fc:16:c0:cd:ab:4e:e1:4b:8f:1f:d5:f6:05:b9:d2:24:2d:a0:
         17:1c:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:20 2026 by rpki-client