Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff.cer
File:                     5786d007-f57b-4159-a9a9-f15993359aff.cer (raw, json)
Hash identifier:          eUBAbCC8oYJLOJ170cIKFmwecgt6qEfBzGlzNCFNhPw=
Subject key identifier:   14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584F543215A57EF3C95CA87B6280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 28 Sep 2026 21:24:16 +0000
Certificate not after:    Sun 20 Aug 2028 12:45:18 +0000
Subordinate resources:    AS: 10266
                          AS: 22804
                          AS: 25670
                          AS: 393597
                          IP: 161.129.0.0/20
                          IP: 192.40.110.0/23
                          IP: 199.102.88.0/22
                          IP: 204.80.86.0/23
                          IP: 208.79.164.0/22
                          IP: 208.81.209.0/24
                          IP: 209.251.64.0/20
                          IP: 2605:9280::/32
                          IP: 2620:3a:8000::/48
                          IP: 2620:12e:3000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:32:15:a5:7e:f3:c9:5c:a8:7b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 28 21:24:16 2026 GMT
            Not After : Aug 20 12:45:18 2028 GMT
        Subject: CN=5786d007-f57b-4159-a9a9-f15993359aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:26:ba:8d:65:d3:ff:5a:c0:13:e5:d2:c0:
                    2a:c4:89:6f:bb:47:a0:5b:ed:f6:ed:21:b6:fe:cf:
                    84:ef:1c:ea:64:3d:e8:6f:8f:81:09:40:79:24:ec:
                    95:57:dd:e8:0f:d9:c7:53:56:24:7c:78:fd:8d:1a:
                    64:27:8f:2e:09:e1:c0:d4:15:9e:40:77:b2:0a:9a:
                    56:11:f7:dc:78:a5:dc:f9:6c:e1:9e:5d:57:73:51:
                    60:9b:0a:c4:8e:8f:9f:d9:35:47:3e:0a:55:c0:54:
                    ed:bd:66:aa:3f:5e:75:00:54:de:4b:52:97:98:51:
                    4f:f4:ae:db:5f:79:4c:61:4d:f4:8f:83:98:f5:dd:
                    81:46:f8:ca:e0:3e:8b:78:8e:ba:75:c3:73:bd:9b:
                    9b:e8:9f:8e:6b:77:4d:45:1e:2c:00:38:9e:fc:c9:
                    c7:36:15:a6:0c:e8:cc:bb:2e:cd:98:c8:5e:0f:43:
                    95:47:fe:2e:05:4c:a3:39:fd:79:55:bb:9a:0c:70:
                    3c:99:f1:90:7e:7e:7d:db:42:7b:da:70:90:59:26:
                    6b:84:24:d5:eb:3f:6e:17:b3:8a:a5:01:28:b2:1e:
                    f6:95:36:e0:e9:b9:b1:4e:2f:7c:fa:6e:0b:64:9f:
                    75:9f:af:24:cb:cc:6d:40:d1:5f:32:7e:81:23:a7:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.0.0/20
                  192.40.110.0/23
                  199.102.88.0/22
                  204.80.86.0/23
                  208.79.164.0/22
                  208.81.209.0/24
                  209.251.64.0/20
                IPv6:
                  2605:9280::/32
                  2620:3a:8000::/48
                  2620:12e:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10266
                  22804
                  25670
                  393597

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b8:10:28:64:64:ec:65:2d:e5:89:59:35:a4:a4:42:36:41:
         15:fe:07:18:22:11:ff:ae:5f:60:b6:54:b8:fc:b9:8d:1f:33:
         56:ef:91:07:f3:05:63:ac:13:b5:74:43:1e:70:88:e7:ba:99:
         6f:5d:f4:80:56:0b:28:6a:00:09:fe:55:f4:b8:80:03:2d:e8:
         83:3c:35:b1:a7:fb:e3:c1:73:e7:a2:f2:e7:2a:89:03:76:e5:
         43:77:e1:3b:07:9e:2b:00:f0:e7:93:66:37:58:52:07:5e:e4:
         1a:07:27:08:7b:38:fb:82:72:76:f9:7d:70:c0:31:bf:a6:bd:
         6b:7d:07:10:7e:fb:82:6e:1b:dd:75:fe:48:a6:38:c0:b6:78:
         80:c3:61:9f:76:87:7b:e5:2e:d4:79:df:d9:a7:dc:64:89:95:
         1e:d9:00:59:2f:2a:98:04:83:81:c0:a5:53:35:36:c6:a5:e4:
         24:be:65:94:ed:df:d0:3b:8a:92:34:ff:cc:08:a4:21:32:02:
         10:0b:d4:7d:24:70:fe:ab:e4:52:47:a1:3a:20:82:73:60:d1:
         f6:b0:3c:cf:57:34:0c:e3:71:94:fb:26:79:90:2e:e0:c1:f1:
         c3:5a:94:cb:d6:81:40:68:f3:04:db:04:f5:dc:7f:89:64:a5:
         3e:2b:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:08:58 2026 by rpki-client