Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9.cer
File:                     75c56265-28c8-443f-b178-7ec56393f3c9.cer (raw, json)
Hash identifier:          h8sB1eJ/7zaRqL1Q+uF/dJHQTzXrHIHVm4VzlxDO+Yo=
Subject key identifier:   A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584E921826221DAEF8C9E2DA4680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Jul 2026 08:45:11 +0000
Certificate not after:    Mon 23 Oct 2028 08:45:11 +0000
Subordinate resources:    AS: 40578
                          IP: 199.5.28.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:18:26:22:1d:ae:f8:c9:e2:da:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 21 08:45:11 2026 GMT
            Not After : Oct 23 08:45:11 2028 GMT
        Subject: CN=75c56265-28c8-443f-b178-7ec56393f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:09:da:d0:e5:80:28:d0:15:be:82:f9:5a:
                    30:c3:1f:45:b5:17:03:8e:c9:b8:c0:94:88:de:2b:
                    5b:09:18:24:86:5c:01:12:2f:73:7b:e2:25:1e:fb:
                    12:95:c2:28:61:82:c8:0d:b5:4a:ff:3a:42:6b:cd:
                    c2:6d:20:b3:a0:8b:3b:d2:15:c3:8c:45:76:be:4d:
                    ba:f9:18:4e:da:0d:08:fb:ce:f7:d4:90:f0:05:16:
                    c7:be:76:c2:73:f4:9c:96:04:ce:1c:98:b5:3e:ac:
                    70:57:8d:29:15:aa:f6:cf:22:f8:83:65:30:5a:3e:
                    03:08:7b:73:98:7b:6b:d7:44:69:12:46:a7:74:11:
                    54:0e:8b:ea:ed:f2:1f:84:22:ac:6c:0c:e0:30:82:
                    9a:66:fa:f7:d0:06:e4:b3:07:b3:ca:55:91:a4:3b:
                    f3:24:bb:37:a2:e4:5d:48:59:d6:e9:25:08:36:7f:
                    bf:1c:ef:74:6b:58:61:b3:b6:4e:76:0f:b3:6c:aa:
                    00:8f:2b:b7:98:d8:0a:3a:6d:4f:db:73:e5:6f:20:
                    d0:1e:c7:d0:34:32:bc:ef:bb:a3:f7:7f:81:5e:75:
                    54:16:f3:87:0d:17:98:05:0a:92:d6:d5:59:4f:b6:
                    c3:21:aa:d6:b5:f0:f8:aa:71:62:ad:fe:68:ea:4b:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:42:D0:DD:B3:53:55:D1:54:FF:E7:EA:E8:CD:19:1D:DC:B3:88:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/75c56265-28c8-443f-b178-7ec56393f3c9/75c56265-28c8-443f-b178-7ec56393f3c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.28.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40578

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d4:3c:60:e1:5f:0d:66:8b:9c:f6:89:f7:d0:ce:81:cb:37:
         46:31:f5:d3:a3:c5:f9:fc:58:3d:43:5a:ea:56:31:b3:d1:4a:
         54:68:0a:a6:6c:08:31:10:f1:d1:0f:3d:87:b0:24:90:5e:23:
         99:e4:ac:96:d8:ec:b8:4c:e3:8b:c1:ae:7c:4f:60:56:6b:f9:
         6d:0a:5c:d1:6c:e2:d7:2a:5d:37:46:08:d3:a1:37:08:60:f8:
         b2:c5:6c:d8:4b:1b:f3:19:c3:9f:ba:de:8c:be:ad:5d:67:77:
         64:dc:62:a3:b9:cf:5f:2c:0f:07:fa:a7:3e:cf:72:bc:87:a6:
         00:2f:f6:50:c4:7f:36:4d:60:20:16:e8:a2:41:54:bd:71:b3:
         e4:00:0e:1b:5c:45:ad:d0:26:35:60:f7:c7:fa:d0:13:2b:c2:
         09:dd:d4:87:59:6b:2b:d8:7c:5e:9b:11:1e:1b:ec:80:e1:fb:
         fd:41:78:f2:43:80:c5:22:5e:76:af:2f:76:8c:b0:ec:d6:9f:
         91:27:2a:c1:a2:c5:11:d8:99:92:9f:d8:5d:c8:8f:67:77:45:
         f3:ca:28:36:63:43:1c:e4:b2:42:b4:86:fc:70:d1:32:d8:c5:
         01:13:7b:69:a9:3c:97:d9:05:fa:02:d6:b7:15:49:74:1d:3d:
         48:1f:2a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:56:42 2026 by rpki-client