Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer
File:                     8da2ab18-c7fe-481a-a5e3-31579c83e101.cer (raw, json)
Hash identifier:          q/VUfbP+PC+kY4L2SpVUgNFhR4WNqjdax3DaFUNnzKM=
Subject key identifier:   5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584D090AB016F494BA7FEC76E580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Mar 2026 13:45:22 +0000
Certificate not after:    Sun 04 Jun 2028 12:45:22 +0000
Subordinate resources:    IP: 69.161.208.0/23
                          IP: 69.161.220.0/24
                          IP: 69.161.222.0/23
                          IP: 206.188.192.0/23
                          IP: 206.188.195.0/24
                          IP: 206.188.198.0/23
                          IP: 206.188.204.0 -- 206.188.209.255
                          IP: 206.188.212.0/22
                          IP: 206.188.219.0 -- 206.188.223.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:0a:b0:16:f4:94:ba:7f:ec:76:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  2 13:45:22 2026 GMT
            Not After : Jun  4 12:45:22 2028 GMT
        Subject: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:a7:9e:32:bc:73:08:bb:e8:2a:a6:0e:f1:
                    5d:83:e1:93:77:78:e2:db:06:3c:ad:97:61:fb:ef:
                    84:d2:8b:62:08:7e:e8:5e:69:0c:a5:35:76:d5:20:
                    07:f0:97:cf:e3:9a:6e:ab:5f:a9:ef:90:d7:ef:75:
                    08:0a:f7:36:07:9c:e7:3e:a3:13:75:2b:ba:ef:5e:
                    cb:3e:5d:a0:3b:08:5c:51:26:f3:f8:ec:3d:56:97:
                    e4:85:3e:27:2e:4a:d9:df:f7:b8:59:27:22:3f:38:
                    64:99:c9:2f:67:bf:fa:7a:f4:6a:cb:10:11:ad:1e:
                    d0:4a:76:39:c4:8d:27:69:0d:66:f7:84:67:4e:bb:
                    ad:be:83:ac:ab:30:91:aa:6a:95:2c:e0:03:47:63:
                    14:b6:8a:a5:16:62:f5:9f:3e:20:4c:bb:be:06:50:
                    59:78:ab:fe:f3:a3:26:c1:25:c8:c8:7f:07:9a:94:
                    c4:0c:4b:7b:bf:8e:8c:22:54:67:43:ee:38:00:d4:
                    e1:52:4c:53:18:51:73:0f:36:c0:19:77:ba:48:8d:
                    93:b8:46:8b:18:68:9d:9a:54:8c:b7:9a:f6:69:f4:
                    b9:16:df:3e:46:1c:2b:c6:95:b7:ce:2d:65:d8:01:
                    6f:2a:09:47:20:fe:d7:b4:a5:8b:63:2e:61:b8:23:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.208.0/23
                  69.161.220.0/24
                  69.161.222.0/23
                  206.188.192.0/23
                  206.188.195.0/24
                  206.188.198.0/23
                  206.188.204.0-206.188.209.255
                  206.188.212.0/22
                  206.188.219.0-206.188.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:8a:e4:77:52:ae:fb:b1:31:98:ef:5c:a5:24:0e:b4:d0:
         d8:a1:dc:fd:59:06:6c:c0:e9:29:9b:dd:ef:c0:24:65:e4:46:
         8c:a5:5c:d5:50:87:a8:36:32:0b:25:f3:e9:53:f7:2f:65:26:
         01:96:78:2f:c9:0c:d6:b7:4e:08:f0:1c:37:65:1d:89:23:1d:
         c8:8e:27:2d:5b:dd:55:d2:92:2a:df:7a:65:ee:cf:29:19:1a:
         00:36:5a:15:a7:df:1a:35:8a:5e:69:70:88:8a:66:2e:86:47:
         4b:6d:3b:1f:08:31:a8:db:3d:f5:2b:50:bf:45:bc:ee:a1:34:
         18:6d:b0:38:0a:4e:f6:2d:ab:9e:bf:7c:41:46:99:bd:8d:e4:
         cd:9d:ed:08:29:f8:eb:51:2c:4b:b3:31:a3:a3:20:8c:e7:b5:
         9b:d0:3f:2f:42:a8:c6:29:1f:74:09:49:de:f5:37:ef:14:0a:
         7b:4b:f4:47:2f:39:06:2e:2c:f0:3f:a0:5a:28:67:e0:55:d4:
         7d:fe:e8:8c:79:4a:3a:62:72:61:04:62:36:e0:5a:b5:bb:e8:
         b3:d3:ac:73:a4:89:1e:a1:d4:b0:b2:b0:2c:8e:8b:fa:fb:d0:
         87:d0:05:9c:ba:fc:3c:79:73:01:36:60:7c:bf:6a:c1:33:7b:
         40:d1:32:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:40 2026 by rpki-client