Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55.cer
File:                     1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55.cer (raw, json)
Hash identifier:          lYtwstYZrWxoZsy2ZBhFY7AqDWQJ4KAOwktaoB+NtgU=
Subject key identifier:   C0:39:38:56:02:87:48:D1:F3:62:4A:E7:F0:26:8E:BD:30:15:25:95
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584FA235072C8E8E0BC3EC01EE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Oct 2026 20:03:15 +0000
Certificate not after:    Mon 02 Oct 2028 19:00:30 +0000
Subordinate resources:    AS: 402696
                          IP: 23.166.116.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:35:07:2c:8e:8e:0b:c3:ec:01:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Oct 26 20:03:15 2026 GMT
            Not After : Oct  2 19:00:30 2028 GMT
        Subject: CN=1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ab:da:31:0f:4a:34:49:1e:71:5c:4e:16:46:
                    0f:38:ec:2a:b2:dd:48:47:c6:54:db:4a:b4:bc:65:
                    e5:81:ef:82:f4:9e:ed:43:43:d1:f8:69:b8:a0:34:
                    af:b2:d1:b3:40:4f:b7:f3:45:a3:19:92:2f:da:fb:
                    e8:ba:01:fe:15:58:b0:c9:b9:bb:3e:78:f8:fe:0b:
                    4c:02:25:26:8b:62:e8:f1:63:0c:9d:04:34:2b:36:
                    fb:a2:ee:14:92:e6:89:05:e1:bb:11:15:07:89:48:
                    33:d2:8b:ae:cc:8e:98:7b:e1:c1:ea:cc:b6:b6:4f:
                    91:9d:7d:63:8c:af:15:fb:76:06:52:9d:dc:4c:54:
                    0e:24:b7:78:a1:15:3d:2a:61:8e:21:99:4c:0e:38:
                    b1:2d:62:9b:48:9f:a5:26:84:83:25:a3:97:36:3a:
                    e8:f9:b3:7f:16:eb:d0:23:9b:39:42:82:ea:97:ab:
                    8b:8c:39:ea:21:89:6b:48:1c:b4:bc:1c:73:92:06:
                    c3:97:8e:36:fb:b6:3c:88:0e:b4:10:22:e9:66:39:
                    60:4b:4f:06:54:79:f4:36:a5:30:c0:e8:0c:08:67:
                    9e:25:bb:1f:8b:59:65:a1:3a:68:25:c4:ae:7f:92:
                    c1:f9:33:73:7b:62:ed:7b:a0:1d:47:ed:a1:93:24:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:39:38:56:02:87:48:D1:F3:62:4A:E7:F0:26:8E:BD:30:15:25:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55/1cc6a21a-b8b2-463f-bf9c-0f911bcbdb55.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.116.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402696

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:4d:da:f9:a7:59:44:1b:1c:41:d0:32:a7:75:b2:23:18:b5:
         dc:bb:68:07:d5:de:6a:d8:c4:e5:e4:a7:22:40:1e:8a:d2:78:
         94:a6:9d:ad:6b:8d:5f:b0:61:69:11:04:8b:fe:0a:43:0c:aa:
         b1:82:df:c6:ab:82:42:5e:fa:99:88:04:5d:8f:cb:76:20:54:
         1f:38:00:66:18:f0:07:1b:76:1f:42:ce:22:6e:a0:be:41:ef:
         b1:8f:38:7d:f9:84:98:37:90:6a:46:92:14:f5:45:a8:8d:fe:
         cc:64:36:e3:73:71:43:d8:2e:dc:3d:da:13:c0:0b:54:31:bc:
         92:bf:ef:da:9f:9d:28:7f:c8:b8:a7:3b:7b:e6:c5:31:24:80:
         a6:6d:16:41:5d:67:3c:72:15:1b:1c:b5:7e:78:1a:2d:ff:1d:
         7e:fa:4c:64:3b:cb:7f:7f:10:f8:17:9d:9e:3d:0d:30:71:3e:
         9e:6d:1d:a5:ed:d8:3e:07:9f:1b:3a:29:a2:c9:e8:bc:68:ac:
         e0:d7:83:7a:3d:b2:b1:0c:ff:f8:89:30:cf:99:98:e7:82:38:
         b6:df:85:ef:b0:f0:70:47:05:49:13:cc:48:ca:5c:15:9b:cd:
         9b:84:10:57:ff:1f:69:72:1b:75:ad:cb:4c:57:6f:04:7a:b2:
         27:37:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:27:48 2026 by rpki-client