Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c.cer
File:                     aef78a58-aed2-45c8-a5b3-e6b613cc354c.cer (raw, json)
Hash identifier:          P8qPJOs2SVD9WgEy1kJwjRnERO83MRx1dZi5bSaqy3o=
Subject key identifier:   5C:56:F0:FF:68:64:26:9D:E1:B7:3B:62:1B:C0:4C:53:F6:3E:5B:83
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584DC02DABF17F6E0617A7663880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/aef78a58-aed2-45c8-a5b3-e6b613cc354c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 May 2026 04:08:48 +0000
Certificate not after:    Wed 09 Aug 2028 04:08:48 +0000
Subordinate resources:    AS: 36728
                          IP: 66.111.112.0/20
                          IP: 67.22.160.0/20
                          IP: 74.213.192.0/20
                          IP: 74.214.224.0/19
                          IP: 162.245.40.0/22
                          IP: 192.150.142.0/24
                          IP: 209.127.64.0/21
                          IP: 216.181.160.0/22
                          IP: 2600:b00::/28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c0:2d:ab:f1:7f:6e:06:17:a7:66:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: May  7 04:08:48 2026 GMT
            Not After : Aug  9 04:08:48 2028 GMT
        Subject: CN=aef78a58-aed2-45c8-a5b3-e6b613cc354c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:13:09:0e:92:ed:74:75:00:97:62:e2:c9:
                    85:e2:c4:45:7f:38:50:f2:bc:b1:24:1a:61:77:8e:
                    bd:15:bc:8d:c2:63:3c:40:fb:77:52:25:8d:cf:04:
                    8b:52:49:bb:8a:14:00:0c:58:a5:25:ca:65:56:c5:
                    cd:c4:c7:63:d4:c6:1f:fa:3c:01:f9:cd:a2:e9:85:
                    76:b1:29:09:15:bb:56:29:8f:f6:76:d6:93:09:fc:
                    50:1c:ed:aa:4a:f4:d8:be:4a:c3:54:f4:85:ff:49:
                    9c:21:5e:ff:db:2c:dd:a0:f1:6c:43:3c:c3:9f:bd:
                    67:f4:60:f5:64:21:ed:dd:c7:96:00:09:f6:a9:56:
                    81:60:6b:26:29:31:cf:e0:03:ce:5d:87:c4:d2:dd:
                    04:28:b4:f7:8e:3f:03:42:f8:3e:70:55:fa:e7:fb:
                    00:8c:a9:d6:1a:af:f6:fa:3a:39:4c:57:2d:86:7a:
                    8c:3a:13:83:fc:49:fa:3b:27:91:81:ee:e8:15:2d:
                    29:3c:d3:c1:04:b7:90:b0:04:3e:2d:c2:e4:9c:98:
                    18:b7:00:c5:fd:e2:91:75:17:99:72:70:42:bf:97:
                    79:1a:ec:ac:48:9f:53:ea:b3:a1:f6:01:70:ef:ba:
                    19:9d:ad:14:67:1e:d9:45:d2:0a:19:db:ec:84:52:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:56:F0:FF:68:64:26:9D:E1:B7:3B:62:1B:C0:4C:53:F6:3E:5B:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/aef78a58-aed2-45c8-a5b3-e6b613cc354c/aef78a58-aed2-45c8-a5b3-e6b613cc354c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.112.0/20
                  67.22.160.0/20
                  74.213.192.0/20
                  74.214.224.0/19
                  162.245.40.0/22
                  192.150.142.0/24
                  209.127.64.0/21
                  216.181.160.0/22
                IPv6:
                  2600:b00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36728

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:4d:36:c0:e6:bd:e2:10:cc:60:5a:00:27:01:3a:f1:03:
         a8:bb:85:7a:09:1e:85:d2:09:3d:46:6a:cc:a1:b7:4a:a7:ff:
         f7:e3:0c:4b:95:56:03:e7:7a:de:d6:96:27:25:8f:99:66:be:
         02:94:2f:8f:67:4c:cf:ff:2a:a7:7b:a2:f5:d1:9e:3b:3d:da:
         49:5b:7a:d9:81:2a:6e:44:c3:57:01:29:58:d2:2a:07:71:dd:
         8b:6b:d6:6e:66:a2:97:54:b6:ad:bd:c6:e8:10:f5:e5:c9:45:
         c6:a0:d9:18:34:42:db:b6:7e:ba:02:ee:83:e1:02:58:6a:3d:
         18:65:54:d6:29:8e:44:da:97:49:b2:ab:6f:97:23:fb:0a:3e:
         67:4e:b8:4a:5b:46:0b:09:00:65:22:80:f5:ed:d3:81:7c:19:
         e9:a6:f7:78:80:99:8f:83:2a:67:bc:90:d3:27:21:a6:9f:bb:
         a1:d2:4f:16:f6:0e:f9:9a:11:54:71:54:12:e8:ce:f9:2e:a9:
         57:f9:aa:86:82:63:b8:e5:6c:5f:6e:ec:65:b0:db:a3:e3:d6:
         8e:00:39:5e:1d:f6:68:96:e9:99:24:b3:2f:e6:e5:b3:5c:0f:
         28:4b:29:4e:1e:60:83:56:ca:31:df:65:81:63:03:dd:f9:ee:
         87:5c:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:37 2026 by rpki-client