Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
File:                     4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer (raw, json)
Hash identifier:          QWKw43VVb50t3UF2lRkb3wDKQbQ0G5wxG6ql66c2i9w=
Subject key identifier:   67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F4328584E8C82C8B2C0E9239C565D7D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 19 Jul 2026 08:45:12 +0000
Certificate not after:    Sat 21 Oct 2028 08:45:12 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:82:c8:b2:c0:e9:23:9c:56:5d:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Jul 19 08:45:12 2026 GMT
            Not After : Oct 21 08:45:12 2028 GMT
        Subject: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5a:56:10:5c:0f:d6:fe:6e:38:5c:d2:12:aa:
                    b3:e9:2f:46:a7:27:1e:2a:6c:60:e3:c0:da:e3:07:
                    4a:48:67:0d:1d:7a:7c:aa:10:6a:9e:39:c4:b9:b8:
                    4f:0e:2e:d9:16:66:1c:d4:b7:cf:55:aa:ed:79:3d:
                    1a:44:1f:3b:dd:b0:37:52:a8:36:da:12:6f:a5:66:
                    bf:25:af:cb:ef:ea:1f:3e:51:16:f3:c8:c2:6c:f2:
                    5c:ab:33:27:fc:ce:96:5b:84:bb:cd:9a:44:25:a7:
                    56:de:e6:62:b8:d1:1d:a6:e8:0e:b5:1f:a7:18:a1:
                    2c:5a:a6:fc:d0:ce:65:fe:a4:35:97:56:46:2a:8c:
                    3e:ef:f8:a3:d9:fe:19:3e:07:26:07:65:58:d3:b0:
                    36:bd:07:f6:79:eb:a4:9e:e8:43:03:d1:39:8c:05:
                    56:51:8e:25:19:05:dc:4b:54:4d:34:e0:5c:f9:c6:
                    79:28:f0:2f:ae:95:16:e8:6c:13:fb:be:a6:bd:65:
                    e6:51:1e:c1:a3:3e:a1:00:65:ff:c3:49:54:7f:db:
                    46:57:3e:b4:66:28:29:e1:95:9a:28:ee:08:2e:f1:
                    77:30:c9:56:94:85:31:63:b1:71:51:b0:28:ce:76:
                    00:7b:d5:c2:7b:d7:53:17:ac:5e:ab:ff:e0:3a:73:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:e2:4b:f9:6d:5f:8c:79:78:5d:39:ee:2d:d5:e1:0f:8d:
         67:72:41:95:dc:e7:b7:96:fe:e7:db:e1:cc:12:a7:b4:8c:ae:
         39:c3:37:c1:27:77:e4:04:12:4c:15:c1:69:c7:03:b1:d2:91:
         e0:1d:46:61:9c:fd:87:2f:2e:9c:28:a3:19:3f:88:92:a7:e7:
         a3:ab:e3:da:ca:d6:44:f5:e6:1d:30:07:22:49:61:36:e1:37:
         fb:56:5e:ad:a8:6d:f2:65:63:10:21:19:d5:8f:a3:00:65:c7:
         d0:d6:20:7d:4f:19:49:ca:92:09:c4:d9:3d:a1:65:a8:2a:34:
         7d:87:94:85:06:7e:5c:7b:8d:3b:eb:b9:26:a9:f0:34:d8:89:
         63:53:27:45:fe:81:76:67:e8:d5:3e:60:ab:e4:fd:e8:cd:7f:
         28:e8:71:f5:38:74:b0:74:00:25:9f:d3:05:c6:e9:1d:2b:4a:
         08:5c:81:f1:46:87:96:91:ff:d4:a8:bc:65:f2:58:e9:f5:f9:
         fa:c9:2b:ba:1b:9b:a0:0a:0a:91:2f:08:c4:22:8c:ce:9f:04:
         9b:b5:2f:d1:96:a8:41:92:d6:52:07:cc:d5:b7:89:ab:41:42:
         84:e9:d7:1e:fe:96:94:9e:78:42:0a:4d:3a:a1:b8:21:e8:17:
         12:c1:7a:62
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE6MgsiywOkjnFZdfUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI2MDcxOTA4NDUxMloXDTI4MTAyMTA4NDUxMlowLzEtMCsGA1UEAxMk
NGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlpWEFwP1v5uOFzSEqqz6S9GpyceKmxg48Da
4wdKSGcNHXp8qhBqnjnEubhPDi7ZFmYc1LfPVarteT0aRB873bA3Uqg22hJvpWa/
Ja/L7+ofPlEW88jCbPJcqzMn/M6WW4S7zZpEJadW3uZiuNEdpugOtR+nGKEsWqb8
0M5l/qQ1l1ZGKow+7/ij2f4ZPgcmB2VY07A2vQf2eeuknuhDA9E5jAVWUY4lGQXc
S1RNNOBc+cZ5KPAvrpUW6GwT+76mvWXmUR7Boz6hAGX/w0lUf9tGVz60Zigp4ZWa
KO4ILvF3MMlWlIUxY7FxUbAoznYAe9XCe9dTF6xeq//gOnPgEwIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFGdQS+rXrOzbMEnw/5yy/hJs9jU1MIIBfQYIKwYBBQUHAQsE
ggFvMIIBazCBhAYIKwYBBQUHMAWGeHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzCB
rQYIKwYBBQUHMAqGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QubWZ0MDIGCCsGAQUFBzANhiZodHRw
czovL3JyZHAuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My5jcmwwHwYDVR0jBBgwFoAUYkd+H9nlJdDXortj2RThTuRUo2QwDgYDVR0PAQH/
BAQDAgEGMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACTA
4kv5bV+MeXhdOe4t1eEPjWdyQZXc57eW/ufb4cwSp7SMrjnDN8End+QEEkwVwWnH
A7HSkeAdRmGc/YcvLpwooxk/iJKn56Or49rK1kT15h0wByJJYTbhN/tWXq2obfJl
YxAhGdWPowBlx9DWIH1PGUnKkgnE2T2hZagqNH2HlIUGflx7jTvruSap8DTYiWNT
J0X+gXZn6NU+YKvk/ejNfyjocfU4dLB0ACWf0wXG6R0rSghcgfFGh5aR/9SovGXy
WOn1+frJK7obm6AKCpEvCMQijM6fBJu1L9GWqEGS1lIHzNW3iatBQoTp1x7+lpSe
eEIKTTqhuCHoFxLBemI=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:25 2026 by rpki-client