Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab9f4331-971f-409b-9a3c-ddd04487ae0b.cer
File:                     ab9f4331-971f-409b-9a3c-ddd04487ae0b.cer (raw, json)
Hash identifier:          dqviBmMpty/cvJhj+ZPsiqRXw1aH2s/s9CN7i0wbBtE=
Subject key identifier:   86:43:EB:CA:0E:66:59:85:EE:38:7D:A5:91:E3:12:DE:C5:E4:DD:4D
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584E95FE3303CBEF9DF9B77372C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab9f4331-971f-409b-9a3c-ddd04487ae0b/ab9f4331-971f-409b-9a3c-ddd04487ae0b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab9f4331-971f-409b-9a3c-ddd04487ae0b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Jul 2026 18:16:08 +0000
Certificate not after:    Tue 24 Oct 2028 18:16:08 +0000
Subordinate resources:    AS: 18899
                          AS: 23332
                          AS: 395105
                          AS: 400015
                          IP: 192.189.83.0/24
                          IP: 198.178.131.0/24
                          IP: 198.178.227.0/24
                          IP: 199.88.142.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:fe:33:03:cb:ef:9d:f9:b7:73:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Jul 22 18:16:08 2026 GMT
            Not After : Oct 24 18:16:08 2028 GMT
        Subject: CN=ab9f4331-971f-409b-9a3c-ddd04487ae0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:89:cb:cf:92:d5:4f:15:a6:15:74:b7:7e:
                    3c:78:1d:02:ad:13:53:9e:6d:e8:f9:35:56:8c:c7:
                    c8:1b:ec:e7:ad:64:d7:94:9b:67:8e:64:5c:41:b8:
                    50:77:2c:53:59:0e:39:09:55:3e:23:9e:28:29:98:
                    65:c0:9e:81:47:34:5c:20:7d:bb:a0:75:c6:fc:64:
                    8a:5f:48:63:93:63:16:a8:f2:d6:9a:1b:c3:af:f6:
                    dc:c0:31:d2:73:38:e4:55:67:20:81:89:c3:01:d7:
                    7a:60:9e:ca:02:c9:f4:49:06:44:b2:ea:70:0b:f1:
                    5e:d6:cd:19:a7:f0:b7:0b:34:41:fb:14:01:51:21:
                    e5:f6:81:c1:e6:0c:58:6f:c2:92:1c:bc:84:32:5d:
                    f4:b9:47:7a:5c:b5:e7:21:6b:c5:4d:29:eb:ce:e0:
                    0a:54:ed:e4:3b:60:cc:89:7d:89:ed:1a:67:f6:41:
                    d9:97:fe:c5:64:2b:14:be:55:3c:ef:4a:61:b4:2e:
                    59:62:86:b0:7c:1f:0b:e0:47:a3:6b:1c:4b:c8:64:
                    0b:4d:ad:03:ae:3f:9d:a6:db:73:ac:09:bf:2c:b4:
                    58:b2:40:3c:08:30:bd:3a:77:73:ac:72:53:51:52:
                    91:9c:14:22:44:f4:a3:05:5c:1e:57:eb:48:ba:92:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:43:EB:CA:0E:66:59:85:EE:38:7D:A5:91:E3:12:DE:C5:E4:DD:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab9f4331-971f-409b-9a3c-ddd04487ae0b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ab9f4331-971f-409b-9a3c-ddd04487ae0b/ab9f4331-971f-409b-9a3c-ddd04487ae0b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.83.0/24
                  198.178.131.0/24
                  198.178.227.0/24
                  199.88.142.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18899
                  23332
                  395105
                  400015

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:d8:40:15:44:97:7d:35:8a:7d:96:50:87:1a:49:06:12:b2:
         3e:fb:a0:14:f3:5b:46:37:4a:b9:61:01:b5:73:87:68:20:64:
         21:85:a4:da:bb:db:7a:4d:30:99:a1:00:1a:2a:ab:4d:0d:02:
         f6:f3:d8:eb:1b:f8:5c:10:e0:74:0e:d4:89:e0:81:15:3a:0e:
         a0:3d:21:f0:40:ad:26:1f:56:c3:58:19:d1:53:5d:70:eb:17:
         60:69:06:34:c5:85:23:95:83:f7:9e:aa:ae:32:a4:92:f1:37:
         24:cc:25:d9:54:3f:0f:b1:d9:47:9a:96:2c:69:2d:5a:ef:ba:
         18:48:97:7d:30:8b:ee:80:a8:1e:69:1c:2e:77:2a:a7:16:08:
         0e:92:13:ff:c5:d5:30:df:71:1a:fc:a2:df:66:9e:c5:e6:e9:
         ba:87:af:24:9d:db:24:f8:ce:00:12:5e:3f:51:80:7e:43:11:
         a8:2a:61:ce:95:0d:ad:80:41:cc:21:6b:bc:f1:85:2c:38:ee:
         e5:8a:e0:a0:e2:a5:7b:ee:92:e8:ff:69:8f:70:88:40:af:53:
         30:6f:9c:7b:59:4a:bb:78:e2:05:8c:18:0b:b1:3a:03:89:13:
         30:90:31:ea:f9:7d:6c:04:75:ed:92:20:05:13:21:34:ac:69:
         03:cc:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:29 2026 by rpki-client