Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer
File:                     cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.cer (raw, json)
Hash identifier:          Y5lAQfvG++OCMVN7ABXlx6ktvG4eH5jOHxMFHcGI/rg=
Subject key identifier:   8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584FD39D76D5BB76446A99CF5C60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Nov 2026 12:48:17 +0000
Certificate not after:    Mon 06 Nov 2028 22:12:56 +0000
Subordinate resources:    AS: 402799
                          AS: 403148
                          IP: 23.167.252.0/24
                          IP: 2602:f32a::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d3:9d:76:d5:bb:76:44:6a:99:cf:5c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Nov 13 12:48:17 2026 GMT
            Not After : Nov  6 22:12:56 2028 GMT
        Subject: CN=cc8111d1-6337-43b1-8cfc-37ec42f7e5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:41:67:27:3e:41:5c:e5:68:eb:c9:b2:da:
                    a0:d4:cb:2c:5f:e4:8c:4c:54:a9:e2:f7:78:f3:4c:
                    fb:81:89:56:65:18:cc:04:1b:9b:dd:16:9d:55:9b:
                    18:49:c5:8b:12:5f:42:a1:ac:92:3e:d0:de:2a:f7:
                    dd:8b:95:e7:cc:47:6d:7a:51:56:1f:2e:9a:9d:fb:
                    03:62:fa:a7:62:a7:e5:7a:e9:d4:bf:e3:4f:88:e5:
                    98:33:2e:b7:a0:2f:c7:31:a6:f2:a1:e4:8c:40:20:
                    1f:d0:8e:18:06:77:8b:47:f3:b3:7f:66:c8:7f:22:
                    70:c0:58:cd:4e:92:fb:de:92:ab:b7:1e:01:2b:4d:
                    1e:5e:82:c7:b8:41:b4:6c:28:02:84:c5:f9:e5:3c:
                    5c:9f:9f:70:87:6f:df:1a:eb:96:81:a3:5e:ad:f7:
                    b1:87:3a:73:99:0a:dd:64:df:70:35:a6:9d:e7:29:
                    dd:a8:40:46:a0:b7:9e:90:14:a0:e7:c7:6b:2d:85:
                    02:b6:4f:52:2b:a9:bc:8a:aa:26:6f:a9:75:63:28:
                    66:66:f2:e7:aa:61:83:23:46:75:f8:08:12:4d:77:
                    9e:9b:a4:45:df:b5:a6:2e:50:8b:ff:15:f8:c3:68:
                    d7:20:cf:1e:b0:95:67:49:8f:60:c1:6c:f1:3d:82:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C6:69:3E:80:4F:6F:81:3C:29:72:30:25:85:20:73:DE:3A:7E:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5/cc8111d1-6337-43b1-8cfc-37ec42f7e5f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.252.0/24
                IPv6:
                  2602:f32a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402799
                  403148

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9f:88:02:91:a9:72:03:6c:1f:82:8b:17:41:9b:7c:b4:0e:
         e8:a7:54:98:3d:59:14:56:27:5c:4d:4a:3f:ff:13:38:b6:36:
         be:20:36:44:cf:f5:9a:9d:a1:42:a9:41:b8:ea:a2:fe:09:ee:
         fe:35:ee:8d:f9:0c:1d:b4:19:72:5e:63:36:d5:a1:4c:13:33:
         66:75:c9:63:c2:83:bb:e8:5b:ea:1a:a0:ad:79:c9:5c:86:1e:
         36:73:4c:d3:77:f3:d7:df:fb:81:bd:bb:ce:8b:28:4c:d8:3b:
         95:ed:dd:d9:e9:34:56:12:3a:e0:55:42:fc:4e:a5:99:70:da:
         bb:14:2b:d1:4c:ba:66:30:3c:f9:4f:16:20:98:ed:f8:38:0a:
         cf:48:e7:34:3d:9a:26:2a:60:8e:46:d8:2b:81:ea:58:77:9e:
         aa:fa:d2:37:c1:b1:ba:30:11:77:95:02:40:bf:53:36:c7:a2:
         97:30:5c:c4:4f:00:83:11:bb:57:64:7f:c6:ca:2f:7f:97:60:
         98:5c:2e:2f:8a:9e:16:45:2b:4b:2b:e4:17:f6:12:91:10:2d:
         3f:e7:36:8a:b2:bc:e5:7c:e7:ec:41:b4:6c:cf:be:50:93:2f:
         c9:ba:fe:14:35:3a:9f:a6:41:af:79:4e:a2:a6:c8:dd:ea:60:
         34:b4:a3:8c
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE/TnXbVu3ZEapnPXGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz
YzQyMB4XDTI2MTExMzEyNDgxN1oXDTI4MTEwNjIyMTI1NlowLzEtMCsGA1UEAxMk
Y2M4MTExZDEtNjMzNy00M2IxLThjZmMtMzdlYzQyZjdlNWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SdBZyc+QVzlaOvJstqg1MssX+SMTFSp4vd4
80z7gYlWZRjMBBub3RadVZsYScWLEl9CoaySPtDeKvfdi5XnzEdtelFWHy6anfsD
YvqnYqfleunUv+NPiOWYMy63oC/HMabyoeSMQCAf0I4YBneLR/Ozf2bIfyJwwFjN
TpL73pKrtx4BK00eXoLHuEG0bCgChMX55Txcn59wh2/fGuuWgaNerfexhzpzmQrd
ZN9wNaad5yndqEBGoLeekBSg58drLYUCtk9SK6m8iqomb6l1YyhmZvLnqmGDI0Z1
+AgSTXeem6RF37WmLlCL/xX4w2jXIM8esJVnSY9gwWzxPYJznwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFIrGaT6AT2+BPClyMCWFIHPeOn54MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9j
YzgxMTFkMS02MzM3LTQzYjEtOGNmYy0zN2VjNDJmN2U1ZjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt
ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2NjODExMWQxLTYzMzctNDNiMS04
Y2ZjLTM3ZWM0MmY3ZTVmNS9jYzgxMTFkMS02MzM3LTQzYjEtOGNmYy0zN2VjNDJm
N2U1ZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl
MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj
ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj
PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx
NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXp/wwDgQCAAIwCAMGACYC8yoAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwYlbwIDBibMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA2fiAKRqXIDbB+CixdB
m3y0DuinVJg9WRRWJ1xNSj//Ezi2Nr4gNkTP9ZqdoUKpQbjqov4J7v417o35DB20
GXJeYzbVoUwTM2Z1yWPCg7voW+oaoK15yVyGHjZzTNN389ff+4G9u86LKEzYO5Xt
3dnpNFYSOuBVQvxOpZlw2rsUK9FMumYwPPlPFiCY7fg4Cs9I5zQ9miYqYI5G2CuB
6lh3nqr60jfBsbowEXeVAkC/UzbHopcwXMRPAIMRu1dkf8bKL3+XYJhcLi+KnhZF
K0sr5Bf2EpEQLT/nNoqyvOV85+xBtGzPvlCTL8m6/hQ1Op+mQa95TqKmyN3qYDS0
o4w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:46:16 2026 by rpki-client