Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f.cer
File:                     d90b9318-a0f1-4fd8-8491-31114b330b9f.cer (raw, json)
Hash identifier:          kYLfUKNQdUqp6YfM1004hdgKdMyjxb/VCpfUTscWUFc=
Subject key identifier:   4A:72:BD:EF:07:54:3D:54:E7:0D:B0:94:46:0D:5D:A0:D6:0C:9A:C7
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584E88EDDC7122A8978184E7E680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/d90b9318-a0f1-4fd8-8491-31114b330b9f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 18 Jul 2026 01:57:43 +0000
Certificate not after:    Fri 20 Oct 2028 01:57:43 +0000
Subordinate resources:    AS: 22016
                          AS: 22916
                          AS: 40681
                          AS: 46790
                          IP: 170.173.0.0/16
                          IP: 170.220.0.0/16
                          IP: 2620:169::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:ed:dc:71:22:a8:97:81:84:e7:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Jul 18 01:57:43 2026 GMT
            Not After : Oct 20 01:57:43 2028 GMT
        Subject: CN=d90b9318-a0f1-4fd8-8491-31114b330b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:4a:47:bc:55:1f:36:48:4f:f5:b3:8f:81:
                    80:77:0e:fc:66:8f:88:0b:2d:13:fa:c3:23:91:43:
                    64:21:ba:4c:10:3e:3f:d2:85:02:19:03:1e:8d:72:
                    d9:f3:47:c5:a5:75:56:c5:10:c4:4e:7c:59:8f:ee:
                    c0:8a:2a:33:d6:7d:e6:ca:39:7e:a0:41:66:87:ff:
                    fe:90:46:1e:70:7b:3f:a0:75:db:df:1e:5f:47:d5:
                    78:c3:c8:43:64:6b:60:e0:38:ca:9a:fa:45:f3:a4:
                    77:15:74:b9:f3:b4:71:00:02:80:d7:dc:09:d0:ba:
                    ad:c7:ce:eb:c1:8d:23:c5:30:3c:69:02:78:36:53:
                    54:9b:8b:81:2a:dc:d0:4e:3e:39:ad:5c:26:13:f3:
                    6a:87:57:f2:4e:2d:ac:38:85:06:43:1c:a2:3e:a3:
                    94:33:02:b5:a3:99:cd:2b:0d:28:29:4a:18:24:4f:
                    a8:98:19:a2:02:38:9e:00:ad:ab:61:e8:41:47:45:
                    66:08:6b:8f:f4:82:af:14:52:2a:b3:75:4b:8e:a8:
                    93:17:47:6d:24:34:d9:ad:a7:9d:70:26:6f:f2:fa:
                    20:c1:68:48:51:c8:8f:ee:01:f0:b9:08:91:4e:74:
                    b2:f2:2d:f7:63:a8:d7:c8:8b:dd:5d:cd:9a:ce:ce:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:72:BD:EF:07:54:3D:54:E7:0D:B0:94:46:0D:5D:A0:D6:0C:9A:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/d90b9318-a0f1-4fd8-8491-31114b330b9f/d90b9318-a0f1-4fd8-8491-31114b330b9f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.173.0.0/16
                  170.220.0.0/16
                IPv6:
                  2620:169::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22016
                  22916
                  40681
                  46790

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:03:38:bf:59:c2:44:9f:aa:f0:86:d7:67:f2:b4:6b:25:
         01:a1:08:f0:c0:32:bf:e6:3d:91:3c:28:10:57:7c:e1:f5:56:
         fa:ff:99:e9:06:3a:a2:df:3a:53:b3:da:b0:f5:37:f4:9a:08:
         69:a8:66:06:12:43:b1:16:07:4b:cf:44:3f:36:77:37:7d:11:
         b3:18:5f:4e:e7:96:ba:35:f4:2d:31:84:09:f6:c7:52:cb:92:
         66:4e:2f:90:c6:29:66:d6:f1:1e:cf:22:77:fb:48:56:cb:74:
         3d:37:6c:19:05:02:7d:ca:d7:61:a8:9d:fd:12:ee:01:24:54:
         ba:8c:df:2b:1f:d7:59:36:db:20:88:47:4e:47:d6:39:f6:f0:
         0b:45:ce:f7:0d:90:c6:63:37:88:b3:bf:0f:ed:56:c1:2a:17:
         d6:83:86:ce:e1:0b:79:f1:c8:e9:bf:e7:c5:af:83:48:ea:17:
         f7:00:19:45:d5:9a:24:28:7d:a1:89:63:3e:4d:9b:77:73:e8:
         82:02:ea:80:36:86:bd:d5:c4:da:d4:ce:a6:5f:a6:13:a9:18:
         6c:8b:be:ae:76:e2:f6:2a:9c:ac:d3:0e:7a:5a:cf:a6:a7:0a:
         e6:45:d4:3f:38:04:0c:15:f8:94:8f:d0:c2:f2:b5:8a:31:b5:
         ce:c8:f6:7c
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE6I7dxxIqiXgYTn5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE1ZmUxZGQtZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEz
YzQyMB4XDTI2MDcxODAxNTc0M1oXDTI4MTAyMDAxNTc0M1owLzEtMCsGA1UEAxMk
ZDkwYjkzMTgtYTBmMS00ZmQ4LTg0OTEtMzExMTRiMzMwYjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aZKR7xVHzZIT/Wzj4GAdw78Zo+ICy0T+sMj
kUNkIbpMED4/0oUCGQMejXLZ80fFpXVWxRDETnxZj+7Aiioz1n3myjl+oEFmh//+
kEYecHs/oHXb3x5fR9V4w8hDZGtg4DjKmvpF86R3FXS587RxAAKA19wJ0Lqtx87r
wY0jxTA8aQJ4NlNUm4uBKtzQTj45rVwmE/Nqh1fyTi2sOIUGQxyiPqOUMwK1o5nN
Kw0oKUoYJE+omBmiAjieAK2rYehBR0VmCGuP9IKvFFIqs3VLjqiTF0dtJDTZraed
cCZv8vogwWhIUciP7gHwuQiRTnSy8i33Y6jXyIvdXc2azs6M2QIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFEpyve8HVD1U5w2wlEYNXaDWDJrHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9k
OTBiOTMxOC1hMGYxLTRmZDgtODQ5MS0zMTExNGIzMzBiOWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjE1ZmUxZGQt
ZDgyOS00Yzg3LWIyY2MtNTY4OTM4MWEzYzQyL2Q5MGI5MzE4LWEwZjEtNGZkOC04
NDkxLTMxMTE0YjMzMGI5Zi9kOTBiOTMxOC1hMGYxLTRmZDgtODQ5MS0zMTExNGIz
MzBiOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZl
MWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82MTVmZTFkZC1kODI5LTRj
ODctYjJjYy01Njg5MzgxYTNjNDIuY3JsMB8GA1UdIwQYMBaAFObqEwytSEkoeKrj
PyDVEGHbhUIgMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYx
NWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi5jZXIwMwYIKwYBBQUH
AQcBAf8EJDAiMBAEAgABMAoDAwCqrQMDAKrcMA4EAgACMAgDBgQmIAFpADAnBggr
BgEFBQcBCAEB/wQYMBagFDASAgJWAAICWYQCAwCe6QIDALbGMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEs/
Azi/WcJEn6rwhtdn8rRrJQGhCPDAMr/mPZE8KBBXfOH1Vvr/mekGOqLfOlOz2rD1
N/SaCGmoZgYSQ7EWB0vPRD82dzd9EbMYX07nlro19C0xhAn2x1LLkmZOL5DGKWbW
8R7PInf7SFbLdD03bBkFAn3K12Gonf0S7gEkVLqM3ysf11k22yCIR05H1jn28AtF
zvcNkMZjN4izvw/tVsEqF9aDhs7hC3nxyOm/58Wvg0jqF/cAGUXVmiQofaGJYz5N
m3dz6IIC6oA2hr3VxNrUzqZfphOpGGyLvq524vYqnKzTDnpaz6anCuZF1D84BAwV
+JSP0MLytYoxtc7I9nw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:40 2026 by rpki-client