Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer
File:                     981ab9bf-5f34-4622-99ac-a75fc5fb7bca.cer (raw, json)
Hash identifier:          6ptm1wYHM5ZQpi6rN0sM/leXAZEuz73k0O0/MTy9t90=
Subject key identifier:   57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584DD088C565B22AED098A6FCA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 May 2026 00:45:17 +0000
Certificate not after:    Tue 15 Aug 2028 00:45:17 +0000
Subordinate resources:    AS: 394325
                          AS: 396354
                          IP: 23.131.132.0/24
                          IP: 45.41.5.0/24
                          IP: 131.143.175.0/24
                          IP: 199.71.209.0/24
                          IP: 2607:7ac0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:88:c5:65:b2:2a:ed:09:8a:6f:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 13 00:45:17 2026 GMT
            Not After : Aug 15 00:45:17 2028 GMT
        Subject: CN=981ab9bf-5f34-4622-99ac-a75fc5fb7bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:64:d9:69:97:a0:9b:39:79:88:69:91:83:
                    cb:79:8d:0f:6b:92:23:ac:58:3a:82:c1:cc:4a:77:
                    1c:5c:62:3b:4a:a7:eb:d5:1a:2e:45:99:56:23:46:
                    5f:3a:88:a2:8f:8d:8e:1e:21:8a:08:d4:7f:57:77:
                    94:72:36:17:8b:b0:23:2d:fd:2e:38:38:81:73:d3:
                    01:bc:8c:49:db:21:35:24:cf:7c:99:99:12:96:2e:
                    8f:45:64:4e:73:bf:5d:79:c3:c1:4f:c5:7c:df:d6:
                    2b:76:35:f9:35:24:40:92:5d:f2:70:da:64:8e:a6:
                    7f:8e:b7:b1:39:c5:b7:ea:7d:ad:e7:22:e3:fb:a8:
                    0c:74:cf:6b:22:a4:e3:c3:12:a1:6b:e1:3c:3c:55:
                    73:97:75:50:b0:7b:92:29:ec:45:2d:4a:b1:13:7d:
                    79:bb:64:6e:53:32:9c:37:bf:38:f5:45:45:6c:08:
                    40:bc:ea:59:80:fe:8d:e0:be:d7:42:ea:b6:ab:e9:
                    e4:b1:6e:b0:8c:9c:e5:7c:6d:d8:e9:d7:c0:39:0e:
                    34:51:44:7a:99:4a:8c:13:38:53:6a:34:df:31:da:
                    65:d2:7b:ad:55:cd:bd:54:e0:09:09:db:63:ec:d9:
                    cb:2c:6d:20:a6:cf:fe:aa:08:e9:97:04:e0:8d:1b:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:B0:D0:A6:68:1E:16:E2:27:88:F1:F3:12:9C:1E:A9:E3:8B:0E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/981ab9bf-5f34-4622-99ac-a75fc5fb7bca/981ab9bf-5f34-4622-99ac-a75fc5fb7bca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.132.0/24
                  45.41.5.0/24
                  131.143.175.0/24
                  199.71.209.0/24
                IPv6:
                  2607:7ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394325
                  396354

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:ff:54:da:0a:db:72:01:90:15:a4:71:28:73:da:b9:62:
         ef:b7:b9:55:fe:dd:95:8f:09:f4:0b:16:49:90:07:79:63:51:
         0a:a0:9a:da:74:7a:38:4a:94:2f:d2:3c:cc:7a:2a:a1:d7:f1:
         2f:77:73:fa:e2:8d:b7:b8:7c:27:c4:de:12:54:5d:c9:78:7f:
         2b:fb:27:c8:74:26:3e:13:d7:7e:28:24:1d:94:a8:6f:a6:ae:
         9d:03:e5:d1:f3:e7:26:2c:aa:15:21:6d:6a:9e:71:e0:19:7e:
         54:05:46:bf:6f:52:8f:c8:b7:e7:61:08:e3:2c:f1:45:86:ca:
         db:aa:3f:fb:c3:bb:f5:07:42:df:a9:3f:26:cb:65:af:e1:77:
         50:e1:17:84:2b:2b:86:ac:93:5e:6d:c3:c0:f4:97:17:41:eb:
         c7:00:eb:19:f7:f1:b6:c0:e6:c9:71:0d:d0:70:a5:82:1c:7f:
         1f:73:24:6c:6c:8e:30:c5:4c:98:dc:43:4c:90:16:cc:90:2a:
         07:bb:85:52:6d:36:90:ed:84:54:92:59:d9:e0:a8:74:12:71:
         9d:8e:99:09:73:00:72:42:1d:42:17:18:e6:af:1f:40:72:0a:
         f6:1a:f7:fe:06:db:ff:dc:d1:e4:4d:0d:40:ee:3d:f2:27:83:
         af:30:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:43 2026 by rpki-client