Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer
File:                     f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer (raw, json)
Hash identifier:          9eMkT8aNBOri3tCNLt+wqipXe327gR5kkIVGbynrnzc=
Subject key identifier:   7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584F777B5C88684B36F7B5268F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Oct 2026 12:45:12 +0000
Certificate not after:    Sat 13 Jan 2029 13:45:12 +0000
Subordinate resources:    AS: 62827
                          IP: 158.51.232.0/22
                          IP: 198.17.211.0/24
                          IP: 198.96.5.0/24
                          IP: 209.209.108.0/22
                          IP: 2620:7f:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:7b:5c:88:68:4b:36:f7:b5:26:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 11 12:45:12 2026 GMT
            Not After : Jan 13 13:45:12 2029 GMT
        Subject: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:62:f2:c6:a9:e2:42:78:66:37:31:cb:2d:
                    23:84:0c:ec:5d:15:4a:19:7e:ab:8f:14:49:31:1a:
                    dd:38:b5:6f:04:1d:d4:2e:bd:dc:b6:33:78:7e:75:
                    54:f6:ec:f8:1c:05:4e:fb:eb:7e:85:8e:68:03:2c:
                    8b:a6:1c:37:59:f4:21:4e:c7:f1:28:89:44:7c:c3:
                    7a:d6:58:5d:63:92:f9:7e:ff:69:a3:15:e9:30:63:
                    22:cc:0d:db:0f:e4:6d:3b:b7:49:f1:06:b2:25:b4:
                    71:30:41:0f:97:eb:7a:40:17:e1:f8:6a:45:45:68:
                    33:f0:74:e1:2e:bd:34:53:b0:23:b8:cc:60:1f:fd:
                    ef:cd:2c:9c:3e:4b:16:63:9f:b8:40:f3:75:58:4d:
                    3b:af:b7:dd:4c:07:56:8b:e1:42:a3:9b:8e:ea:08:
                    6f:e9:0f:25:62:e6:e6:34:8d:0e:45:e2:ff:b7:a4:
                    21:7c:c7:53:2a:13:57:a3:a5:f6:08:31:a9:86:53:
                    1b:e4:4d:12:e6:0a:e7:2a:de:3e:40:37:e1:12:86:
                    78:31:60:77:4f:59:b8:0e:2a:79:0e:79:4d:d2:df:
                    71:70:3e:8f:2b:eb:a5:1d:a7:4d:a4:57:72:df:19:
                    2a:de:37:c2:2e:b2:3b:16:63:f3:37:2c:25:0a:23:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.232.0/22
                  198.17.211.0/24
                  198.96.5.0/24
                  209.209.108.0/22
                IPv6:
                  2620:7f:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62827

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:13:57:8c:a0:6b:48:4e:cb:d5:1a:ea:44:e6:e2:59:97:
         b0:93:f5:88:20:40:f5:5d:97:45:f2:7b:92:1c:0e:8e:78:27:
         ef:73:8a:a3:bd:56:8b:bd:19:a1:b3:11:0e:08:1c:af:3a:65:
         11:2d:d7:f3:71:aa:45:10:4d:43:99:e5:db:23:c7:9a:a0:7e:
         49:e9:fc:59:e7:02:15:7d:31:f9:f2:9d:9f:d7:e9:62:41:2b:
         f4:bd:7c:78:09:bf:95:cc:3f:c3:32:08:92:bb:b8:f7:a9:b4:
         04:12:39:a3:31:91:b3:ac:0a:8f:f4:d0:68:16:26:4f:39:c6:
         35:3a:6e:ed:90:29:e8:1b:15:7e:df:e4:1a:05:a6:25:5e:c2:
         6b:7d:df:ab:2a:44:0a:75:b3:9b:6f:9b:9e:ee:18:5b:40:f7:
         1e:36:15:94:5a:70:8c:1a:38:d6:ec:91:bb:7f:13:13:39:63:
         f3:58:51:70:c2:39:61:2d:e0:0d:8e:d0:c4:41:ac:f7:9d:54:
         10:fd:74:95:9d:e9:06:95:b6:fd:ed:e8:f7:9a:dc:a4:cd:ef:
         84:b8:2c:9a:14:77:9d:47:22:0d:ec:3c:fd:1e:38:f3:82:36:
         b7:c4:12:42:43:0e:e3:a9:e2:03:26:34:c6:d2:0a:24:1c:3b:
         b0:4b:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:39:11 2026 by rpki-client