Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
File:                     124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer (raw, json)
Hash identifier:          M5omwpCsEkFP/9tSCxVIAgESnopecjfnH6hv9lERRaU=
Subject key identifier:   D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584D89585566587A42A1B4536540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Apr 2026 12:45:18 +0000
Certificate not after:    Thu 20 Jul 2028 12:45:18 +0000
Subordinate resources:    AS: 11067
                          AS: 40011
                          IP: 65.79.192.0/19
                          IP: 67.219.160.0/20
                          IP: 216.251.0.0/19
                          IP: 2605:d800::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:58:55:66:58:7a:42:a1:b4:53:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Apr 17 12:45:18 2026 GMT
            Not After : Jul 20 12:45:18 2028 GMT
        Subject: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:a8:6c:9e:38:8f:47:57:f8:d5:0a:b6:18:
                    0b:49:17:c5:15:1b:f4:bc:1e:77:83:56:74:04:8c:
                    91:20:88:75:26:b7:4e:00:13:60:ee:ca:f9:bf:da:
                    3c:0f:7b:b9:03:ee:33:c7:fa:37:20:02:3e:1b:c0:
                    ec:5c:3d:ca:d8:74:4c:48:3d:52:ed:34:90:bf:3c:
                    05:5f:a4:33:34:fc:f5:b5:ac:df:df:67:5b:a0:d8:
                    d9:5c:42:66:47:0f:32:0c:50:fc:cd:d1:f0:63:ce:
                    00:ba:50:d8:b3:e4:64:ba:cf:ed:b7:14:4a:5f:3f:
                    ef:ca:a8:1f:8a:fd:37:67:9e:00:a7:44:fb:5c:cf:
                    6b:37:c5:5a:5b:25:22:d4:91:a5:b8:ac:ac:40:1c:
                    e7:92:87:38:1e:ed:b0:a7:9f:14:95:e2:2c:b0:99:
                    ab:27:cb:6e:c9:0c:fd:30:5c:86:6e:f2:7f:b8:73:
                    c6:2c:d8:df:69:12:3e:02:1c:87:98:b9:05:bf:cf:
                    3e:cf:62:c8:5a:24:ed:57:e9:14:08:7e:52:9e:28:
                    b1:1c:e3:79:4d:ff:24:0a:7e:ae:ef:50:04:c0:94:
                    70:7e:5b:9b:db:20:95:b5:e6:75:af:b8:d3:5f:84:
                    55:dd:4a:88:16:71:b4:9e:a5:1a:de:bc:bd:84:10:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.192.0/19
                  67.219.160.0/20
                  216.251.0.0/19
                IPv6:
                  2605:d800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11067
                  40011

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:20:b1:23:73:14:e6:9e:dc:32:cb:38:38:97:5f:43:a3:
         38:3f:7e:34:4a:bc:ce:d9:41:b9:10:44:77:9b:78:41:e2:e5:
         13:13:6a:f8:0d:a9:3c:57:b8:e4:44:33:8d:4b:04:9d:da:8d:
         f4:e3:7c:c2:61:83:b9:32:87:e6:b1:fe:24:40:89:dc:8b:e2:
         cb:9c:8b:17:91:10:83:b1:d4:e3:05:ad:c4:87:1a:93:d0:90:
         b3:65:ab:6e:7b:b3:37:2c:78:32:60:39:17:f6:ba:a9:52:06:
         f2:d9:6c:87:8c:6d:cf:eb:a1:79:73:5b:89:7b:57:75:bd:9c:
         f9:63:77:da:0c:f4:c7:ae:bb:4a:ad:8f:9e:92:5c:29:48:28:
         74:a4:fe:05:ca:68:d2:95:26:f6:21:83:a9:46:30:78:45:dc:
         fb:c0:0c:71:25:ee:91:74:9d:18:e5:ff:4a:22:ef:90:32:1a:
         a5:c8:11:83:47:3c:d4:c1:a1:0e:55:87:13:4b:b8:80:a0:76:
         7b:96:7a:cd:b5:c5:9b:96:00:f5:5b:62:b5:75:8b:af:09:dc:
         7d:fd:9a:c6:93:07:41:45:bd:da:bf:9e:84:4b:b9:dd:cd:75:
         2d:ea:48:f7:08:ea:0c:e3:97:17:c6:60:88:89:65:95:25:a2:
         fa:5a:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:43 2026 by rpki-client