Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
File:                     2de5d746-3402-4263-b880-ea4d7ecfc168.cer (raw, json)
Hash identifier:          K9mSBT3+jYtpnuT1F7EIQbA+xmkF8HAGMr5EuAP9FRg=
Subject key identifier:   6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584E89B818F842EC5EEAF3A01000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 18 Jul 2026 08:45:11 +0000
Certificate not after:    Fri 20 Oct 2028 08:45:11 +0000
Subordinate resources:    AS: 22359
                          AS: 46265
                          AS: 53471
                          AS: 400196
                          IP: 69.161.210.0/23
                          IP: 98.97.224.0/20
                          IP: 207.22.32.0/21
                          IP: 208.52.176.0/23
                          IP: 2607:8240::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:b8:18:f8:42:ec:5e:ea:f3:a0:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jul 18 08:45:11 2026 GMT
            Not After : Oct 20 08:45:11 2028 GMT
        Subject: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:b1:96:72:ef:22:5a:4a:85:c2:b5:3c:29:
                    69:b7:6a:26:d4:3b:47:a7:56:7a:27:61:13:c7:9d:
                    24:60:e7:0e:73:17:27:11:d0:74:cd:ae:63:75:d8:
                    e9:b7:80:54:48:a5:53:8c:13:28:1a:69:b0:52:16:
                    1d:46:1d:93:c8:31:ba:81:f8:43:52:d1:b9:e6:3b:
                    6d:75:eb:7a:63:7c:bb:73:ea:cd:bb:f0:11:95:12:
                    a9:a3:40:2e:c3:9a:a5:10:aa:52:8e:6b:31:ee:62:
                    2f:49:97:b9:6f:d1:f8:13:b0:38:37:99:82:76:de:
                    16:9d:b6:59:62:16:af:1b:56:b1:6b:b1:3f:d8:3d:
                    26:0d:2c:dc:ee:1d:7c:eb:34:45:23:4a:cb:a7:a8:
                    70:0b:e8:68:1c:35:ab:ac:b8:0b:e4:2e:17:bf:ed:
                    d4:a8:2b:e3:5e:b2:4c:d4:8a:12:84:4b:ef:ad:88:
                    67:43:f1:78:23:c8:c5:c9:e6:57:3f:78:51:a0:09:
                    af:a4:f7:86:47:00:44:47:c1:1e:e7:73:1f:79:05:
                    5a:8b:4c:3c:44:2f:d3:8a:7f:d5:bf:ab:3b:f7:e5:
                    26:68:f5:10:a1:3f:1a:26:ca:9f:01:70:41:a6:b3:
                    63:db:20:11:a9:91:48:f3:71:62:4c:ef:5e:04:9d:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.210.0/23
                  98.97.224.0/20
                  207.22.32.0/21
                  208.52.176.0/23
                IPv6:
                  2607:8240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22359
                  46265
                  53471
                  400196

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:74:ba:d2:a1:72:da:55:9a:8f:1e:a0:66:90:70:1c:37:88:
         6a:98:95:82:fb:77:01:d1:cd:e5:f6:45:cc:9c:6e:25:2c:59:
         62:3a:be:0e:3b:3c:d0:50:06:51:1f:90:29:41:db:16:f2:8b:
         ab:a6:2b:c8:ad:57:d3:ec:90:09:e4:2f:30:f4:ae:93:4b:cb:
         73:f9:5c:a5:90:0f:a9:c3:ba:e3:63:e8:98:03:e0:6f:98:ab:
         82:a7:2e:6f:69:8b:cd:3a:a0:29:88:13:50:fe:18:35:d3:c2:
         c4:e1:13:ad:7d:86:77:35:ca:83:a3:0e:8d:4f:ca:92:3c:b9:
         e1:b9:e8:17:39:96:be:55:b3:d8:27:d6:59:fc:bc:ef:0e:74:
         b9:6d:33:8d:58:96:3e:7e:d8:88:ce:41:c9:29:16:f6:9d:94:
         f9:b0:73:4b:f9:4e:4d:4d:e3:f1:e5:2e:6f:5d:ca:14:ac:92:
         5b:e4:e7:83:0c:e5:a6:dc:50:2b:30:6e:10:f1:4e:32:cf:43:
         2a:a9:80:66:d4:0e:c6:f2:a8:9b:fa:1d:38:22:7d:cc:f0:41:
         d5:a8:8d:eb:c7:e0:a0:fd:6b:14:e9:47:37:dc:63:e7:85:aa:
         f8:94:84:c1:d7:aa:da:b4:da:64:80:46:95:34:3d:b2:8e:38:
         4b:5a:c6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:17 2026 by rpki-client