Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
File:                     b927dc15-9316-467a-b50d-d6b361478436.cer (raw, json)
Hash identifier:          M4cd1DBlI6kt3jieEdpMzOXf+Ax4J8DXIIX/l3ejRSM=
Subject key identifier:   9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584E4C4D0C0C6DCADA419BC8CF60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jun 2026 08:45:11 +0000
Certificate not after:    Thu 28 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 2901
                          AS: 11173
                          AS: 26640
                          IP: 192.133.99.0/24
                          IP: 192.150.253.0/24
                          IP: 198.49.160.0/24
                          IP: 198.59.96.0/24
                          IP: 198.59.98.0 -- 198.59.105.255
                          IP: 198.59.109.0 -- 198.59.114.255
                          IP: 198.59.116.0 -- 198.59.127.255
                          IP: 198.187.251.0/24
                          IP: 2605:800::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:4d:0c:0c:6d:ca:da:41:9b:c8:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 26 08:45:11 2026 GMT
            Not After : Sep 28 08:45:11 2028 GMT
        Subject: CN=b927dc15-9316-467a-b50d-d6b361478436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:0e:ff:da:41:59:f2:69:e1:a6:7e:05:b5:
                    f0:61:4e:c2:24:f3:66:21:ba:97:25:07:d6:2e:a0:
                    f1:3e:13:cb:c9:ae:52:e6:4b:4b:71:c0:58:1c:e3:
                    68:e6:77:04:f0:47:e2:0f:98:15:64:0d:06:ee:45:
                    60:70:68:53:26:7d:9b:ba:44:43:50:57:34:35:f8:
                    d2:85:6c:28:15:00:82:b3:7a:2d:bb:06:01:e5:07:
                    8b:5b:30:4c:1f:fd:72:1c:41:ab:b2:a0:2e:87:90:
                    d2:33:02:b7:33:35:53:0d:7a:6f:79:3e:88:c5:67:
                    dd:33:e5:c7:57:6d:b7:be:ae:58:e0:b8:6c:02:db:
                    62:03:d9:17:6f:08:2e:29:b3:a1:74:09:d9:5a:c5:
                    dd:56:aa:50:74:16:c8:39:68:32:07:81:27:22:77:
                    10:db:eb:eb:3d:f9:a5:a1:10:f4:9d:60:4c:b5:71:
                    ae:cb:3c:1a:40:0b:73:6e:7d:c4:fa:9d:2a:62:62:
                    ca:14:4a:52:98:ca:50:5d:77:87:34:f6:4c:45:34:
                    fe:6b:b6:90:3e:e4:e9:c9:76:35:96:fd:8c:c8:3b:
                    24:33:ed:c1:bf:b8:3d:15:cd:c8:cd:c1:ba:d9:e5:
                    bb:91:7e:83:d0:60:40:89:7a:51:68:21:4c:76:18:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.99.0/24
                  192.150.253.0/24
                  198.49.160.0/24
                  198.59.96.0/24
                  198.59.98.0-198.59.105.255
                  198.59.109.0-198.59.114.255
                  198.59.116.0-198.59.127.255
                  198.187.251.0/24
                IPv6:
                  2605:800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2901
                  11173
                  26640

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:79:6c:8c:c7:2c:03:81:03:7f:7a:e0:16:ba:ab:92:53:98:
         65:6b:c9:f2:e6:a3:63:e2:98:9c:e4:36:22:7a:f3:ff:0e:b0:
         31:49:5e:60:3c:04:48:71:ab:b9:f5:e6:e4:c7:0d:62:b2:76:
         e4:84:b8:c0:d1:35:f8:54:fe:c0:e5:83:0c:3e:3b:f4:e4:54:
         1a:29:f8:c4:2a:50:04:b2:11:f7:1e:74:0f:6d:9d:ca:00:30:
         4d:7e:ac:52:6a:66:da:45:1a:42:14:09:99:bd:19:ca:90:1c:
         64:ca:d2:a8:77:12:5c:54:08:90:21:b5:f3:75:04:c0:d0:5d:
         9f:72:01:c1:a7:80:e9:d3:96:f0:4c:c4:81:02:86:b6:dc:5f:
         0c:78:ad:c5:9f:cc:cd:de:72:7c:62:65:b7:4d:41:d3:59:80:
         b5:c0:e4:f9:aa:51:5b:5f:db:f6:50:76:d3:eb:4a:f1:51:29:
         8f:cd:10:70:12:c4:2a:c6:4a:12:2d:db:e9:7c:93:6c:3b:6d:
         09:af:9b:50:ea:25:dd:75:53:e9:21:27:84:f2:cb:c1:83:52:
         40:3f:02:d5:7e:a7:6c:7a:92:87:e6:9d:5d:c6:4e:77:f9:7f:
         d4:fb:b5:10:2f:5d:b9:de:35:cc:87:1b:a1:23:a6:5e:c7:8e:
         2a:e1:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:42 2026 by rpki-client