Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2b9e9eb1-55f6-4c94-be78-cfe06cf13396.cer
File:                     2b9e9eb1-55f6-4c94-be78-cfe06cf13396.cer (raw, json)
Hash identifier:          TgcNdF+0G04w72Rq8CJpm0SyMRBb25SizCtkTOkhxTQ=
Subject key identifier:   35:69:AB:3F:F4:4A:59:5E:ED:0B:B4:27:A5:52:B2:84:C6:50:3D:FA
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer:       /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial:       010D0C9F4328584FD3C3BDCC9AAF34CA2F304A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2b9e9eb1-55f6-4c94-be78-cfe06cf13396/2b9e9eb1-55f6-4c94-be78-cfe06cf13396.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2b9e9eb1-55f6-4c94-be78-cfe06cf13396/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Nov 2026 14:05:24 +0000
Certificate not after:    Thu 15 Feb 2029 14:05:24 +0000
Subordinate resources:    AS: 26827
                          IP: 23.251.64.0/19
                          IP: 45.43.96.0/20
                          IP: 66.18.32.0/19
                          IP: 66.85.224.0/20
                          IP: 68.169.128.0/18
                          IP: 74.205.128.0/20
                          IP: 74.221.176.0/20
                          IP: 104.128.160.0/20
                          IP: 104.171.240.0/20
                          IP: 104.251.240.0/20
                          IP: 108.174.96.0/20
                          IP: 173.247.0.0/19
                          IP: 184.174.128.0/18
                          IP: 192.111.64.0/20
                          IP: 192.223.0.0/24
                          IP: 198.57.80.0/20
                          IP: 198.254.80.0/20
                          IP: 204.93.96.0/19
                          IP: 2605:8600::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d3:c3:bd:cc:9a:af:34:ca:2f:30:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
        Validity
            Not Before: Nov 13 14:05:24 2026 GMT
            Not After : Feb 15 14:05:24 2029 GMT
        Subject: CN=2b9e9eb1-55f6-4c94-be78-cfe06cf13396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:25:93:ea:3d:3d:34:d2:4b:4a:fe:a4:62:
                    e9:c4:90:fc:26:5d:18:a2:3d:99:27:76:19:ff:e7:
                    19:12:b6:de:d2:50:5e:b4:1c:69:1b:f1:c4:c9:75:
                    68:d1:30:9d:4e:56:2b:eb:eb:70:0c:14:31:87:81:
                    14:01:6e:ba:07:04:90:cb:6d:2d:32:3d:41:76:ff:
                    41:31:b1:a6:22:25:33:36:33:08:7c:b2:91:5d:09:
                    eb:c1:5d:ea:0d:3f:91:a3:12:2c:68:9f:29:d2:a3:
                    f7:63:9f:59:37:19:ec:02:41:e9:25:30:c1:a7:79:
                    08:99:c4:08:8b:a9:be:f2:73:a9:fc:22:95:32:2e:
                    aa:4d:c0:75:f5:17:ec:c2:73:29:4f:1d:03:36:44:
                    eb:39:c8:ff:a6:38:ca:eb:a7:21:fd:0b:bf:a3:15:
                    31:e6:5f:61:15:e9:33:59:d9:c5:aa:b3:b6:d4:12:
                    95:83:a2:c6:5e:fa:8a:52:f4:38:28:6d:d6:1c:09:
                    49:2b:d5:a7:91:4c:8a:47:a4:12:42:b8:6b:b0:20:
                    de:2e:a1:50:59:52:fe:5e:7e:1f:fe:06:19:82:82:
                    ca:e0:fb:d2:9e:53:f8:db:53:6e:68:dd:be:33:80:
                    64:13:66:67:79:7b:06:4a:7b:23:f0:4c:fe:cb:10:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:AB:3F:F4:4A:59:5E:ED:0B:B4:27:A5:52:B2:84:C6:50:3D:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2b9e9eb1-55f6-4c94-be78-cfe06cf13396/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2b9e9eb1-55f6-4c94-be78-cfe06cf13396/2b9e9eb1-55f6-4c94-be78-cfe06cf13396.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl

            X509v3 Authority Key Identifier:
                keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.64.0/19
                  45.43.96.0/20
                  66.18.32.0/19
                  66.85.224.0/20
                  68.169.128.0/18
                  74.205.128.0/20
                  74.221.176.0/20
                  104.128.160.0/20
                  104.171.240.0/20
                  104.251.240.0/20
                  108.174.96.0/20
                  173.247.0.0/19
                  184.174.128.0/18
                  192.111.64.0/20
                  192.223.0.0/24
                  198.57.80.0/20
                  198.254.80.0/20
                  204.93.96.0/19
                IPv6:
                  2605:8600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26827

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:29:b7:81:62:75:82:01:9e:24:33:97:e6:91:89:10:7e:66:
         80:54:c0:fc:30:85:29:d6:bd:6f:fe:c9:ef:b1:cb:e4:e8:06:
         9f:ea:b8:e3:85:5b:1c:e3:99:0a:27:b4:0e:f4:ea:e4:16:5e:
         57:89:e1:16:a2:f5:d9:bd:16:85:89:d2:e4:d2:83:29:2d:6b:
         d0:3d:09:df:25:85:d0:7c:05:9d:c9:f1:0e:6b:38:d1:47:f6:
         da:7e:51:9c:6f:26:11:62:54:63:4d:34:d5:22:e6:33:a5:24:
         32:8a:2e:b4:7d:51:e6:5b:ad:15:ff:60:b3:7a:2b:29:7b:b1:
         8d:2c:e7:dd:2c:1e:85:8a:2e:f8:0e:87:9c:05:6e:a9:35:e3:
         0e:54:37:05:aa:0f:9a:c4:2e:dd:92:36:90:ff:fd:7d:af:4e:
         3b:d4:d8:98:ed:e1:73:7a:42:bb:c7:66:11:0d:75:65:0c:7d:
         fa:3f:53:a5:f1:e0:ae:83:f5:91:37:5f:62:90:84:30:b6:59:
         95:67:69:b8:54:33:aa:f4:07:e1:56:b0:a6:20:4c:b9:f8:1a:
         9d:34:6b:04:be:6f:7f:f2:e6:ed:67:34:27:8a:1a:36:c9:4a:
         29:dd:cd:40:ad:38:74:a3:22:30:2d:ed:92:67:14:2c:a3:1c:
         b7:d0:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:39 2026 by rpki-client