Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e.cer
File:                     3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e.cer (raw, json)
Hash identifier:          a3ab37+EFHYpUvcARXizMi3CgIUljkqmb6cd4D3FMNU=
Subject key identifier:   F9:2A:84:A8:4C:F7:48:DF:E7:AE:F9:08:F0:20:A7:71:9D:76:5E:03
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer:       /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial:       010D0C9F4328584FD02B997F8DA4C38372E438C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Nov 2026 07:11:26 +0000
Certificate not after:    Wed 14 Feb 2029 07:11:26 +0000
Subordinate resources:    IP: 23.167.76.0/24
                          IP: 2602:f281::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d0:2b:99:7f:8d:a4:c3:83:72:e4:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
        Validity
            Not Before: Nov 12 07:11:26 2026 GMT
            Not After : Feb 14 07:11:26 2029 GMT
        Subject: CN=3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:19:ba:62:a4:0c:41:89:b8:dd:6b:3e:0e:58:
                    eb:86:eb:f6:c7:1c:c5:ff:c5:65:48:7c:39:e1:83:
                    9d:80:2a:82:0f:7a:c3:9f:63:00:fb:fe:73:14:38:
                    d4:89:23:55:7c:7b:fe:43:8e:90:9a:52:37:11:42:
                    d5:51:69:b5:5b:81:51:49:5b:29:87:7d:b3:25:f3:
                    f0:97:d6:ef:03:1f:95:49:b5:5e:c6:c4:46:28:ca:
                    38:d2:b4:a6:f5:4b:38:ce:ce:0c:f3:68:e9:77:df:
                    25:09:22:6a:37:ff:f9:e6:69:97:dc:cd:7d:6e:85:
                    97:58:12:05:aa:74:55:1d:fd:9b:d1:9f:b2:84:6b:
                    02:b9:b6:22:8e:7a:c6:4d:ad:9a:88:3d:3e:25:71:
                    fb:50:9d:4e:83:fb:ee:78:29:64:6e:dd:51:55:3a:
                    3c:16:fc:b0:02:21:49:e6:9d:38:93:50:da:a2:1b:
                    aa:d2:fd:00:34:bb:18:bc:c4:ea:60:e0:6d:05:06:
                    a3:3d:93:2d:f6:1d:72:ce:76:2a:9c:06:24:f6:07:
                    c9:34:de:5f:56:69:41:eb:21:d5:de:56:53:fa:09:
                    2a:d7:71:8c:62:4f:ae:38:c9:5f:5b:0d:cb:24:f4:
                    9c:7c:6e:87:37:09:82:a2:2c:8a:f6:b2:39:f3:db:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2A:84:A8:4C:F7:48:DF:E7:AE:F9:08:F0:20:A7:71:9D:76:5E:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e/3f5b66aa-0f0c-4542-aa82-da7c9ed33e6e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl

            X509v3 Authority Key Identifier:
                keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.76.0/24
                IPv6:
                  2602:f281::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:22:db:5a:b9:12:05:0a:a4:1b:92:a5:e0:b3:b4:fc:8c:4e:
         8c:3f:48:d5:07:30:57:8e:12:77:5d:61:75:50:0e:d3:23:1f:
         1c:6a:e8:45:53:ef:ac:a5:e0:02:2d:b9:1c:ef:4a:38:69:a7:
         25:82:d4:08:97:9e:ba:39:e1:58:ce:fb:37:ef:13:d0:dc:9d:
         3a:d2:39:84:44:6d:7a:2e:de:6d:a7:c8:5f:20:ed:34:f2:ef:
         1f:01:7e:d0:8b:71:7f:79:e4:bc:78:a7:52:da:a1:1f:9c:d5:
         5f:15:f7:35:00:12:d6:3b:2d:0e:c3:fb:8b:82:e5:d1:c0:c4:
         ab:7b:a2:a2:a7:0c:20:0c:49:83:76:86:21:d7:16:9b:08:f7:
         ea:00:c0:48:84:ec:58:63:8c:86:ef:41:7f:01:4d:5f:05:c3:
         61:66:4c:8e:83:53:ed:a4:93:36:e8:45:e4:f6:ea:2b:63:6f:
         0a:e1:7c:b6:c9:f7:c3:c0:62:9d:8b:09:e3:3d:e8:bf:6b:5d:
         19:a7:24:40:6a:37:e4:74:80:6f:6a:d1:72:36:2e:f3:11:98:
         ea:e3:2b:55:73:ec:41:5e:53:26:f1:50:a9:4c:ee:06:14:29:
         eb:5b:aa:c0:dc:6a:49:77:78:d3:3f:e1:87:f2:8f:38:0a:02:
         dd:f0:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:42 2026 by rpki-client