Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/439088d6-b47b-4652-a212-8ec3ee83f9f5.cer
File:                     439088d6-b47b-4652-a212-8ec3ee83f9f5.cer (raw, json)
Hash identifier:          TOJWgcqK8Oq9WJcC/MBIE1acwHcLzPxgXf+uovvfivg=
Subject key identifier:   89:14:60:44:DA:B7:29:41:F9:9A:AA:85:16:6D:3E:70:A2:E2:A1:87
Authority key identifier: 66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64
Certificate issuer:       /CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
Certificate serial:       010D0C9F4328584FC8F0DAA790509B3436D23360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/439088d6-b47b-4652-a212-8ec3ee83f9f5/439088d6-b47b-4652-a212-8ec3ee83f9f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/439088d6-b47b-4652-a212-8ec3ee83f9f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Nov 2026 17:02:25 +0000
Certificate not after:    Sun 11 Feb 2029 17:02:25 +0000
Subordinate resources:    AS: 398272
                          IP: 198.44.203.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c8:f0:da:a7:90:50:9b:34:36:d2:33:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77526a0-fe4e-4741-b39b-323353a1ebf2
        Validity
            Not Before: Nov  9 17:02:25 2026 GMT
            Not After : Feb 11 17:02:25 2029 GMT
        Subject: CN=439088d6-b47b-4652-a212-8ec3ee83f9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:88:75:61:36:38:74:2f:73:d6:40:70:e2:
                    3f:a1:fb:a5:89:30:e0:24:97:75:49:7a:41:b5:19:
                    7f:04:34:d0:30:e9:5e:dd:26:80:f5:31:3a:a9:b8:
                    de:0c:b6:e2:a9:d0:db:4a:0c:6b:f6:54:fa:c2:e2:
                    7e:94:74:6f:74:d4:db:5b:56:34:fe:db:ad:b7:5a:
                    a1:ea:2a:e5:80:62:8a:4c:94:71:72:73:2d:0c:b4:
                    94:f6:5a:aa:70:ab:3c:63:35:6d:0f:e7:2e:d8:57:
                    67:b3:df:9f:b4:2c:b2:53:a9:44:38:c6:68:d2:0f:
                    d1:e7:33:55:3f:86:93:31:74:ab:4f:a6:72:a4:78:
                    14:2d:4c:7f:fa:e7:ce:de:0d:9c:27:de:02:f1:64:
                    d6:2c:ae:bf:c2:c1:61:68:08:75:c3:84:77:a3:a5:
                    64:24:9e:bd:97:4d:ae:b5:aa:d0:a6:4b:f8:a2:c4:
                    1d:fb:ca:67:38:92:8d:91:72:d9:6f:26:66:7c:40:
                    36:d7:3b:d7:9f:52:7b:cb:bc:2d:b3:f8:96:ec:97:
                    8e:f2:23:9d:21:69:4e:7f:fa:bd:d6:1b:70:c4:e5:
                    b7:b5:47:3a:83:58:21:71:8f:6e:af:3c:4e:38:7a:
                    d6:57:96:b6:85:8e:e8:9f:b1:5f:a5:a7:e3:54:bc:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:60:44:DA:B7:29:41:F9:9A:AA:85:16:6D:3E:70:A2:E2:A1:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/439088d6-b47b-4652-a212-8ec3ee83f9f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/439088d6-b47b-4652-a212-8ec3ee83f9f5/439088d6-b47b-4652-a212-8ec3ee83f9f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl

            X509v3 Authority Key Identifier:
                keyid:66:A4:1D:F8:79:00:9D:05:B1:30:8E:EB:B2:D8:C9:FE:B4:B1:76:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.203.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398272

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:3c:8f:0a:c8:b5:11:dc:b8:c8:8a:0a:f4:e9:c4:dd:c2:
         61:ae:c9:51:6a:03:82:0d:5f:41:db:eb:d6:99:95:1b:58:84:
         a1:94:91:32:88:c3:8c:30:1d:c5:1b:a5:62:e9:56:3f:2c:c1:
         1e:1c:17:87:29:93:b8:19:40:d8:4d:68:e2:13:c8:25:e7:3b:
         c9:30:e6:d7:55:d5:1e:49:d0:cc:18:f8:88:19:02:0a:74:53:
         1c:40:13:d4:5e:c5:79:14:6d:2c:c6:59:ea:3e:ae:76:3c:9e:
         f0:03:ba:17:09:55:cf:2c:c2:ac:f0:b0:b7:26:b3:dc:37:1f:
         1e:29:6e:fc:6b:e2:82:87:f5:af:6f:3d:95:02:45:07:84:39:
         e1:a9:b1:be:f4:b3:cf:ed:e4:61:76:f0:ad:92:87:75:d1:21:
         06:3e:9d:c4:7c:82:76:3d:b1:ee:94:e7:cc:e7:8e:82:c4:91:
         66:9e:9c:96:ed:08:d5:80:e5:2e:d5:1e:e5:32:69:29:13:e2:
         06:7c:65:ba:a7:6a:8a:73:ba:1a:8f:f1:01:18:05:54:75:be:
         16:57:80:12:8c:b9:88:9f:49:fa:b4:0f:4b:cb:aa:f5:29:b8:
         d4:02:7d:40:68:9f:df:6f:d7:7e:97:0b:5c:a9:bb:6c:ee:21:
         50:23:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:31 2026 by rpki-client