Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
File:                     9405685a-cbfe-4a3e-8842-f5f720c7959c.cer (raw, json)
Hash identifier:          6pS9YvWMJb8mz7edhM4S7JcEpWsczwD2KOVtom1AevQ=
Subject key identifier:   16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584EFF6FF1A11259DD697B531BF3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 29 Aug 2026 12:45:11 +0000
Certificate not after:    Fri 01 Dec 2028 13:45:11 +0000
Subordinate resources:    AS: 396305
                          IP: 83.229.48.0/22
                          IP: 170.76.155.0/24
                          IP: 170.76.214.0/23
                          IP: 173.205.222.0/23
                          IP: 2604:43c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:6f:f1:a1:12:59:dd:69:7b:53:1b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Aug 29 12:45:11 2026 GMT
            Not After : Dec  1 13:45:11 2028 GMT
        Subject: CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:6d:6c:c4:dd:75:17:af:38:cc:a8:1e:8a:
                    8b:d0:62:98:fe:f4:b4:05:46:0a:14:c3:f4:28:9e:
                    1d:56:16:10:1e:ea:28:a1:20:8b:e5:04:b5:a8:83:
                    ec:6d:f0:5d:bd:ed:bd:46:4d:ce:b0:21:73:30:23:
                    13:6b:af:d8:98:13:35:f7:29:97:72:58:cd:e9:fb:
                    89:fc:d8:45:3a:ab:ae:40:a7:13:de:cd:41:b0:28:
                    5b:69:c3:76:ce:4a:95:fc:9e:55:33:b5:a5:c0:2d:
                    a3:8a:0f:91:ad:03:24:37:be:83:c9:68:e1:ef:f1:
                    66:d7:11:68:16:6f:5b:07:94:d6:73:02:08:bf:98:
                    7a:9f:7a:85:73:21:5e:b1:9a:7a:24:67:07:96:0b:
                    1b:e8:91:4a:4b:c2:96:c7:66:bc:23:6a:f6:60:b0:
                    26:4f:e0:b7:67:c9:da:52:94:ec:75:28:67:e1:71:
                    0a:a8:09:e1:89:fe:d5:8a:b3:5c:8a:1b:2b:50:93:
                    0e:6b:90:65:83:1e:07:a3:69:95:d2:d4:34:92:07:
                    f2:c6:06:07:75:d0:1e:78:33:4b:46:78:34:19:19:
                    19:1b:3b:26:b5:17:3b:50:79:16:99:5d:aa:0d:86:
                    77:99:1d:17:5c:0e:da:4e:5e:cd:2e:06:ea:9e:0b:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.48.0/22
                  170.76.155.0/24
                  170.76.214.0/23
                  173.205.222.0/23
                IPv6:
                  2604:43c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396305

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:59:cd:2e:c3:8e:cd:88:e3:ed:21:ff:50:24:6e:96:4e:
         de:50:a7:6b:7b:9c:b2:05:28:ec:f8:8e:f3:83:cb:a8:1a:3b:
         78:bd:c7:ba:9d:44:6d:ff:d6:33:7d:1f:b2:fb:44:fc:d9:03:
         ed:76:eb:28:14:82:6b:60:dc:67:dd:13:a2:5f:49:ca:4d:66:
         86:3a:fd:29:9c:96:e9:1a:cd:a4:4a:39:d6:c3:97:7e:a7:c7:
         6e:29:93:58:98:72:06:08:3c:69:15:29:78:82:b3:af:95:65:
         6a:a5:fd:7e:1d:8d:f1:0b:93:0d:2b:19:f0:5f:f6:b8:60:e2:
         d3:29:77:79:ca:a7:9c:00:5b:49:a3:c5:2a:d1:e7:24:14:0d:
         f5:fa:34:7e:28:f5:c8:a0:f2:4b:1b:80:46:45:d0:f1:da:84:
         b6:3d:5a:4d:93:7e:74:07:d2:e2:ff:6f:65:ec:b9:19:a4:21:
         21:2b:39:1e:b3:8e:cd:48:fd:25:cc:e8:7d:5f:17:d0:14:57:
         ad:0f:4e:73:7e:ef:c9:b7:d2:53:61:d5:b5:22:ae:17:39:da:
         18:c9:9d:14:f5:f0:ff:99:e6:0c:ae:17:fd:cf:c6:5d:f3:17:
         c7:3e:a3:cf:8c:dd:11:3e:a1:08:11:b5:d4:c9:20:a3:3c:8a:
         ed:78:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:22:19 2026 by rpki-client