Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer
File:                     f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.cer (raw, json)
Hash identifier:          gkRVdC5CxFoQIEAPAaS/VhHpodH4srQEMUrKSzPjKfE=
Subject key identifier:   48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584F410B04B790C0B32F41FA4B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Sep 2026 00:45:11 +0000
Certificate not after:    Mon 25 Dec 2028 01:45:11 +0000
Subordinate resources:    AS: 26018
                          IP: 199.4.212.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:0b:04:b7:90:c0:b3:2f:41:fa:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Sep 22 00:45:11 2026 GMT
            Not After : Dec 25 01:45:11 2028 GMT
        Subject: CN=f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:75:d2:9b:db:05:7f:b5:41:96:5d:e3:48:
                    de:1f:a6:b3:5f:89:7d:75:94:59:2c:15:56:95:dc:
                    93:29:20:81:c0:4a:85:f1:90:61:62:a4:68:a0:f9:
                    d7:48:7c:48:bb:bd:68:39:08:55:e1:82:95:04:68:
                    23:43:bc:dc:a8:a3:7a:ff:a4:b6:78:c9:79:f2:51:
                    53:49:a2:5b:a0:ea:a4:be:19:6b:9b:ef:12:f7:86:
                    e5:a7:d7:54:61:c3:e5:ae:29:2a:46:02:da:4e:0f:
                    a2:0e:87:35:8f:07:63:e0:36:77:87:16:e7:94:11:
                    bc:5c:5a:e5:ff:bd:3a:39:2b:d9:0b:3b:be:e2:8d:
                    3d:15:16:95:88:8e:6f:a6:75:81:f4:1f:9c:af:d7:
                    2b:71:3b:19:0d:c6:49:85:a9:c8:8a:64:44:67:43:
                    ce:66:fd:d4:dd:5c:35:e4:2b:48:46:c1:92:fc:1d:
                    0d:54:9d:da:ff:1b:1a:39:52:87:74:f3:a9:31:b8:
                    50:bf:b1:8b:34:25:5c:21:aa:c5:04:af:41:0d:79:
                    ff:0b:96:b7:bc:aa:9e:9d:21:22:f9:89:eb:a5:61:
                    b5:18:d1:48:33:db:2b:3c:1b:f3:b8:72:c2:5e:e7:
                    34:8d:e0:52:46:fb:7e:5d:1d:c4:97:50:e9:c5:e0:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9A:2A:CA:39:4C:A3:EB:81:9D:5B:07:4C:E3:34:1D:B6:52:C6:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b/f7faa8c0-cb89-4cf1-88d5-44cfb76ac61b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.212.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26018

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:12:28:aa:b9:a0:78:4e:46:9c:ea:b1:90:1f:8f:ba:e4:
         5b:80:81:68:ba:49:c5:e6:92:de:3a:c5:a5:6d:17:a9:ff:69:
         aa:ba:7f:3c:e1:f2:4d:4d:e0:a4:38:d8:1a:68:66:6f:2a:88:
         79:84:d3:ba:d5:32:34:37:fb:ba:8c:3c:13:f0:d1:ec:f5:e3:
         1a:48:72:b5:24:cd:c6:3a:38:0e:c7:25:70:17:8b:0d:19:4c:
         61:2a:2b:70:f3:1b:2f:7a:86:6b:a9:16:18:59:64:34:ce:91:
         d1:35:97:d6:44:82:f5:70:f6:d5:ee:f5:4a:2b:7f:3f:43:06:
         7c:57:d7:9f:c1:4a:3a:57:60:58:99:33:3b:3f:10:dc:6c:78:
         e8:0a:6f:85:ac:d5:17:92:83:e1:6e:e8:17:e4:b0:33:1b:31:
         b4:8e:32:09:36:86:21:ad:c0:68:8a:ea:e2:b2:0f:8c:fd:14:
         a3:e7:b3:b3:06:d1:b7:56:e1:91:66:89:f3:83:ee:7d:48:b8:
         5e:4a:8e:01:ce:23:4f:e8:c3:33:79:53:a2:fe:b8:36:24:9f:
         87:ea:52:c6:12:b8:ae:60:66:de:5d:a8:4a:c6:3f:32:7e:ae:
         34:98:93:77:a6:6b:87:47:9d:25:74:96:f4:7f:89:d9:70:9f:
         98:0c:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:41 2026 by rpki-client