Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
File:                     4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer (raw, json)
Hash identifier:          W2iOR+s04WmTwC3qZNumKAqpnsDLIfQ8h2FmPz0uGfY=
Subject key identifier:   AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584DBB98A63A2A3CF37956465080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 May 2026 12:45:18 +0000
Certificate not after:    Mon 07 Aug 2028 12:45:18 +0000
Subordinate resources:    AS: 401637
                          IP: 23.149.164.0/24
                          IP: 2602:f71a::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:98:a6:3a:2a:3c:f3:79:56:46:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: May  5 12:45:18 2026 GMT
            Not After : Aug  7 12:45:18 2028 GMT
        Subject: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:bf:db:66:8a:a9:19:80:7a:1d:8a:af:b0:
                    65:65:a0:bc:37:ee:e8:6c:06:cb:a9:4d:6e:b5:b2:
                    2f:c6:50:c0:4c:3e:dc:b7:0f:53:be:ca:5f:4b:90:
                    3b:be:95:ec:8e:24:b5:14:82:87:e4:d9:60:3f:6b:
                    16:6f:f6:82:d4:ca:23:bd:81:f3:56:08:16:6b:bb:
                    1f:8c:f2:40:61:60:d1:13:2b:bc:dc:2c:50:68:22:
                    c2:a5:0f:ef:67:46:c1:7c:b2:1e:2c:03:6e:d9:33:
                    e7:e2:7e:be:c4:c0:00:03:8f:95:21:44:26:6e:78:
                    a6:a3:d5:74:23:52:a9:36:dc:4a:51:94:e7:ca:e9:
                    a1:50:21:b6:78:74:59:f0:2b:84:05:89:a5:63:3f:
                    50:cf:fa:98:68:2c:21:64:67:7c:a4:47:ef:96:b3:
                    bf:91:77:b8:19:b9:01:ce:93:1f:8c:f6:f1:eb:16:
                    2b:ed:2a:fe:fc:6c:4d:39:8e:2d:c8:55:d6:6c:d1:
                    68:79:ec:89:c9:c6:1c:c5:7f:bb:1c:45:26:7e:27:
                    41:3f:78:c5:60:0a:09:71:35:14:63:89:27:4a:e3:
                    6f:f3:9f:10:ba:39:fa:51:ef:a7:ea:83:4d:43:72:
                    60:1f:12:f0:47:72:1b:b5:c5:b5:d9:33:9a:d4:fd:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.164.0/24
                IPv6:
                  2602:f71a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401637

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:72:dd:c0:36:94:07:eb:a6:e4:a9:81:6e:75:67:d1:8e:
         13:63:1e:4f:37:5b:6e:e7:17:8a:77:ff:be:65:30:b5:d2:95:
         49:8d:d2:8f:f6:de:e6:b0:af:8c:e6:00:f5:9f:02:ce:47:36:
         c5:6d:a1:4e:36:16:d3:95:d8:8c:d4:3b:3a:ce:7b:4b:20:d7:
         9e:03:fc:10:76:74:ab:96:e1:1a:b3:1a:0c:dd:20:81:da:65:
         10:7e:36:07:6a:a0:98:28:fc:8c:d7:78:80:a9:62:33:d9:8b:
         e4:fa:62:e3:b7:86:05:1a:35:e0:ae:32:c0:19:12:e5:d9:08:
         1a:10:92:db:ad:c7:7b:30:c8:1d:da:ba:6d:e9:31:fe:c3:5a:
         22:90:35:8a:d5:e7:2d:bb:ad:74:ae:b2:0f:d4:72:02:7f:02:
         63:c3:c0:2c:5c:74:1c:0e:c8:94:f3:e2:db:90:33:a5:e3:f1:
         5a:73:b7:2a:df:dc:50:97:21:b8:b0:65:fe:1a:40:94:32:ff:
         83:be:fb:01:eb:bb:39:85:c5:7e:90:f6:07:3d:ad:94:5f:37:
         cf:3c:47:ea:7e:36:96:05:a2:4d:f6:96:2f:e8:36:f6:fb:d0:
         18:0a:44:7b:ab:fe:6d:8e:8d:e3:44:3e:da:e8:91:74:f3:1c:
         8e:37:d8:a9
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE27mKY6KjzzeVZGUIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI2MDUwNTEyNDUxOFoXDTI4MDgwNzEyNDUxOFowLzEtMCsGA1UEAxMk
NGIxM2JiYTgtNTI2MC00NGY1LThmMDAtM2NkZmM4Yjk1YWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0i/22aKqRmAeh2Kr7BlZaC8N+7obAbLqU1u
tbIvxlDATD7ctw9TvspfS5A7vpXsjiS1FIKH5NlgP2sWb/aC1MojvYHzVggWa7sf
jPJAYWDREyu83CxQaCLCpQ/vZ0bBfLIeLANu2TPn4n6+xMAAA4+VIUQmbnimo9V0
I1KpNtxKUZTnyumhUCG2eHRZ8CuEBYmlYz9Qz/qYaCwhZGd8pEfvlrO/kXe4GbkB
zpMfjPbx6xYr7Sr+/GxNOY4tyFXWbNFoeeyJycYcxX+7HEUmfidBP3jFYAoJcTUU
Y4knSuNv858Qujn6Ue+n6oNNQ3JgHxLwR3IbtcW12TOa1P1+eQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFKu47e5udNtLtUTbNEsjfV96WE4zMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80
YjEzYmJhOC01MjYwLTQ0ZjUtOGYwMC0zY2RmYzhiOTVhYWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzRiMTNiYmE4LTUyNjAtNDRmNS04
ZjAwLTNjZGZjOGI5NWFhZS80YjEzYmJhOC01MjYwLTQ0ZjUtOGYwMC0zY2RmYzhi
OTVhYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXlaQwDgQCAAIwCAMGBCYC9xoAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYg5TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCTnLdwDaUB+um5KmBbnVn0Y4T
Yx5PN1tu5xeKd/++ZTC10pVJjdKP9t7msK+M5gD1nwLORzbFbaFONhbTldiM1Ds6
zntLINeeA/wQdnSrluEasxoM3SCB2mUQfjYHaqCYKPyM13iAqWIz2Yvk+mLjt4YF
GjXgrjLAGRLl2QgaEJLbrcd7MMgd2rpt6TH+w1oikDWK1ectu610rrIP1HICfwJj
w8AsXHQcDsiU8+LbkDOl4/Fac7cq39xQlyG4sGX+GkCUMv+DvvsB67s5hcV+kPYH
Pa2UXzfPPEfqfjaWBaJN9pYv6Db2+9AYCkR7q/5tjo3jRD7a6JF08xyON9ip
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:01 2026 by rpki-client