Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
File:                     a4e67936-c857-487d-93df-2dff7fa79988.cer (raw, json)
Hash identifier:          3U9Bf34dVZ/CxbVmh+VjB/nBGufSI5SnbLBhJh9N5GQ=
Subject key identifier:   16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584D4227EEDDA3A237E6B9DA1E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Mar 2026 00:45:23 +0000
Certificate not after:    Sun 25 Jun 2028 00:45:23 +0000
Subordinate resources:    AS: 19940
                          IP: 66.114.64.0/19
                          IP: 72.0.224.0/20
                          IP: 216.16.144.0/20
                          IP: 2606:8800::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:27:ee:dd:a3:a2:37:e6:b9:da:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 23 00:45:23 2026 GMT
            Not After : Jun 25 00:45:23 2028 GMT
        Subject: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:30:94:4d:5d:a0:b4:01:83:3b:88:31:3f:
                    ac:e4:be:ec:a4:8d:b6:ff:3a:d3:47:f9:ee:19:35:
                    72:02:44:a1:1c:56:be:60:b2:d2:a0:f2:1e:58:0d:
                    03:4f:b1:ba:ec:4c:59:c8:de:12:52:24:2b:b6:b0:
                    cc:c5:52:2c:1b:76:70:12:22:1d:68:30:05:4a:c7:
                    43:50:37:b1:fd:0d:63:04:61:c1:a9:3b:79:c0:81:
                    32:8b:71:df:fa:b0:63:e1:2c:41:0d:be:09:a7:af:
                    1a:31:3c:7b:0f:26:7d:ca:89:cd:ea:a1:5b:81:c3:
                    18:4d:0e:3b:c9:ed:34:cc:38:b6:68:a5:0a:20:c4:
                    e4:b2:4e:8d:ac:a7:7f:ad:8d:ba:a5:28:6a:48:fe:
                    95:59:b2:9a:dd:17:11:f7:bc:ff:9d:71:c6:39:f3:
                    58:73:da:6c:72:be:3d:23:64:28:a6:36:1b:3f:f1:
                    8b:fd:87:3f:9f:19:f3:5c:64:95:58:25:a2:ee:8e:
                    0a:f5:8f:60:cf:e6:9b:f9:b6:57:f1:74:3d:8f:e9:
                    39:2f:98:fb:b7:bf:ad:c9:76:6e:c0:a0:5a:f4:29:
                    ac:df:30:ea:ef:63:97:d7:0b:ab:a0:56:60:fc:d6:
                    a4:33:e0:e0:1e:94:9d:82:55:f5:30:af:8e:99:ea:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.64.0/19
                  72.0.224.0/20
                  216.16.144.0/20
                IPv6:
                  2606:8800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19940

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:94:ed:43:48:0b:2f:36:7a:48:9d:55:42:08:af:4d:db:cb:
         a6:5a:9b:a9:1c:b4:da:b2:eb:07:cc:c3:cc:ba:fa:70:2f:42:
         38:e0:1d:1e:76:e2:f9:27:96:a9:5b:27:30:81:90:1a:19:27:
         ca:93:27:d5:c3:e8:c5:f6:20:16:aa:13:18:7e:ef:2d:97:17:
         65:c1:89:11:c8:63:df:0a:1b:1b:c6:d4:19:fa:a2:a7:0f:76:
         22:7a:44:47:20:9a:45:96:79:b6:08:3c:56:18:34:ad:c6:d1:
         0f:52:c9:3d:0d:68:eb:9d:6b:6a:44:a8:a2:ad:4d:d5:42:55:
         e2:80:50:a8:f0:ad:d9:be:60:9f:a5:f5:00:70:e4:23:40:b5:
         ea:fc:0f:97:2c:6d:da:71:34:39:6b:9c:bd:e9:31:47:0e:2c:
         66:eb:b4:91:32:4a:05:23:7a:fd:b8:b8:7f:25:46:20:a4:98:
         5c:38:9d:2f:3d:37:32:e9:b7:e0:22:6a:68:1e:85:53:54:61:
         6e:08:b9:8d:3e:f6:c1:ce:5d:c3:55:98:99:b1:94:ad:1e:bc:
         9d:1f:5f:36:9e:f7:47:07:8a:75:9f:42:74:06:7e:ff:33:46:
         ac:ae:f3:a3:4d:f8:eb:2d:c3:d1:24:b8:65:61:da:e6:4d:f8:
         0d:a9:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:03 2026 by rpki-client