Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/29a8a11e-c2f2-4f06-9c55-8970d6bf2934.cer
File:                     29a8a11e-c2f2-4f06-9c55-8970d6bf2934.cer (raw, json)
Hash identifier:          WXgbRcBs8fA1/EwBOnbmg8k4vjO78woHIgALvggt0kM=
Subject key identifier:   D1:54:71:47:E3:E6:0B:03:B8:EF:CB:8D:BB:92:E6:D1:62:2B:E7:C3
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584F9690353765830BCCECC31C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
CRL Distribution Point:   rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/29a8a11e-c2f2-4f06-9c55-8970d6bf2934/29a8a11e-c2f2-4f06-9c55-8970d6bf2934.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/29a8a11e-c2f2-4f06-9c55-8970d6bf2934/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Oct 2026 15:57:16 +0000
Certificate not after:    Sun 07 May 2028 16:00:27 +0000
Subordinate resources:    AS: 397076
                          IP: 134.82.96.0/20
                          IP: 168.151.31.0/24
                          IP: 199.115.174.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:90:35:37:65:83:0b:cc:ec:c3:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Oct 22 15:57:16 2026 GMT
            Not After : May  7 16:00:27 2028 GMT
        Subject: CN=29a8a11e-c2f2-4f06-9c55-8970d6bf2934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:cf:1b:7c:a7:d4:75:fb:1d:e0:f7:b6:a0:
                    a1:6c:fe:1b:28:f9:81:a8:40:78:21:fb:60:5c:16:
                    0b:2f:e9:2d:a7:0a:bc:22:3e:19:97:2a:ac:f3:fb:
                    36:4e:cb:51:16:27:cc:76:2b:bc:72:74:15:a2:ea:
                    0a:b2:80:22:16:8c:c2:b1:6a:37:29:89:dd:73:0d:
                    fa:94:b6:f5:8a:35:60:ef:e6:af:58:5c:1e:e6:48:
                    f2:09:47:53:a6:90:8c:6f:39:93:f2:2b:76:e0:b6:
                    7d:f0:67:b2:ea:c5:1b:d3:c0:bd:c7:13:d2:63:23:
                    d6:f6:14:47:12:39:1a:d3:62:f6:97:0d:24:ab:f2:
                    e7:8f:30:56:36:19:96:5f:2f:2e:96:f4:a7:85:1d:
                    a2:2d:1e:e3:6d:65:df:a1:07:80:86:61:a3:e2:6f:
                    13:8b:93:4e:18:46:6a:d8:61:4e:57:8d:b9:49:d2:
                    73:4b:5a:03:46:94:a3:c1:86:7e:6e:2e:3c:8d:d0:
                    5b:6f:d6:38:bc:6d:bd:0c:26:87:9a:23:fc:29:e5:
                    95:14:b1:1c:d7:d6:bc:71:4b:a1:ff:62:74:08:5a:
                    fd:6e:78:05:76:d1:47:6d:77:50:27:05:b4:2e:38:
                    3f:62:08:fe:33:fb:f2:0c:95:20:96:f2:28:0d:08:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:54:71:47:E3:E6:0B:03:B8:EF:CB:8D:BB:92:E6:D1:62:2B:E7:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/29a8a11e-c2f2-4f06-9c55-8970d6bf2934/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/29a8a11e-c2f2-4f06-9c55-8970d6bf2934/29a8a11e-c2f2-4f06-9c55-8970d6bf2934.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.82.96.0/20
                  168.151.31.0/24
                  199.115.174.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397076

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:27:2d:d7:0a:d6:75:f9:bc:2c:21:79:75:eb:9c:d0:08:
         d1:d9:66:11:bc:cd:9c:55:94:f1:03:66:0e:e4:00:88:1e:83:
         df:56:a4:5d:13:02:a8:81:6b:67:9d:dd:ce:5c:b3:2e:d4:c4:
         5e:87:1a:bc:2c:05:08:94:e3:23:b2:fa:9d:9d:d5:f7:22:93:
         7e:7a:da:1d:d7:3a:1d:d6:db:31:78:46:0f:69:fd:ef:09:a4:
         2f:6f:76:8b:83:01:62:bd:0b:b0:47:07:35:33:9c:ba:31:3b:
         9e:7f:1c:54:51:8b:de:ee:60:19:32:39:05:54:83:66:7b:a0:
         44:be:21:f5:4e:ee:96:ab:f9:7f:fc:1e:a2:b3:01:5c:91:ec:
         43:39:55:65:4d:6f:64:87:22:1e:b0:bf:77:58:2f:82:ba:2b:
         2b:33:60:18:97:62:01:77:e3:c3:ff:7f:9f:18:50:47:b7:2d:
         42:d0:9e:1a:87:5b:8e:8a:a3:b7:69:b9:cf:81:57:df:bd:70:
         2b:a8:b7:de:27:be:c6:b6:d2:47:4f:be:8b:79:5c:5f:45:a9:
         be:a4:c2:3e:e3:65:6e:c7:8f:0c:6a:f7:f5:06:77:78:c3:ff:
         d1:24:ca:56:05:e1:bb:10:cb:75:0b:9f:6f:1b:72:66:8b:ef:
         7c:d1:93:a8
-----BEGIN CERTIFICATE-----
MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE+WkDU3ZYMLzOzDHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MTAyMjE1NTcxNloXDTI4MDUwNzE2MDAyN1owLzEtMCsGA1UEAxMk
MjlhOGExMWUtYzJmMi00ZjA2LTljNTUtODk3MGQ2YmYyOTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzXPG3yn1HX7HeD3tqChbP4bKPmBqEB4Iftg
XBYLL+ktpwq8Ij4Zlyqs8/s2TstRFifMdiu8cnQVouoKsoAiFozCsWo3KYndcw36
lLb1ijVg7+avWFwe5kjyCUdTppCMbzmT8it24LZ98Gey6sUb08C9xxPSYyPW9hRH
Ejka02L2lw0kq/LnjzBWNhmWXy8ulvSnhR2iLR7jbWXfoQeAhmGj4m8Ti5NOGEZq
2GFOV425SdJzS1oDRpSjwYZ+bi48jdBbb9Y4vG29DCaHmiP8KeWVFLEc19a8cUuh
/2J0CFr9bngFdtFHbXdQJwW0Ljg/Ygj+M/vyDJUglvIoDQj/EwIDAQABo4IEJzCC
BCMwHQYDVR0OBBYEFNFUcUfj5gsDuO/LjbuS5tFiK+fDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y
OWE4YTExZS1jMmYyLTRmMDYtOWM1NS04OTcwZDZiZjI5MzQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzI5YThhMTFlLWMyZjItNGYwNi05
YzU1LTg5NzBkNmJmMjkzNC8yOWE4YTExZS1jMmYyLTRmMDYtOWM1NS04OTcwZDZi
ZjI5MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwKwYIKwYBBQUH
AQcBAf8EHDAaMBgEAgABMBIDBASGUmADBAColx8DBADHc64wGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBg8UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHB+Jy3XCtZ1+bwsIXl165zQCNHZZhG8
zZxVlPEDZg7kAIgeg99WpF0TAqiBa2ed3c5csy7UxF6HGrwsBQiU4yOy+p2d1fci
k3562h3XOh3W2zF4Rg9p/e8JpC9vdouDAWK9C7BHBzUznLoxO55/HFRRi97uYBky
OQVUg2Z7oES+IfVO7par+X/8HqKzAVyR7EM5VWVNb2SHIh6wv3dYL4K6KyszYBiX
YgF348P/f58YUEe3LULQnhqHW46Ko7dpuc+BV9+9cCuot94nvsa20kdPvot5XF9F
qb6kwj7jZW7Hjwxq9/UGd3jD/9EkylYF4bsQy3ULn28bcmaL73zRk6g=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:44:33 2026 by rpki-client