Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer
File:                     3e03ba01-86be-4e51-b95f-af6e17a7979e.cer (raw, json)
Hash identifier:          EUCiKsZYLGUM/g5eMeEnu4FJp2h2Wf7yiN5LwwA1TZY=
Subject key identifier:   D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584DB953F1A74CC90B5682388220
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 May 2026 17:15:15 +0000
Certificate not after:    Sat 20 May 2028 15:52:59 +0000
Subordinate resources:    AS: 398391
                          AS: 400883
                          IP: 64.226.128.0/20
                          IP: 64.227.192.0/20
                          IP: 74.63.32.0/20
                          IP: 131.226.32.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b9:53:f1:a7:4c:c9:0b:56:82:38:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: May  4 17:15:15 2026 GMT
            Not After : May 20 15:52:59 2028 GMT
        Subject: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:9c:bd:d3:29:03:6e:a2:61:bb:3d:99:f2:
                    16:14:76:a0:0d:05:59:60:d6:3a:b3:a6:5f:1e:e8:
                    67:29:76:69:72:8d:da:8a:48:1e:5c:ff:ef:d8:c3:
                    32:a4:c4:02:49:f5:aa:9b:c0:22:0b:9c:d8:89:c7:
                    3f:a8:b0:7d:b5:14:9f:00:c1:8d:c3:cc:60:56:bb:
                    32:83:2a:d8:6b:51:7e:b6:40:24:28:67:2a:4f:59:
                    19:36:26:0c:ac:90:61:46:64:d5:6c:d7:18:e7:28:
                    7f:6c:bd:0a:8c:33:aa:58:a6:6f:85:6a:c6:a4:f4:
                    c9:f3:e2:67:7c:d5:63:19:1f:fa:aa:f7:72:f9:cc:
                    7b:ba:cd:6d:d6:98:20:36:5c:3f:88:66:9b:cc:10:
                    5b:6d:b6:1a:76:31:53:88:b4:2b:89:c5:a0:44:48:
                    0c:c8:a3:68:5f:cd:e4:a2:b0:9f:1c:4f:d4:14:96:
                    76:b3:22:a6:49:2b:e5:3a:3d:ed:94:b1:e6:80:b7:
                    70:40:42:6e:3b:3c:81:f1:e8:ed:45:0e:c4:35:c4:
                    d4:8d:17:f5:b0:e2:b5:e3:e4:cd:9f:b8:01:80:f3:
                    65:82:10:86:c3:17:ab:d1:42:ac:b9:60:13:a6:92:
                    9d:56:0b:24:a3:79:6a:0a:03:bc:c4:fe:1a:f9:dd:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.128.0/20
                  64.227.192.0/20
                  74.63.32.0/20
                  131.226.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398391
                  400883

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:0f:dc:34:24:70:47:48:95:98:e2:e8:ab:c1:ee:98:0f:
         eb:f5:9d:a1:5f:92:d6:07:3a:46:55:c8:df:1e:55:75:40:91:
         29:bb:a0:82:f2:df:0e:75:77:9e:35:89:c9:43:bd:2b:b2:bd:
         d7:80:c2:43:91:79:fa:33:aa:fc:27:75:b8:41:38:ce:49:8c:
         56:5f:fa:b6:dd:76:ab:c0:79:83:ac:11:f8:e9:2a:96:cb:5e:
         91:b9:1f:18:8e:a3:e1:2f:9b:96:7d:cc:3a:8f:71:03:6f:4d:
         d9:d3:f1:70:1e:f4:95:fa:c6:54:6d:4f:37:f1:71:b0:e8:34:
         e5:ec:38:1c:3b:66:9d:54:6e:ab:d1:e2:80:a3:f6:f5:5c:43:
         ef:4d:2a:ca:99:0f:b9:9a:ec:b2:24:cc:24:61:d2:5f:31:fe:
         7f:2d:43:ef:49:49:b1:96:a8:14:e1:f3:5d:ba:9e:7c:a6:18:
         c3:19:cf:d4:d6:01:a5:88:67:8b:23:79:52:87:77:8b:ca:20:
         b1:b5:f2:00:c2:aa:93:8c:9a:b4:2b:a8:c6:4f:82:33:96:72:
         45:c8:85:f0:78:7c:80:b2:df:d4:16:30:87:ae:ce:a9:3c:08:
         c4:d7:27:25:66:82:b7:9c:df:18:00:f8:38:f3:25:16:86:fc:
         d5:0e:03:45
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE25U/GnTMkLVoI4giAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh
MTI1MB4XDTI2MDUwNDE3MTUxNVoXDTI4MDUyMDE1NTI1OVowLzEtMCsGA1UEAxMk
M2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5NzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaucvdMpA26iYbs9mfIWFHagDQVZYNY6s6Zf
HuhnKXZpco3aikgeXP/v2MMypMQCSfWqm8AiC5zYicc/qLB9tRSfAMGNw8xgVrsy
gyrYa1F+tkAkKGcqT1kZNiYMrJBhRmTVbNcY5yh/bL0KjDOqWKZvhWrGpPTJ8+Jn
fNVjGR/6qvdy+cx7us1t1pggNlw/iGabzBBbbbYadjFTiLQricWgREgMyKNoX83k
orCfHE/UFJZ2syKmSSvlOj3tlLHmgLdwQEJuOzyB8ejtRQ7ENcTUjRf1sOK14+TN
n7gBgPNlghCGwxer0UKsuWATppKdVgsko3lqCgO8xP4a+d0GMQIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFNNKxEP+jZrpFFAL9nx7SqDjOuLBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z
ZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt
MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzNlMDNiYTAxLTg2YmUtNGU1MS1i
OTVmLWFmNmUxN2E3OTc5ZS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdh
Nzk3OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3
YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj
MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ
EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl
MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgABMBgDBARA4oADBARA48ADBARKPyADBASD4iAwHwYIKwYB
BQUHAQgBAf8EEDAOoAwwCgIDBhQ3AgMGHfMwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVb0P3DQkcEdIlZji
6KvB7pgP6/WdoV+S1gc6RlXI3x5VdUCRKbuggvLfDnV3njWJyUO9K7K914DCQ5F5
+jOq/Cd1uEE4zkmMVl/6tt12q8B5g6wR+OkqlstekbkfGI6j4S+bln3MOo9xA29N
2dPxcB70lfrGVG1PN/FxsOg05ew4HDtmnVRuq9HigKP29VxD700qypkPuZrssiTM
JGHSXzH+fy1D70lJsZaoFOHzXbqefKYYwxnP1NYBpYhniyN5Uod3i8ogsbXyAMKq
k4yatCuoxk+CM5ZyRciF8Hh8gLLf1BYwh67OqTwIxNcnJWaCt5zfGAD4OPMlFob8
1Q4DRQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:01 2026 by rpki-client