Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer
File:                     ae3f9ccc-8d17-4cf1-954c-8f682120fb41.cer (raw, json)
Hash identifier:          5e7S6pZvApo50HfGYftXz5jHFiIotNNOhGZ+/r7Izrw=
Subject key identifier:   93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584E54AD19E33AF1FB950A5F5280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jun 2026 08:45:11 +0000
Certificate not after:    Sun 01 Oct 2028 08:45:11 +0000
Subordinate resources:    AS: 32716
                          IP: 198.202.130.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:ad:19:e3:3a:f1:fb:95:0a:5f:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jun 29 08:45:11 2026 GMT
            Not After : Oct  1 08:45:11 2028 GMT
        Subject: CN=ae3f9ccc-8d17-4cf1-954c-8f682120fb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:3f:78:31:d3:80:56:e7:b8:74:04:f8:70:
                    76:51:e8:72:a7:d3:5f:ee:bd:19:76:51:bf:1d:56:
                    e1:75:99:7f:fd:93:d6:15:e5:f6:c2:c7:63:a5:78:
                    ff:03:df:0e:b9:59:b8:0f:3a:ec:bc:ea:cf:41:8b:
                    24:09:52:42:46:f4:74:3c:8d:d4:d7:60:4d:20:4b:
                    34:b8:0c:22:61:80:40:1d:41:46:e8:ec:5d:bd:e4:
                    19:41:88:9e:35:17:77:87:28:41:14:b0:92:59:ac:
                    9b:6f:5f:5b:23:21:a8:42:a8:2f:52:86:cf:a5:a3:
                    75:3c:1e:af:14:f9:ad:e3:72:4f:f1:ca:c3:fe:41:
                    43:0e:f7:55:e2:8d:43:02:d8:0a:25:f8:d2:a6:7b:
                    0e:bc:ab:e3:41:54:6f:67:cc:22:37:df:8d:1a:34:
                    8f:f0:76:9f:e5:ae:45:28:fc:a8:fc:48:de:dc:97:
                    39:cb:77:e5:81:1a:65:c8:4c:45:c0:5e:ee:27:df:
                    91:5d:7d:d5:7e:a8:da:c1:ab:ae:44:69:f3:5c:15:
                    3c:da:9a:db:83:57:7f:e9:21:ed:14:0a:4f:f9:da:
                    1e:cd:74:a6:dd:44:c1:f3:b5:5c:a1:33:af:05:06:
                    ff:59:73:76:9f:a5:8d:bf:ac:54:5f:62:4a:dd:df:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:75:D5:EC:0B:BD:A5:23:C9:99:3C:FD:9E:13:C7:43:FD:02:5A:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ae3f9ccc-8d17-4cf1-954c-8f682120fb41/ae3f9ccc-8d17-4cf1-954c-8f682120fb41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.130.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32716

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:05:71:ab:41:91:af:72:39:16:1f:93:8e:2c:63:e1:45:58:
         ce:a4:fc:27:77:76:7a:1c:1f:6b:27:29:3c:08:6a:1a:5b:ce:
         e3:d3:73:2d:0a:75:f7:74:d6:78:7e:5d:0a:94:03:ca:e4:21:
         eb:43:18:3e:b0:39:3e:c7:23:a3:cc:77:9e:23:48:7d:f9:5b:
         69:3b:67:9e:38:4f:01:00:2b:d7:75:da:f4:ba:52:9a:5c:03:
         88:43:19:24:1e:a8:f3:b6:c4:8b:cd:6a:01:0b:68:76:09:9a:
         00:1b:10:17:a4:d9:a5:96:47:8a:0d:47:bd:ec:b5:66:9a:3a:
         17:3a:97:0c:8d:07:3b:17:92:00:e5:ff:ba:f0:57:c5:06:ca:
         1c:92:3d:fd:a7:ae:78:24:5b:86:89:31:c8:8b:ae:08:96:f3:
         07:fb:e1:94:0f:da:55:90:07:56:7a:42:1a:cd:0e:a9:fd:f9:
         a0:8b:db:e7:0f:f4:f1:58:47:30:72:90:e2:01:c5:27:a9:27:
         44:d0:13:cd:89:62:39:c4:d0:a5:c7:ec:30:1b:7a:62:27:e4:
         8e:9e:6d:50:02:a6:b1:70:0f:4b:66:0d:9e:e6:94:c6:71:68:
         aa:05:e7:c1:c5:b4:69:4c:e8:27:83:9a:3d:10:66:e4:85:11:
         44:72:25:5a
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE5UrRnjOvH7lQpfUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI2MDYyOTA4NDUxMVoXDTI4MTAwMTA4NDUxMVowLzEtMCsGA1UEAxMk
YWUzZjljY2MtOGQxNy00Y2YxLTk1NGMtOGY2ODIxMjBmYjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4o/eDHTgFbnuHQE+HB2Uehyp9Nf7r0ZdlG/
HVbhdZl//ZPWFeX2wsdjpXj/A98OuVm4DzrsvOrPQYskCVJCRvR0PI3U12BNIEs0
uAwiYYBAHUFG6OxdveQZQYieNRd3hyhBFLCSWaybb19bIyGoQqgvUobPpaN1PB6v
FPmt43JP8crD/kFDDvdV4o1DAtgKJfjSpnsOvKvjQVRvZ8wiN9+NGjSP8Haf5a5F
KPyo/Eje3Jc5y3flgRplyExFwF7uJ9+RXX3VfqjawauuRGnzXBU82prbg1d/6SHt
FApP+doezXSm3UTB87VcoTOvBQb/WXN2n6WNv6xUX2JK3d9AkQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFJN11ewLvaUjyZk8/Z4Tx0P9AlorMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h
ZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEyMGZiNDEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2FlM2Y5Y2NjLThkMTctNGNmMS05
NTRjLThmNjgyMTIwZmI0MS9hZTNmOWNjYy04ZDE3LTRjZjEtOTU0Yy04ZjY4MjEy
MGZiNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADGyoIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
f8wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAdQVxq0GRr3I5Fh+Tjixj4UVYzqT8J3d2ehwfaycpPAhqGlvO
49NzLQp193TWeH5dCpQDyuQh60MYPrA5Pscjo8x3niNIfflbaTtnnjhPAQAr13Xa
9LpSmlwDiEMZJB6o87bEi81qAQtodgmaABsQF6TZpZZHig1Hvey1Zpo6FzqXDI0H
OxeSAOX/uvBXxQbKHJI9/aeueCRbhokxyIuuCJbzB/vhlA/aVZAHVnpCGs0Oqf35
oIvb5w/08VhHMHKQ4gHFJ6knRNATzYliOcTQpcfsMBt6Yifkjp5tUAKmsXAPS2YN
nuaUxnFoqgXnwcW0aUzoJ4OaPRBm5IURRHIlWg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:53 2026 by rpki-client