Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
File:                     733b3827-4b45-47ba-8c40-32cde98dd068.cer (raw, json)
Hash identifier:          fYJ/kg+jnALgIPkjq8mPNLMlFUaG2AXLKnilKVJ7Dy0=
Subject key identifier:   DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D6DD2B3F6B07B45C9AFC47080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Apr 2026 16:09:14 +0000
Certificate not after:    Wed 21 Jun 2028 16:47:16 +0000
Subordinate resources:    AS: 396099
                          IP: 45.38.0.0/15
                          IP: 69.46.64.0/19
                          IP: 104.252.0.0/15
                          IP: 172.252.0.0/16
                          IP: 173.245.64.0/19
                          IP: 205.164.0.0/18
                          IP: 209.73.128.0/19
                          IP: 216.172.128.0/19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:d2:b3:f6:b0:7b:45:c9:af:c4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr  7 16:09:14 2026 GMT
            Not After : Jun 21 16:47:16 2028 GMT
        Subject: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a5:74:7c:76:7d:7e:1d:5f:bd:5f:dc:16:4a:
                    50:2e:04:2f:25:71:7e:94:d0:5a:99:64:b6:cc:a0:
                    1d:68:44:49:54:64:9b:7e:02:04:8b:62:de:3f:80:
                    42:85:8d:84:54:fe:4e:6b:ab:24:17:63:02:ee:fc:
                    a0:a0:8e:03:6a:0c:92:b4:0f:39:ae:c7:31:20:52:
                    04:04:83:48:9f:07:e3:79:d8:33:bc:5e:bc:bb:96:
                    58:44:e5:36:c4:b0:da:49:f4:e1:07:55:8c:e7:93:
                    c7:90:11:b0:69:d9:23:d6:d7:9d:e8:91:01:10:79:
                    fc:e6:a2:58:76:ec:c4:59:97:b4:c6:67:55:af:d9:
                    ec:8f:72:b2:d1:34:a0:f0:a2:e6:cc:1f:bd:c6:b9:
                    78:68:14:c0:e3:cd:f3:73:4b:e1:eb:10:c0:47:67:
                    fc:28:5d:2a:63:d1:a8:54:d8:1d:87:c6:7f:bc:90:
                    b7:13:96:1b:71:9a:fe:73:18:97:62:5a:a3:94:e9:
                    f0:fa:60:3c:d1:8a:69:73:f0:66:d0:77:a2:22:63:
                    d7:6b:28:a1:e0:3e:55:2e:be:b2:d9:54:b2:1f:cc:
                    65:6b:56:62:41:0f:37:4c:d6:ef:00:7c:e2:51:3e:
                    fd:a1:5b:d8:0c:0c:ad:fd:e9:d8:5c:ba:cb:7f:2d:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.0.0/15
                  69.46.64.0/19
                  104.252.0.0/15
                  172.252.0.0/16
                  173.245.64.0/19
                  205.164.0.0/18
                  209.73.128.0/19
                  216.172.128.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396099

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:29:d7:66:2d:73:c5:95:c1:84:13:f6:b7:54:bd:93:92:
         c7:1a:41:39:0b:b9:c9:89:4d:41:48:4f:05:cd:83:8d:d5:93:
         96:76:f7:f5:30:ea:b4:1a:a8:28:10:43:50:12:39:25:19:ca:
         4c:c5:31:90:76:c7:7d:fa:e3:ed:5e:04:83:14:a5:5c:76:39:
         7e:dc:50:99:c6:f5:78:d1:0a:8e:be:7a:60:eb:89:04:0e:e1:
         31:bf:a8:41:a8:25:d3:9d:0e:24:43:95:72:c4:a6:35:41:41:
         95:7f:a8:7a:3e:72:6a:9a:80:e6:1e:9e:2d:e7:a2:6f:9d:08:
         d9:b3:bf:2a:3c:0f:be:7f:d5:3c:ed:88:0f:fa:a3:90:69:08:
         a1:ed:63:52:9f:da:19:58:be:00:c0:57:f5:6c:d1:90:7d:aa:
         54:8c:29:f0:10:d8:bc:8a:bf:a8:f5:6b:d7:02:ca:81:b6:e7:
         27:e9:75:57:ed:f8:b9:6e:52:32:77:b4:5a:ae:9c:1a:79:4f:
         fa:58:6b:65:c9:37:0b:bf:85:de:ef:66:92:31:c0:68:d9:e8:
         3d:8e:31:87:2e:40:a9:48:99:be:74:de:8f:d3:f5:d7:c5:d0:
         a9:a8:a4:c7:93:cb:bb:d5:a1:88:39:c4:4f:91:da:21:cc:53:
         2a:87:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 00:10:09 2026 by rpki-client