Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
File:                     8d499d1b-9023-4410-8b4a-909ca6a083df.cer (raw, json)
Hash identifier:          PFwinN9xvkDRd9rDVQ8cH5LChQmHcX0pwRW+GOnbXAw=
Subject key identifier:   B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584CBADF87F33BFC8D36B41E0A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Feb 2026 13:45:22 +0000
Certificate not after:    Sun 07 May 2028 12:45:22 +0000
Subordinate resources:    AS: 397666
                          IP: 23.145.80.0/23
                          IP: 23.157.144.0/23
                          IP: 162.220.24.0/22
                          IP: 167.253.88.0/22
                          IP: 192.25.14.0/24
                          IP: 2602:fd9e::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:df:87:f3:3b:fc:8d:36:b4:1e:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb  2 13:45:22 2026 GMT
            Not After : May  7 12:45:22 2028 GMT
        Subject: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:bc:6f:f6:35:42:08:c9:62:c3:01:2a:f9:
                    8e:53:30:cf:72:eb:6d:55:26:c8:84:60:ab:30:c2:
                    7a:c7:a0:97:8d:40:42:ec:26:ea:e0:e8:5e:a7:fb:
                    c0:05:4f:e3:61:58:79:a8:f1:74:23:42:f3:2d:26:
                    98:05:a8:75:c0:4d:34:d5:3e:e2:d9:47:87:e1:8e:
                    e2:cd:d7:15:12:4d:aa:6d:f2:4d:8c:de:29:d1:1d:
                    f7:a4:b3:8b:f6:c1:a8:d1:53:4e:64:0f:f6:0c:22:
                    be:79:80:3d:b5:60:50:24:2d:88:79:ee:3f:b9:4d:
                    7f:66:cf:23:a0:f0:d5:5a:88:03:20:cb:bf:2c:26:
                    fa:44:a2:f8:2a:78:53:85:72:5d:99:97:a2:83:3a:
                    b3:81:da:ce:bd:e6:05:07:38:bd:e3:11:79:5a:89:
                    d2:dc:45:c0:f8:f0:79:af:bf:4e:dd:a6:a5:7d:a7:
                    a6:32:b7:3c:bd:dc:24:de:b9:97:27:37:d0:14:2c:
                    f8:d4:2d:fa:ad:99:33:c9:ec:1a:e7:7c:fc:f4:63:
                    97:91:76:f8:8d:73:73:97:cc:1c:63:0f:fb:7a:aa:
                    61:94:96:28:ca:74:28:c9:ae:31:05:61:66:59:28:
                    61:5c:85:48:fe:ec:6d:3a:10:71:f8:f1:f4:af:a6:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.80.0/23
                  23.157.144.0/23
                  162.220.24.0/22
                  167.253.88.0/22
                  192.25.14.0/24
                IPv6:
                  2602:fd9e::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397666

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:d5:ad:86:e1:2f:cd:0b:e3:da:23:66:aa:7c:d1:03:45:
         c2:8c:7e:da:35:e6:a4:ef:8f:b4:3d:45:b0:e5:f1:2f:95:32:
         05:e5:8c:1f:50:88:70:58:8c:66:2c:55:39:f9:6a:76:c2:7e:
         45:56:0c:c9:0d:83:35:c6:5c:73:d6:23:88:b3:8d:d7:27:1d:
         88:b6:0e:9e:29:38:09:0c:ce:93:fb:66:d2:55:94:f2:6c:3b:
         1f:5d:3f:8c:69:e5:ce:77:40:81:ab:2e:ae:ab:db:f7:c5:f5:
         95:fe:57:d6:ca:e6:d4:07:cb:ba:5a:77:20:00:b5:30:89:32:
         04:fa:99:d0:37:01:f6:e3:83:ae:00:d8:32:a3:68:da:8c:70:
         c7:55:1b:70:e0:b6:ab:7e:2c:a4:12:35:43:94:eb:5f:10:9f:
         c1:bf:3d:ae:24:b9:28:d4:2b:1b:61:56:a0:be:d3:0a:08:9f:
         a5:58:08:21:58:f5:c8:a4:f5:c8:2e:c4:e3:a1:b9:ac:dd:8d:
         cc:4f:c8:69:33:4d:42:fc:70:a2:93:00:67:1c:cf:d9:53:9f:
         2b:f3:d3:aa:9b:9b:71:ba:8c:f3:53:52:15:4c:e3:93:7c:06:
         2c:ff:e7:8b:c6:26:e5:40:65:5d:3e:66:78:19:ed:d9:82:3e:
         12:c5:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:11:53 2026 by rpki-client