Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer
File:                     ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer (raw, json)
Hash identifier:          w41z54Sy55AMUIFROEr8zP/V7gS3dbrpvPG648jjv+Y=
Subject key identifier:   B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584EFF6FF191E6E537EA31480660
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 29 Aug 2026 12:45:11 +0000
Certificate not after:    Fri 01 Dec 2028 13:45:11 +0000
Subordinate resources:    AS: 23094
                          IP: 199.180.140.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:6f:f1:91:e6:e5:37:ea:31:48:06:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug 29 12:45:11 2026 GMT
            Not After : Dec  1 13:45:11 2028 GMT
        Subject: CN=ad2a8414-575e-4d7a-8c69-a1fd4f31ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:94:86:4b:cf:82:c7:08:0e:a1:1d:a9:d3:
                    9c:b8:f9:dd:78:ac:d5:4a:3b:da:b6:d3:fd:59:98:
                    20:bb:b9:b8:63:6e:07:69:f0:5e:61:35:8d:5a:b3:
                    40:a4:52:b7:05:22:cb:59:a5:5b:ff:ac:83:35:f4:
                    87:87:e5:e2:cf:1d:47:9e:63:a2:0c:db:fe:80:4f:
                    80:21:dd:3e:b7:5c:81:8c:c6:68:f1:82:02:54:12:
                    9b:f2:d9:bf:c2:bf:f6:6e:3f:d7:8f:70:a3:f8:51:
                    3e:eb:a6:e3:8b:c1:d5:1d:2f:a6:aa:07:ba:a3:d6:
                    9a:bb:18:9a:e2:22:24:86:dc:e3:33:21:44:0e:50:
                    7f:90:e7:81:78:ea:42:ea:cc:7b:79:c9:98:59:b3:
                    4a:26:e7:7b:74:f8:79:7d:1a:14:b5:f2:0d:41:cf:
                    72:d4:76:c0:f0:c7:97:42:f5:0f:24:23:cf:2a:90:
                    f6:e5:e7:30:1b:c6:fb:64:13:40:da:c5:bf:c3:1f:
                    f7:a1:e3:97:39:74:a5:88:5f:f6:8e:cf:21:7f:1b:
                    3a:53:fb:20:fa:08:9e:18:6b:b5:1c:e2:26:79:80:
                    3e:4b:47:5d:13:d1:2f:77:64:49:66:cf:ae:40:87:
                    be:c9:4a:b8:36:a4:05:83:78:9d:35:5c:99:ee:32:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.140.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23094

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:c8:d8:b4:b6:46:c4:3b:8c:2d:4e:cb:46:b0:ea:78:29:
         fc:6d:76:f9:5e:26:8e:76:11:63:1a:38:a2:01:a9:46:3e:7b:
         53:fd:c8:21:49:6d:94:79:ca:54:75:52:76:40:cd:44:98:65:
         49:06:85:b5:56:a3:25:bd:66:2b:39:68:6f:e3:5c:4f:5a:15:
         df:a4:c0:e4:c5:eb:4b:bb:d5:e9:bb:e1:05:3b:b2:24:fe:8f:
         46:9c:a4:2e:b3:0b:87:65:be:05:79:05:a5:34:17:0e:b1:d4:
         fb:48:7b:c9:56:dc:92:59:f5:bc:2d:39:f5:14:b8:eb:8c:08:
         f7:4c:6c:d4:bd:c5:d4:4a:a7:fb:cf:e6:4e:c2:88:2a:65:5f:
         86:3f:5a:25:5c:8b:0e:9f:36:6d:55:b6:33:9e:ba:90:18:48:
         0a:8c:43:f7:b1:ca:32:95:b0:89:fe:22:a1:1d:e9:08:8d:f3:
         ee:56:ab:f9:d6:75:56:28:3e:13:ae:d4:ef:8d:49:80:4e:1c:
         76:08:7f:8a:a9:2f:ff:5e:54:34:b7:e8:ac:f7:bc:5a:ba:98:
         d2:f1:23:12:45:39:85:77:c3:be:7a:43:61:b3:6a:71:f7:d8:
         c9:e3:9c:cd:83:68:d9:d6:bb:aa:d5:41:b0:d8:fe:b2:c8:6f:
         f5:68:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 22:59:39 2026 by rpki-client