Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
File:                     ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer (raw, json)
Hash identifier:          n4WzCC7TAc+tJFH6VvPBi3tzJL4IJZBeabj9IJnuQVQ=
Subject key identifier:   DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584EC79A4356E82CB3B86F456840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 09 Aug 2026 12:45:11 +0000
Certificate not after:    Sat 11 Nov 2028 13:45:11 +0000
Subordinate resources:    AS: 5076
                          AS: 23537
                          AS: 26914
                          IP: 64.127.96.0/19
                          IP: 64.147.160.0/19
                          IP: 69.80.192.0/19
                          IP: 72.172.224.0/19
                          IP: 166.93.0.0/16
                          IP: 204.56.32.0/19
                          IP: 204.227.0.0/19
                          IP: 2001:1898::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:9a:43:56:e8:2c:b3:b8:6f:45:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug  9 12:45:11 2026 GMT
            Not After : Nov 11 13:45:11 2028 GMT
        Subject: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:43:e3:69:5d:54:4f:c4:a9:cb:ab:1a:d0:
                    fb:a7:79:08:f1:ec:c0:09:ae:a8:e1:66:33:1d:e8:
                    b6:a4:18:ef:e1:cd:1c:99:4b:5c:3d:65:c5:d1:71:
                    ee:35:bd:c4:e6:42:43:12:a7:77:85:0a:96:91:b8:
                    38:ff:7d:b7:4e:78:a2:bd:1b:bc:ad:ea:bf:29:bc:
                    27:7f:10:e3:7c:65:29:cf:f6:3f:ec:45:02:29:93:
                    20:ff:29:bb:a5:3d:22:ea:10:cf:27:ba:e9:80:03:
                    1b:83:ac:b4:bf:83:a1:e2:b5:76:45:9b:79:79:da:
                    e3:53:6b:aa:7b:29:83:4a:ca:d3:91:4c:b6:2e:38:
                    03:15:38:76:03:76:56:31:a9:d5:16:9d:f4:f2:bc:
                    da:aa:86:cc:71:c1:fb:4a:c2:07:13:70:87:f1:52:
                    87:40:a5:ed:e5:47:78:a5:be:32:97:4f:ec:66:29:
                    dc:06:11:72:28:41:2d:5e:62:46:be:be:76:e2:c1:
                    21:60:84:2f:b2:84:9e:44:46:f9:81:98:6b:d4:9d:
                    1b:10:ea:84:c7:03:0b:5c:a1:a9:83:8f:27:81:6f:
                    78:ef:81:9c:3b:1c:b3:e7:0c:b3:4f:1c:81:56:bd:
                    9a:79:95:22:3b:2b:35:ea:5c:1b:8d:66:e8:ea:e2:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.96.0/19
                  64.147.160.0/19
                  69.80.192.0/19
                  72.172.224.0/19
                  166.93.0.0/16
                  204.56.32.0/19
                  204.227.0.0/19
                IPv6:
                  2001:1898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5076
                  23537
                  26914

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:91:06:34:3f:85:2a:2b:82:04:51:01:dd:d5:a0:d1:8d:
         5f:22:4d:53:2e:32:f7:6a:7b:c2:8b:0c:cd:72:b9:83:17:dd:
         64:53:81:ab:8c:0f:9d:6a:44:bb:3a:5c:24:61:2e:ed:64:c1:
         35:f8:27:98:6c:f9:e1:23:3d:ac:fd:ac:de:4c:b2:ce:96:a8:
         80:23:72:93:b3:10:1c:bc:7b:9a:7b:6f:74:8f:eb:94:c7:2c:
         6b:a6:12:d7:de:f0:c0:c3:fd:be:29:a5:c6:ba:8e:75:2e:e5:
         11:d1:e2:85:7a:4e:82:28:79:55:a9:a8:c2:da:52:f7:a9:a3:
         06:c9:28:07:cd:16:3c:b9:64:49:53:1d:60:01:b5:90:d9:c1:
         3f:5d:b1:0a:f7:24:7d:0d:04:eb:ef:e5:66:62:7d:d0:f5:6d:
         27:81:1f:81:79:61:b4:4b:8c:df:92:06:ee:85:c1:02:7f:f9:
         af:5b:ea:0f:82:8b:8e:59:90:3d:d4:56:d8:61:46:44:de:a1:
         78:70:dd:08:f6:b4:8f:f4:fb:02:b1:3a:4f:43:ab:15:96:29:
         a2:ee:25:65:90:70:a3:85:a8:27:3b:b0:94:52:10:24:02:0a:
         a7:78:fe:01:68:b9:16:b4:e2:f9:af:6c:c8:8c:38:a5:e0:f5:
         05:9a:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:40:52 2026 by rpki-client