Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9.cer
File:                     994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9.cer (raw, json)
Hash identifier:          LWDQsJNweFvUNWMSr9Tpeazq7tSW1zHiWTaJh+M7WEY=
Subject key identifier:   5C:54:49:89:2D:AC:50:37:FF:CD:C0:B0:4A:FD:95:C9:3C:CA:A5:E4
Authority key identifier: FE:33:28:CC:8E:F3:9B:00:C1:3E:5F:94:BF:AA:AE:69:D0:09:90:42
Certificate issuer:       /CN=48207a98-128a-4c02-af42-d019fc1b8f07
Certificate serial:       010D0C9F4328584F454503927C6E3EF6512CE800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/5C5449892DAC5037FFCDC0B04AFD95C93CCAA5E4.mft
caRepository:             rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 23 Sep 2026 13:05:17 +0000
Certificate not after:    Tue 26 Dec 2028 14:05:17 +0000
Subordinate resources:    AS: 401066
                          IP: 23.164.108.0/24
                          IP: 2602:f2e0::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:45:03:92:7c:6e:3e:f6:51:2c:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48207a98-128a-4c02-af42-d019fc1b8f07
        Validity
            Not Before: Sep 23 13:05:17 2026 GMT
            Not After : Dec 26 14:05:17 2028 GMT
        Subject: CN=994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:98:58:47:f5:ee:a3:24:46:6f:37:76:1e:de:
                    c3:78:54:43:4b:3b:d6:8a:48:ad:51:66:c1:18:8d:
                    e9:bf:de:fe:c4:d4:d2:04:0e:70:65:51:6c:39:65:
                    b1:96:ad:c9:27:d3:d1:5c:51:51:47:f7:bb:12:33:
                    40:32:24:f5:3a:f3:3e:12:1c:da:c7:47:d1:44:cd:
                    8a:db:bd:da:1a:bd:9d:2a:59:eb:de:71:f6:b0:99:
                    e1:da:8a:59:e0:d6:ff:54:f1:bf:31:37:f1:0f:6c:
                    28:4c:61:79:bc:95:6c:a8:22:64:74:4a:82:d8:5f:
                    8f:3d:6e:de:c3:50:cc:3a:fb:fc:02:0a:db:f6:a4:
                    37:9d:81:83:4d:7b:da:b8:d4:19:b2:77:f8:34:96:
                    db:dc:73:b4:4b:5a:3e:97:2d:b7:cb:7b:ec:75:5a:
                    13:cc:80:51:f1:27:66:f6:f6:c7:e7:a7:d5:19:8b:
                    42:57:48:4e:86:c3:3b:89:f0:0c:db:76:7a:4f:29:
                    2a:a7:da:66:e9:65:39:2e:14:0b:79:f0:fa:1d:d9:
                    e5:a3:02:cf:af:6b:25:83:6d:be:06:ba:3d:6a:e8:
                    2f:7b:c1:8a:c2:de:69:14:56:97:25:d7:8b:eb:69:
                    10:a4:37:c9:09:89:1b:f9:0a:5a:b4:64:c5:1a:43:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:54:49:89:2D:AC:50:37:FF:CD:C0:B0:4A:FD:95:C9:3C:CA:A5:E4
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/5C5449892DAC5037FFCDC0B04AFD95C93CCAA5E4.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.crl

            X509v3 Authority Key Identifier:
                keyid:FE:33:28:CC:8E:F3:9B:00:C1:3E:5F:94:BF:AA:AE:69:D0:09:90:42

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.108.0/24
                IPv6:
                  2602:f2e0::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401066

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:18:62:03:e4:df:f8:ed:84:19:1a:55:a8:a2:9b:db:21:
         b3:da:16:a3:b8:4e:9a:04:e7:c4:06:5d:a5:aa:1b:c2:c1:43:
         05:21:62:65:13:74:97:47:ac:df:8e:34:a8:a0:cd:96:56:cc:
         be:f9:28:10:ab:94:fa:57:f6:79:0b:fb:76:20:66:70:0a:aa:
         ef:60:24:57:40:25:07:fe:8f:06:98:a6:c7:92:9e:03:3d:3e:
         ce:55:94:eb:44:a4:32:e8:86:7d:ac:18:76:8d:5a:c6:f2:28:
         e5:eb:57:e8:c8:ea:c0:42:e6:09:05:2c:d4:e0:d8:d8:ae:e2:
         3f:c1:85:48:f5:90:39:68:c7:6d:90:c3:85:63:67:6e:5a:08:
         91:0e:1b:ca:21:1a:33:21:25:de:c8:9e:37:4c:63:e5:b7:4a:
         9f:7c:9f:3b:2b:e6:4d:61:b8:27:b1:0f:cb:62:9b:57:c9:04:
         c1:50:89:fb:e6:8f:0c:b2:3b:6d:82:51:fe:3b:77:04:ea:54:
         ef:67:86:f5:94:40:6e:71:f8:e4:87:ef:6c:b5:ed:bb:35:24:
         45:55:97:93:5c:4f:33:d1:10:22:1a:6e:ea:76:47:59:7f:a4:
         48:d2:e3:3e:f9:9d:d2:0a:94:8f:67:ef:0e:75:db:67:31:d0:
         f3:4e:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:33:35 2026 by rpki-client