Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.cer
File:                     8ea6cffd-9dde-440f-9975-5f4e2e8e159b.cer (raw, json)
Hash identifier:          ftQi3tbUDnOBydE3CWyozQ26a1WRCeXp479URcXGmAI=
Subject key identifier:   39:27:0C:2A:99:4E:96:C0:6B:A6:D8:5C:52:3E:5A:90:AE:CD:C6:46
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer:       /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial:       010D0C9F4328584F85BAD8BFD3194E3E3A4D8180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Oct 2026 15:14:26 +0000
Certificate not after:    Thu 18 Jan 2029 16:14:26 +0000
Subordinate resources:    AS: 395040
                          IP: 23.226.119.0/24
                          IP: 64.111.56.0/24
                          IP: 64.111.63.0/24
                          IP: 65.255.140.0/24
                          IP: 67.221.196.0 -- 67.221.198.255
                          IP: 69.27.212.0/24
                          IP: 207.174.227.0/24
                          IP: 207.174.236.0/23
                          IP: 207.211.232.0/21
                          IP: 209.152.148.0/24
                          IP: 216.146.240.0/21
                          IP: 2606:51c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:ba:d8:bf:d3:19:4e:3e:3a:4d:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
        Validity
            Not Before: Oct 16 15:14:26 2026 GMT
            Not After : Jan 18 16:14:26 2029 GMT
        Subject: CN=8ea6cffd-9dde-440f-9975-5f4e2e8e159b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:f0:e0:e5:c1:2d:89:c5:79:08:94:53:3e:
                    ef:13:47:6e:7b:76:ef:37:62:d0:3a:ac:ec:69:22:
                    15:c8:a7:79:c8:a2:b4:9b:0a:7b:c8:19:62:20:9e:
                    a1:3e:40:90:4d:af:f5:cf:62:f8:3a:71:f5:e9:d2:
                    91:00:36:e3:32:85:73:81:af:af:5c:38:3d:e3:e9:
                    45:d6:84:8d:ce:09:b4:c5:ae:6e:4b:89:01:c1:38:
                    87:51:ed:ce:b6:ed:d6:dd:7a:04:9a:d0:ef:44:eb:
                    e0:a2:7d:72:84:de:45:c1:4f:4a:37:d2:52:56:7e:
                    89:d1:64:33:f2:32:8a:d6:c5:23:e1:16:fe:0e:ba:
                    3a:3d:27:7e:0d:57:ac:55:6f:9f:ef:9e:90:16:da:
                    d7:7f:49:65:33:80:72:8f:63:4e:b9:84:27:14:66:
                    f6:03:23:37:ab:fa:86:bb:44:c4:0c:20:71:84:f8:
                    5e:de:a8:af:db:a0:4e:17:68:fd:83:d3:44:77:95:
                    bd:b9:59:b0:bb:57:e0:d4:20:7b:05:70:ac:33:51:
                    cf:ba:d4:37:c5:16:8b:b4:b4:28:70:1d:a9:63:61:
                    f4:61:d1:5d:0d:49:81:6d:74:7c:b8:a8:81:26:ba:
                    41:ca:4f:83:eb:61:32:f3:bc:45:e4:bb:8d:9d:50:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:27:0C:2A:99:4E:96:C0:6B:A6:D8:5C:52:3E:5A:90:AE:CD:C6:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8ea6cffd-9dde-440f-9975-5f4e2e8e159b/8ea6cffd-9dde-440f-9975-5f4e2e8e159b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl

            X509v3 Authority Key Identifier:
                keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.119.0/24
                  64.111.56.0/24
                  64.111.63.0/24
                  65.255.140.0/24
                  67.221.196.0-67.221.198.255
                  69.27.212.0/24
                  207.174.227.0/24
                  207.174.236.0/23
                  207.211.232.0/21
                  209.152.148.0/24
                  216.146.240.0/21
                IPv6:
                  2606:51c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395040

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:51:35:8c:3b:74:fd:92:4a:dc:9f:32:de:4b:70:ed:2c:09:
         53:6f:28:d7:ba:0f:6b:a4:02:18:bb:f5:df:0c:2e:39:c1:74:
         a7:40:13:1f:f6:90:f4:f1:63:a3:2c:34:9a:29:f2:a9:c4:1c:
         1d:94:77:cd:8f:6a:8c:e5:72:4a:30:f5:d0:60:1d:4a:be:3d:
         21:16:b9:57:a7:11:bb:49:28:5f:b5:46:4b:d5:9e:cf:60:84:
         fb:e2:df:48:b4:89:ce:e5:1c:f7:38:66:1b:2c:27:33:62:58:
         7a:9e:2b:bc:82:bd:7c:32:fb:eb:12:0d:1e:5f:17:07:87:94:
         54:e9:49:7f:34:b2:6a:66:46:26:cb:ea:27:b9:42:30:a7:11:
         6a:eb:00:62:18:dc:34:ce:a9:03:de:88:ca:a5:9d:5e:cc:ef:
         08:17:cb:03:84:9e:0c:c2:d3:ad:a4:91:4b:58:cb:73:fa:f3:
         28:e5:42:53:21:17:7b:75:b7:41:8b:9f:0c:c6:14:6d:8b:72:
         3d:0d:cc:da:63:28:ab:02:e0:4f:0d:80:a4:fc:41:ea:d6:a3:
         75:65:a9:c3:ad:8d:aa:31:7b:41:62:c5:48:74:1f:19:2f:3a:
         81:db:60:34:08:53:49:97:d7:f6:92:6c:28:9a:95:31:7c:dc:
         a6:b3:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:26:00 2026 by rpki-client