Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/93be7a1d-abf3-41c8-b4b2-3ebb77681f04.cer
File:                     93be7a1d-abf3-41c8-b4b2-3ebb77681f04.cer (raw, json)
Hash identifier:          HQvOAL0LCYPWwOJ8bPFNzAptTKQpuUiTH+3Za0r+X3E=
Subject key identifier:   56:42:73:3A:F4:C0:5F:CA:E2:04:1E:02:D6:D3:7D:99:73:1B:67:BD
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer:       /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial:       010D0C9F4328584F670ACE7157222C999EA293C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/93be7a1d-abf3-41c8-b4b2-3ebb77681f04/93be7a1d-abf3-41c8-b4b2-3ebb77681f04.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/93be7a1d-abf3-41c8-b4b2-3ebb77681f04/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Oct 2026 15:25:29 +0000
Certificate not after:    Sun 07 Jan 2029 16:25:29 +0000
Subordinate resources:    AS: 47085
                          IP: 23.164.208.0/24
                          IP: 45.42.206.0/24
                          IP: 140.235.180.0/22
                          IP: 155.103.36.0/22
                          IP: 199.202.228.0/22
                          IP: 2602:fd0d::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:0a:ce:71:57:22:2c:99:9e:a2:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
        Validity
            Not Before: Oct  5 15:25:29 2026 GMT
            Not After : Jan  7 16:25:29 2029 GMT
        Subject: CN=93be7a1d-abf3-41c8-b4b2-3ebb77681f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:23:d2:3c:07:d5:72:b6:9d:30:4a:e1:2a:
                    93:76:a8:4c:52:87:83:c7:04:02:75:a8:35:b0:14:
                    4a:31:12:92:ac:5f:ce:87:9d:e4:7c:f4:30:41:a5:
                    f9:e7:9e:94:2a:ca:af:3e:b6:e1:59:59:71:6e:fe:
                    3b:ff:98:e9:a0:84:4f:e1:14:b8:db:45:8c:b4:14:
                    52:10:3f:93:56:29:f0:6b:ce:62:55:71:94:ed:3e:
                    a8:42:46:73:89:12:4d:2f:c4:6e:0c:dd:0e:99:86:
                    7d:bf:89:a5:68:60:85:11:58:ab:2a:2a:f2:31:16:
                    88:e7:ec:b7:62:66:8f:96:5c:db:ed:87:c4:f1:fe:
                    47:ac:c4:76:b9:a5:43:55:c7:3c:e0:73:0f:46:65:
                    1f:bc:5e:85:fe:6d:1f:55:73:32:ad:71:03:73:9e:
                    f0:a4:11:c4:a2:8d:14:95:50:61:3c:c8:9d:06:34:
                    f0:7e:f1:3c:a4:16:f1:0b:03:ab:c1:17:89:dd:b3:
                    49:0c:c7:70:cc:6b:6b:39:31:87:24:d0:6f:72:6a:
                    6f:c2:3f:1e:ba:44:fc:03:34:55:62:b8:10:79:01:
                    66:5e:52:e2:3a:c1:4b:89:5f:db:91:c1:01:91:7a:
                    d0:fd:3a:0f:92:2b:0b:ec:77:db:2d:be:51:01:11:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:42:73:3A:F4:C0:5F:CA:E2:04:1E:02:D6:D3:7D:99:73:1B:67:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/93be7a1d-abf3-41c8-b4b2-3ebb77681f04/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/93be7a1d-abf3-41c8-b4b2-3ebb77681f04/93be7a1d-abf3-41c8-b4b2-3ebb77681f04.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl

            X509v3 Authority Key Identifier:
                keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.208.0/24
                  45.42.206.0/24
                  140.235.180.0/22
                  155.103.36.0/22
                  199.202.228.0/22
                IPv6:
                  2602:fd0d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47085

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:21:5f:c4:90:c6:9f:24:95:40:fa:65:01:69:89:d0:a1:20:
         a2:0d:c2:81:35:2a:a8:12:ee:14:3c:77:cc:d2:a6:6f:0c:6e:
         be:f1:45:9e:8e:c5:77:84:88:bd:6c:ee:9c:80:31:af:24:f6:
         c6:ff:4e:41:84:e7:ea:5f:c1:5a:63:3f:60:3e:b4:93:ab:e7:
         66:aa:ff:8f:e8:e9:81:81:6f:8c:10:e3:fd:9f:33:4b:40:6f:
         3a:b7:3a:11:15:a2:c6:d7:1b:be:f4:e2:b3:1d:9b:62:0a:df:
         cd:6f:b7:57:58:89:0c:28:73:3d:1c:d1:27:f4:c2:e6:27:bc:
         e3:42:53:d9:d0:36:a2:a8:fd:ee:38:57:0d:83:24:6a:27:8f:
         4a:aa:ee:2f:d6:87:fc:4c:50:e6:a0:7f:da:6f:08:5a:01:e7:
         3b:1c:8e:7d:c9:99:a7:a3:69:27:d1:70:40:b5:b6:10:4a:09:
         84:12:aa:90:55:e0:df:37:e4:8e:dd:16:9a:76:17:20:0c:be:
         12:87:c7:cb:5d:73:74:6f:d3:5f:df:e9:0e:23:98:c9:f9:95:
         7c:ad:2e:69:33:4b:c5:51:8c:ae:53:8a:21:ac:f3:f9:f5:47:
         af:98:c7:01:e1:7c:e7:ef:26:44:25:bd:f7:8e:18:b5:67:fd:
         2f:5f:ad:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:34 2026 by rpki-client