Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer
File:                     facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer (raw, json)
Hash identifier:          7yHsODyl//RHwAAI6hhId8tXNQIoFgcJh942Ex1A4c8=
Subject key identifier:   D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7
Authority key identifier: 56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD
Certificate issuer:       /CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
Certificate serial:       010D0C9F4328584F8F2491FDC7B1C7DE886D6480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Oct 2026 00:09:44 +0000
Certificate not after:    Mon 22 Jan 2029 01:09:44 +0000
Subordinate resources:    AS: 403078
                          IP: 198.140.140.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:24:91:fd:c7:b1:c7:de:88:6d:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe58f2-edfe-4619-86bd-def2ca3ad919
        Validity
            Not Before: Oct 20 00:09:44 2026 GMT
            Not After : Jan 22 01:09:44 2029 GMT
        Subject: CN=facf4a7c-d3a7-47c4-9334-2ccfeb660384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:c6:6e:20:7f:e0:d1:75:a6:a6:6f:f6:d8:
                    46:43:bb:ff:bd:69:1e:56:b8:da:49:b3:08:38:7b:
                    92:3a:2a:c1:c2:92:a9:8c:13:37:65:12:2f:1b:91:
                    8d:2c:5e:37:2e:5b:a7:ad:05:6a:bf:a7:f2:52:b9:
                    9e:59:29:f5:b4:7c:29:4e:d6:4b:64:d2:2a:2a:4b:
                    57:df:67:a3:80:03:b3:42:59:5b:4b:b5:47:41:55:
                    fc:30:5d:0e:de:f9:86:2b:49:8f:d2:ee:90:05:17:
                    e6:59:e2:d1:07:2c:d7:c1:0e:0d:e0:20:a0:d1:36:
                    ce:99:f0:47:87:0f:6a:bf:a8:29:41:ae:d5:4a:31:
                    7b:ba:95:06:59:8f:e0:b6:8a:fd:91:fa:43:26:dd:
                    f5:5e:f7:2c:a3:d4:67:4b:ff:ad:6f:78:5a:c0:db:
                    13:41:f2:fc:56:a4:d8:c4:dd:12:31:7c:67:c0:89:
                    fa:f2:3f:a6:62:30:99:d0:25:6f:7e:a9:37:df:a1:
                    0a:30:e7:ee:d7:54:d8:26:98:13:ce:0e:0b:05:f8:
                    73:57:8c:6c:ea:76:3f:8b:90:b5:dd:de:23:e9:4b:
                    61:6b:28:9b:0a:e1:4b:ff:67:84:1e:aa:b8:de:d1:
                    d7:fd:af:70:9b:44:3a:79:49:fe:9d:8f:4f:2f:3f:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl

            X509v3 Authority Key Identifier:
                keyid:56:2A:4E:5E:BB:74:AF:28:85:7C:E7:58:85:40:8A:1C:E6:D7:81:FD

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.140.140.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  403078

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:12:24:ee:ab:24:2f:75:97:f6:21:65:d7:23:5a:16:d8:
         7e:00:e8:ad:3d:35:5c:31:8c:75:89:45:99:36:bc:7e:13:97:
         21:00:89:c6:ac:db:2f:97:bb:ae:86:26:f4:b8:c6:09:36:e5:
         ed:57:c1:0f:1e:c6:40:c6:e5:86:d2:42:8e:0c:38:e2:8c:4e:
         d3:04:43:40:1c:33:48:f1:79:83:b4:f6:cd:f5:a5:58:1e:6e:
         0b:85:7d:16:e1:8e:28:39:6b:7c:2c:99:10:32:4f:ae:83:a2:
         bf:d6:f4:4c:c1:f5:e8:41:49:fe:5f:71:ff:8d:c6:4e:05:90:
         0b:a8:6b:b0:54:28:10:44:2b:c1:00:47:81:73:7c:da:bd:91:
         42:73:bc:03:e7:d2:07:64:51:19:45:4a:a3:71:e1:52:35:b5:
         ae:8f:f6:23:b5:4f:75:5a:45:f3:e9:a2:25:49:47:ad:bb:b4:
         71:9b:20:58:28:6b:25:d9:b2:4b:e1:86:bb:5a:b7:36:e1:2d:
         c0:45:8a:64:50:0c:03:af:df:ab:be:06:fe:c4:a7:24:cb:92:
         f7:8a:b9:cb:b9:4c:1f:15:0a:2d:00:8e:1c:11:25:9d:71:9f:
         bb:2f:b7:b1:3c:1b:33:1f:fe:fc:7a:09:90:1c:ce:b7:82:3a:
         2c:e1:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:33:48 2026 by rpki-client