Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
File:                     34592396-ac3d-4a48-97f1-caed65436525.cer (raw, json)
Hash identifier:          x1UkseYw6X+gR2ambmpHvEA5bEmdn78s8xIK+Xo986c=
Subject key identifier:   E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584F5BC1AFCF729BAD3953ADC9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Oct 2026 14:24:16 +0000
Certificate not after:    Thu 28 Oct 2027 00:45:38 +0000
Subordinate resources:    AS: 40818
                          AS: 403025
                          IP: 23.131.144.0/24
                          IP: 216.38.168.0/22
                          IP: 2602:fdeb::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:c1:af:cf:72:9b:ad:39:53:ad:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct  1 14:24:16 2026 GMT
            Not After : Oct 28 00:45:38 2027 GMT
        Subject: CN=34592396-ac3d-4a48-97f1-caed65436525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:eb:5f:9e:56:4c:c2:54:cc:ee:ca:d0:13:
                    b5:77:51:87:f6:30:b1:67:67:5e:6d:ad:db:9c:f0:
                    26:cf:b7:31:35:5b:e9:94:23:84:37:48:61:21:f0:
                    40:8b:90:68:6e:b6:02:43:0b:91:4c:3a:57:4a:8c:
                    b5:15:89:83:5f:74:8a:f6:6c:20:4f:32:07:b4:66:
                    ae:98:4d:fd:4d:93:ee:a8:15:55:6f:26:56:79:eb:
                    5f:38:13:66:81:84:fd:cf:a8:4d:8a:b5:c7:30:91:
                    17:64:e0:86:a4:e8:ce:59:b5:1f:67:e8:e8:a9:b5:
                    03:79:c6:4a:27:cc:63:48:5f:ea:6b:27:56:1c:5f:
                    0d:ce:59:85:d4:bc:8a:c4:c2:db:c8:74:04:4e:4e:
                    02:f4:82:64:df:c9:cf:7d:01:3f:26:f5:64:fb:10:
                    4d:69:37:cd:e7:ef:96:5b:1b:9d:e8:ce:d1:e1:06:
                    62:b8:0b:35:80:95:44:9d:00:29:52:5d:86:a4:1b:
                    45:37:0f:70:93:d0:57:ce:15:2f:a7:5f:92:5e:ca:
                    5a:b9:a6:62:93:58:e8:19:97:03:e2:7d:fa:f0:74:
                    bf:0a:25:80:b0:c9:1a:7b:5e:a6:cb:a7:13:8a:00:
                    dd:bf:58:39:c1:a8:d8:70:74:6b:f6:ce:1a:ad:49:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.144.0/24
                  216.38.168.0/22
                IPv6:
                  2602:fdeb::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40818
                  403025

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:b1:06:ec:36:cb:8c:43:b8:37:af:ef:0b:60:38:32:b4:
         13:83:7b:2c:b4:a6:4d:ea:be:12:21:50:55:75:a6:6e:9a:48:
         fd:16:26:80:a8:aa:4d:8d:d7:02:09:fa:ba:d0:d1:60:ca:6f:
         06:0e:52:3f:e5:ee:0a:a6:c1:5e:dd:bd:11:d3:6a:d9:10:a2:
         a0:67:01:23:f3:6a:2e:18:2a:bf:95:a4:a2:d6:bc:78:b7:79:
         a6:6f:1c:33:ea:06:10:9d:fd:68:3d:3e:d8:23:a2:6e:cf:b9:
         05:00:3b:86:74:6b:17:e1:ef:32:1f:20:3e:92:bb:88:c8:20:
         d9:e5:32:50:73:ce:93:ff:29:18:7e:c3:1a:62:ca:90:7b:dd:
         f5:91:e6:91:ab:11:29:80:45:57:a9:46:02:2b:31:fe:6f:8a:
         f4:59:08:1f:31:ed:21:ab:f5:77:57:9f:50:24:64:8c:fe:a5:
         c6:a0:89:34:e0:7a:d5:3e:ac:dd:12:b2:30:0c:d1:55:2a:fa:
         aa:16:16:d7:31:1f:c8:73:a8:82:22:16:da:2e:bf:9c:2e:13:
         8d:8d:74:0b:3a:74:c6:d7:53:d8:1a:69:75:73:05:18:c2:d4:
         0f:35:a7:32:4a:63:3c:cf:a7:7b:8b:5d:2c:b1:1f:43:93:cb:
         bf:6f:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:19:15 2026 by rpki-client