Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
File:                     9050423a-b7ae-4879-a880-ea3be6e193a8.cer (raw, json)
Hash identifier:          loq+7uuuq0oxjJoA2Wj70+/d08Jy8e/yxiydzI+LlhM=
Subject key identifier:   E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584D571803B3BF9269F679220900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Mar 2026 12:45:17 +0000
Certificate not after:    Sun 02 Jul 2028 12:45:17 +0000
Subordinate resources:    AS: 22188
                          IP: 23.134.96.0/23
                          IP: 168.151.10.0/24
                          IP: 192.111.80.0/22
                          IP: 2604:bc40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:18:03:b3:bf:92:69:f6:79:22:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 30 12:45:17 2026 GMT
            Not After : Jul  2 12:45:17 2028 GMT
        Subject: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b9:a4:66:92:f1:aa:fe:ae:b4:e4:0f:7f:04:
                    66:cf:3d:85:09:db:c8:7d:fb:4d:1e:0f:66:b6:1c:
                    fe:3e:47:2f:ae:26:03:02:c8:67:5f:a5:6c:be:69:
                    dd:9a:b8:69:13:62:28:d1:75:24:69:33:b9:03:f8:
                    a6:bd:cc:df:ee:e5:0c:17:fc:8b:6d:d5:37:15:c7:
                    10:20:99:b6:1b:17:27:da:6c:a7:32:48:ee:64:a2:
                    e3:3a:7a:02:47:d7:2b:5e:64:46:f0:a3:b4:48:a7:
                    83:ce:de:4c:38:31:4b:99:06:64:a8:db:73:4e:e5:
                    ca:8b:00:fa:4b:51:7f:e3:17:86:4c:c8:a0:e9:6b:
                    49:6a:dd:14:c5:7a:8e:18:0d:8d:7f:0b:d3:59:ea:
                    04:b3:a0:4b:de:2d:7d:34:f3:2f:04:d8:b2:c3:07:
                    ce:c0:31:34:b0:15:4a:47:ef:57:13:fd:1c:dc:e6:
                    fb:8a:f6:e0:9a:56:65:4d:a7:e0:23:0a:e1:82:57:
                    f7:88:11:0d:23:30:88:be:7c:b6:e4:50:cb:81:93:
                    a9:90:55:b1:71:1a:ca:a0:35:0f:18:88:2e:57:19:
                    7a:f5:a8:7e:9e:22:37:00:d0:80:55:6d:3c:8e:c4:
                    2e:fb:8c:e8:7b:62:4a:f2:79:3f:97:7d:0a:7c:64:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.96.0/23
                  168.151.10.0/24
                  192.111.80.0/22
                IPv6:
                  2604:bc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22188

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:81:83:8a:48:d4:fd:34:94:3c:9d:c2:71:af:f3:de:bb:
         30:4b:86:6c:d4:98:19:65:67:20:0d:ce:67:14:f5:f0:54:0a:
         cc:34:31:31:fb:ca:af:19:3b:7b:9b:31:af:67:3b:fa:f8:4c:
         f4:ef:78:72:6a:e2:01:31:bb:4b:94:14:80:04:9c:b1:06:97:
         00:95:7d:f6:78:08:59:64:eb:1b:ce:bd:0f:a8:1b:92:e0:7e:
         9c:08:8f:6e:98:28:4a:a3:83:fd:7c:2c:8f:5c:1b:9a:f8:c8:
         8f:00:f4:9f:74:1b:47:37:3c:42:03:da:f1:90:ed:44:dd:27:
         cf:69:f2:97:48:1e:f3:b6:9f:cc:60:fa:f9:7a:da:01:56:3f:
         1b:f9:a6:c8:24:2e:b6:3d:8e:ae:66:f5:ee:f6:d5:8c:5c:81:
         f8:ec:00:9a:7b:1e:46:28:a0:72:5a:89:eb:b8:27:6d:5c:9e:
         0c:d7:1c:94:cd:1c:d1:83:f2:fd:38:24:4a:a9:23:28:9b:77:
         ce:5f:4f:58:bb:82:42:ca:ba:0e:b0:d9:b2:c3:c5:87:1e:f5:
         3e:7d:e6:1b:bd:e1:96:18:95:ea:0a:fc:e4:70:8c:a3:c9:eb:
         6b:29:d4:80:bd:2c:5c:4c:8d:d9:2e:c6:ee:55:6a:39:fd:c1:
         99:fb:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 13:04:16 2026 by rpki-client