Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a0637df2-e59c-4465-8c44-e5c8bbeb81a7.cer
File:                     a0637df2-e59c-4465-8c44-e5c8bbeb81a7.cer (raw, json)
Hash identifier:          OQeGwDTW1kA1sswNqN+nag6dxm7KZGHf0ri2DsN4JuY=
Subject key identifier:   B3:EC:1A:DB:4B:8C:50:49:E8:D7:0B:B4:8B:0A:B6:8C:34:76:61:07
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584DE2E957DCF2542F6171B5FC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a0637df2-e59c-4465-8c44-e5c8bbeb81a7/a0637df2-e59c-4465-8c44-e5c8bbeb81a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a0637df2-e59c-4465-8c44-e5c8bbeb81a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 May 2026 14:44:25 +0000
Certificate not after:    Mon 21 Aug 2028 14:44:25 +0000
Subordinate resources:    AS: 61
                          AS: 65
                          AS: 107
                          AS: 123
                          AS: 132 -- 133
                          AS: 136
                          AS: 146
                          AS: 169
                          AS: 175
                          AS: 216
                          AS: 218
                          AS: 220 -- 222
                          AS: 240 -- 241
                          AS: 246
                          AS: 255
                          AS: 296
                          AS: 298
                          AS: 301
                          AS: 374
                          AS: 379 -- 508
                          AS: 522
                          AS: 548
                          AS: 570
                          AS: 581 -- 587
                          AS: 707
                          AS: 713
                          AS: 720
                          AS: 727 -- 746
                          AS: 1242
                          AS: 1245
                          AS: 1260
                          AS: 1758
                          AS: 2545
                          AS: 2550
                          AS: 2742 -- 2743
                          AS: 2747
                          AS: 4020 -- 4038
                          AS: 4161 -- 4164
                          AS: 4383
                          AS: 4480 -- 4490
                          AS: 4607
                          AS: 5011 -- 5014
                          AS: 5021
                          AS: 13784
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:e9:57:dc:f2:54:2f:61:71:b5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: May 19 14:44:25 2026 GMT
            Not After : Aug 21 14:44:25 2028 GMT
        Subject: CN=a0637df2-e59c-4465-8c44-e5c8bbeb81a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:36:aa:be:f2:70:6a:cc:99:b3:b0:08:df:22:
                    f2:fc:ed:78:a2:17:73:26:3f:28:c6:95:42:1b:9f:
                    13:b4:11:70:3e:63:7d:e0:4d:56:6d:94:80:be:2e:
                    d9:f4:fd:b9:89:9f:00:39:dc:ff:28:24:fa:d4:99:
                    76:2b:94:d1:67:8e:db:2b:87:c4:be:3c:cf:e2:56:
                    a5:c9:f6:8a:c3:22:e4:af:42:16:39:a0:87:5d:94:
                    a2:a1:3f:6e:14:b7:67:d9:9d:a3:30:4a:d7:6d:2a:
                    3b:b4:23:91:7d:ec:fc:f6:b3:db:db:a7:62:a9:20:
                    11:e4:5a:6a:e3:80:ef:a4:b8:2a:c1:9f:d7:7c:84:
                    06:63:0f:cd:7d:23:d2:f7:8c:6c:ce:a7:55:18:ff:
                    76:e6:4d:b0:91:52:5f:30:94:ac:b1:e3:17:9d:77:
                    69:51:12:02:07:76:f7:aa:20:c4:db:4f:23:44:e8:
                    3b:51:a0:ab:0c:a3:2f:cc:6c:a8:4d:f5:fb:cd:f3:
                    43:96:2f:92:10:34:29:27:5b:2b:86:d0:0a:43:cb:
                    37:60:77:1e:11:b0:6a:a2:66:3a:6e:c3:e5:bc:fc:
                    8f:12:0e:ef:3f:4b:42:d2:ea:7b:6f:fc:e6:7a:9d:
                    63:02:92:24:ee:3a:e3:01:ae:58:c8:91:c6:f4:22:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EC:1A:DB:4B:8C:50:49:E8:D7:0B:B4:8B:0A:B6:8C:34:76:61:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a0637df2-e59c-4465-8c44-e5c8bbeb81a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a0637df2-e59c-4465-8c44-e5c8bbeb81a7/a0637df2-e59c-4465-8c44-e5c8bbeb81a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61
                  65
                  107
                  123
                  132-133
                  136
                  146
                  169
                  175
                  216
                  218
                  220-222
                  240-241
                  246
                  255
                  296
                  298
                  301
                  374
                  379-508
                  522
                  548
                  570
                  581-587
                  707
                  713
                  720
                  727-746
                  1242
                  1245
                  1260
                  1758
                  2545
                  2550
                  2742-2743
                  2747
                  4020-4038
                  4161-4164
                  4383
                  4480-4490
                  4607
                  5011-5014
                  5021
                  13784

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:22:64:d2:6a:cb:00:41:24:25:af:a0:ed:fd:f8:cf:40:
         a9:12:c8:b0:e1:57:d6:03:a4:b1:69:30:c0:1c:6a:90:ba:18:
         e2:f9:cb:ad:b0:4c:36:26:74:78:0a:c2:e3:60:20:0f:86:88:
         b1:71:04:b0:c4:f2:8e:a2:c4:9d:05:5a:da:fe:c6:56:e7:d6:
         ee:05:0a:0e:f4:5e:70:2e:10:a6:d2:93:29:c6:3f:b3:81:bf:
         55:ba:9b:91:3c:eb:30:86:1d:27:7e:9b:a4:35:45:b2:40:78:
         8a:e3:df:42:b2:18:88:cb:bd:a5:63:c5:10:fc:86:cb:83:f5:
         0f:4f:77:23:9e:8a:ee:35:89:30:c3:38:96:e5:ab:9d:71:e6:
         5d:f5:47:56:58:55:11:80:79:25:e1:ac:7f:be:91:6c:1f:df:
         98:2a:95:43:4d:d4:f7:d4:52:85:7a:f9:6d:41:89:88:56:bd:
         1a:59:f4:43:c9:62:2b:ec:89:ae:63:15:1a:b4:7f:2d:ca:f9:
         e9:e2:43:42:d9:f6:12:d7:0c:d2:fb:9e:9d:0d:05:56:f1:26:
         a8:70:7a:28:e0:4b:c9:f6:e5:f2:5d:e6:71:34:27:e0:d7:9b:
         fb:db:0e:07:43:a4:ca:34:db:5c:d5:64:3f:1b:99:4c:23:35:
         8f:8e:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:44 2026 by rpki-client