Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7a8f580-ece9-40ee-93c6-ae08e639036d.cer
File:                     d7a8f580-ece9-40ee-93c6-ae08e639036d.cer (raw, json)
Hash identifier:          gaPYAoBMvG8sUFxOHyOXP4AEAOhFg6bpy7/ZAffMEJQ=
Subject key identifier:   8B:CC:36:07:84:33:4F:9E:FC:A8:CE:DE:6F:0F:40:BD:01:64:C9:44
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584D8FBBD5E913C49875F76416D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7a8f580-ece9-40ee-93c6-ae08e639036d/d7a8f580-ece9-40ee-93c6-ae08e639036d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7a8f580-ece9-40ee-93c6-ae08e639036d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 19 Apr 2026 19:40:38 +0000
Certificate not after:    Sat 22 Jul 2028 19:40:38 +0000
Subordinate resources:    AS: 402255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8f:bb:d5:e9:13:c4:98:75:f7:64:16:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Apr 19 19:40:38 2026 GMT
            Not After : Jul 22 19:40:38 2028 GMT
        Subject: CN=d7a8f580-ece9-40ee-93c6-ae08e639036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6f:b5:46:2a:74:f3:a2:22:32:a4:0f:4f:a2:
                    8e:85:02:6f:56:63:a4:1d:37:92:ff:ef:dd:4d:f9:
                    84:00:9f:d2:2b:89:c5:2a:02:cb:db:f8:93:0b:c1:
                    7c:5a:85:ca:cf:eb:2f:09:9f:fa:f0:25:05:bf:4d:
                    f9:2f:79:92:e9:81:13:ba:1f:96:a4:10:88:aa:19:
                    29:34:32:c4:33:e0:c0:55:95:df:74:2c:3f:2b:8d:
                    3d:07:27:39:6d:08:60:0f:d9:cb:b8:eb:a1:68:55:
                    bd:61:40:f7:3d:47:53:44:90:1b:3a:80:70:ed:27:
                    76:12:5b:34:f0:e0:2f:ea:45:d6:aa:29:f3:c7:6d:
                    39:ea:90:35:4a:aa:a7:3e:53:f6:bd:c5:62:2b:ef:
                    4a:3f:c0:12:c6:64:cb:df:66:3c:5f:1a:f7:02:ef:
                    74:0d:02:50:8a:b8:46:51:b5:04:a6:74:4d:0e:0f:
                    6e:8d:e3:52:e1:b3:11:13:0f:ae:dd:58:61:ba:27:
                    2a:26:a5:37:95:f7:57:9f:7e:04:80:53:c4:ee:34:
                    4c:67:6a:dc:99:8b:cb:23:e2:b2:fe:7e:87:1d:ca:
                    64:04:f6:70:af:2a:33:01:d2:76:d1:e7:26:4a:85:
                    b0:c3:a1:72:c3:03:1a:f6:3f:6f:a5:80:38:3c:f0:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:36:07:84:33:4F:9E:FC:A8:CE:DE:6F:0F:40:BD:01:64:C9:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7a8f580-ece9-40ee-93c6-ae08e639036d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d7a8f580-ece9-40ee-93c6-ae08e639036d/d7a8f580-ece9-40ee-93c6-ae08e639036d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:28:13:3e:0d:4b:99:b1:6b:af:24:2e:2d:af:d4:bd:99:f1:
         6d:5e:33:f7:28:31:d0:07:4c:80:02:97:1f:8e:07:84:3e:72:
         4c:29:c5:9e:b9:f1:33:84:7b:d7:61:39:c5:f0:13:8b:d6:53:
         55:ab:8c:38:c9:0a:f0:f6:49:64:35:14:b6:f5:cb:6e:58:02:
         27:be:a1:71:9f:9a:f9:ab:6d:84:f2:b6:54:06:f1:76:71:83:
         14:27:8d:0c:19:50:fe:cf:19:ce:e8:d3:3c:0c:83:8d:41:64:
         f2:0a:c9:cc:74:40:fa:37:96:17:18:37:5a:ef:44:6f:49:b6:
         c7:4c:58:ad:b2:f4:2b:00:b9:78:ce:22:97:56:f7:42:06:47:
         61:0b:d1:95:4f:0c:5c:7f:e7:73:e5:69:45:eb:27:30:83:2e:
         a3:d0:cb:e5:bc:e9:5b:1e:db:bc:04:e4:92:6b:11:1a:d6:58:
         f2:9d:88:a6:7d:b8:84:5b:bb:2c:36:d7:2e:e4:bb:9e:a8:f8:
         d9:8d:52:f5:d5:19:8a:2e:56:95:91:97:80:55:9e:bd:a3:e8:
         4e:1d:5d:43:f4:97:86:80:04:fb:46:4d:b3:c2:d3:9c:1e:b0:
         fc:17:86:95:76:86:f2:c3:29:17:c4:69:b7:62:ea:9f:1c:3e:
         7e:db:41:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:03:59 2026 by rpki-client