Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
File:                     dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer (raw, json)
Hash identifier:          rLbWUDk+ymHgb8P0zczXv9wFnll2FK3U/4KjeKltWd8=
Subject key identifier:   9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584DE3FDBA12B5ACE30DC64DAD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 May 2026 00:01:18 +0000
Certificate not after:    Tue 22 Aug 2028 00:01:18 +0000
Subordinate resources:    AS: 54651
                          AS: 394027
                          AS: 397868
                          IP: 162.223.124.0/24
                          IP: 162.244.4.0/23
                          IP: 192.231.134.0/24
                          IP: 209.51.32.0/21
                          IP: 2620:121:e000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e3:fd:ba:12:b5:ac:e3:0d:c6:4d:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: May 20 00:01:18 2026 GMT
            Not After : Aug 22 00:01:18 2028 GMT
        Subject: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:c0:91:25:3b:83:12:cb:42:1e:e6:cb:2b:
                    e6:a4:01:84:f0:64:de:eb:9f:63:cf:14:65:a0:51:
                    46:64:3b:63:38:c2:7d:09:8a:76:d0:29:b3:5c:ea:
                    87:30:50:3b:9a:03:67:aa:ea:20:eb:ea:b5:44:33:
                    86:42:39:6c:7b:37:51:f9:04:c1:92:5f:a4:99:7a:
                    83:ff:d9:8a:59:16:c5:3c:9a:84:f1:ff:bd:3e:5c:
                    3a:d0:4e:f9:a8:dd:15:7b:14:ee:24:45:e3:e3:3c:
                    b2:f1:2b:b8:40:5f:ce:cd:99:b7:65:44:2f:8d:a2:
                    5e:38:a1:fa:7f:4a:53:1c:f9:2a:55:26:92:ec:2b:
                    a7:14:d1:c6:b2:dc:ac:c6:c7:e2:7f:be:44:08:f8:
                    d6:fc:dc:46:5f:f5:95:0b:95:91:cd:53:4b:63:01:
                    a3:3d:3e:6a:d8:6e:9e:c9:e1:be:fb:a8:e4:77:b7:
                    56:80:f7:8f:ba:4d:c2:ca:34:f6:79:ee:40:80:03:
                    9f:d5:9b:8e:fb:75:55:6a:b8:2b:50:ee:4c:ec:87:
                    ad:d5:a9:e3:40:1f:ed:ec:f2:75:e2:e8:2e:0a:1b:
                    63:02:65:a5:2c:54:0d:da:9e:90:34:15:7d:ef:52:
                    18:ea:df:d1:44:2b:9d:3f:34:50:06:ae:39:9a:ee:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.124.0/24
                  162.244.4.0/23
                  192.231.134.0/24
                  209.51.32.0/21
                IPv6:
                  2620:121:e000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54651
                  394027
                  397868

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:73:b5:89:ef:1c:8a:98:28:6f:33:2e:63:0b:54:f2:32:13:
         91:b4:4b:5a:a7:c3:83:f7:95:63:85:f8:5e:1c:f2:0b:58:bd:
         20:c5:96:49:9c:35:ed:b4:16:4d:22:b2:fc:f3:4b:d4:16:eb:
         2b:ff:c9:a0:c3:10:ee:aa:30:09:5d:a8:bd:5f:4d:fe:4a:ec:
         de:0b:2e:10:a8:39:e5:77:7a:53:ec:a3:97:7b:1b:96:dd:b4:
         c2:7e:83:22:45:c8:a4:f0:10:c0:df:ae:60:7b:1f:6d:01:c3:
         93:a2:25:87:02:ae:6e:60:d5:bb:9c:34:cd:ee:1b:c8:af:b1:
         fb:c6:3d:20:ce:ac:50:de:5c:8f:52:96:5d:3b:0e:fb:6c:a9:
         b0:47:0c:7f:e7:6e:91:fb:d2:dd:cf:2e:8b:3a:9d:8f:f1:e9:
         c0:21:62:a3:eb:3f:8e:fe:56:bd:89:51:29:72:31:33:0a:1b:
         6b:5d:f9:25:c8:f8:5a:ff:69:09:62:ea:3f:c6:30:bb:9d:cf:
         0a:84:9a:96:39:8c:02:dd:f9:3d:eb:01:17:d0:c5:09:9a:51:
         f6:b6:79:fb:a7:23:1d:3a:db:f3:66:ea:b9:03:7c:98:8e:cb:
         f6:90:12:a7:52:c2:d2:35:96:30:49:da:fc:83:d8:5c:ec:86:
         39:aa:70:14
-----BEGIN CERTIFICATE-----
MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE3j/boStazjDcZNrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNkOWMw
YjYyMB4XDTI2MDUyMDAwMDExOFoXDTI4MDgyMjAwMDExOFowLzEtMCsGA1UEAxMk
ZGMxMzk5MDQtNjhiYi00N2UxLTk0ZjgtNTUxYmJmYWFlZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgHAkSU7gxLLQh7myyvmpAGE8GTe659jzxRl
oFFGZDtjOMJ9CYp20CmzXOqHMFA7mgNnquog6+q1RDOGQjlsezdR+QTBkl+kmXqD
/9mKWRbFPJqE8f+9Plw60E75qN0VexTuJEXj4zyy8Su4QF/OzZm3ZUQvjaJeOKH6
f0pTHPkqVSaS7CunFNHGstysxsfif75ECPjW/NxGX/WVC5WRzVNLYwGjPT5q2G6e
yeG++6jkd7dWgPePuk3CyjT2ee5AgAOf1ZuO+3VVargrUO5M7Iet1anjQB/t7PJ1
4uguChtjAmWlLFQN2p6QNBV971IY6t/RRCudPzRQBq45mu6ZVQIDAQABo4IESDCC
BEQwHQYDVR0OBBYEFJ16ToTDNBwjbNRHJNmD0NnKbpOeMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9k
YzEzOTkwNC02OGJiLTQ3ZTEtOTRmOC01NTFiYmZhYWVlYjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgt
OWFhMS00YTM5LTk0MGYtYmUyNzNkOWMwYjYyL2RjMTM5OTA0LTY4YmItNDdlMS05
NGY4LTU1MWJiZmFhZWViNC9kYzEzOTkwNC02OGJiLTQ3ZTEtOTRmOC01NTFiYmZh
YWVlYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZk
YmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWJmZGJhOC05YWExLTRh
MzktOTQwZi1iZTI3M2Q5YzBiNjIuY3JsMB8GA1UdIwQYMBaAFMhdUv52NOl1Ip4v
JmOJpDeizRxjMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1
YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi5jZXIwQgYIKwYBBQUH
AQcBAf8EMzAxMB4EAgABMBgDBACi33wDBAGi9AQDBADA54YDBAPRMyAwDwQCAAIw
CQMHBCYgASHgADAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMA1XsCAwYDKwIDBhIs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKpztYnvHIqYKG8zLmMLVPIyE5G0S1qnw4P3lWOF+F4c8gtYvSDF
lkmcNe20Fk0isvzzS9QW6yv/yaDDEO6qMAldqL1fTf5K7N4LLhCoOeV3elPso5d7
G5bdtMJ+gyJFyKTwEMDfrmB7H20Bw5OiJYcCrm5g1bucNM3uG8ivsfvGPSDOrFDe
XI9Sll07DvtsqbBHDH/nbpH70t3PLos6nY/x6cAhYqPrP47+Vr2JUSlyMTMKG2td
+SXI+Fr/aQli6j/GMLudzwqEmpY5jALd+T3rARfQxQmaUfa2efunIx062/Nm6rkD
fJiOy/aQEqdSwtI1ljBJ2vyD2FzshjmqcBQ=
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:40 2026 by rpki-client