Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f84ca666-b093-4804-b235-13fc835fad41.cer
File:                     f84ca666-b093-4804-b235-13fc835fad41.cer (raw, json)
Hash identifier:          YPVhFBVhyIz3SIIXINuRlgoF1uqagRLnPStFO2I+YTk=
Subject key identifier:   BC:02:C5:E8:51:53:4C:3C:5B:68:84:B7:48:74:77:51:58:A8:84:3C
Authority key identifier: C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63
Certificate issuer:       /CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
Certificate serial:       010D0C9F4328584E55F499CD36377FEB9F944380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f84ca666-b093-4804-b235-13fc835fad41/f84ca666-b093-4804-b235-13fc835fad41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f84ca666-b093-4804-b235-13fc835fad41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jun 2026 19:45:04 +0000
Certificate not after:    Sun 01 Oct 2028 19:45:04 +0000
Subordinate resources:    AS: 33281
                          IP: 157.201.0.0/16
                          IP: 2620:5f:8000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:55:f4:99:cd:36:37:7f:eb:9f:94:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35bfdba8-9aa1-4a39-940f-be273d9c0b62
        Validity
            Not Before: Jun 29 19:45:04 2026 GMT
            Not After : Oct  1 19:45:04 2028 GMT
        Subject: CN=f84ca666-b093-4804-b235-13fc835fad41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:b3:71:59:88:f8:8b:79:0f:68:0d:06:b9:
                    20:c7:e7:79:0c:fb:2e:61:59:0f:1f:3c:30:eb:08:
                    e7:0e:58:77:81:c2:20:fb:d9:fa:4d:19:d0:ba:d5:
                    82:22:ff:ab:3a:04:9a:b1:22:23:06:73:fd:92:25:
                    84:21:5f:c6:eb:e4:50:65:b4:94:87:24:ea:f4:64:
                    71:37:56:34:b8:02:74:54:c1:7c:00:29:38:2c:60:
                    ed:c7:29:c1:85:43:d9:a6:41:fd:71:4e:05:0b:29:
                    f5:d3:5a:fd:4a:e0:e4:b1:3e:9b:de:9e:14:5f:a8:
                    e0:ee:eb:94:87:36:71:bc:77:e0:60:ef:83:1b:c7:
                    85:90:c0:66:21:95:5e:4f:c1:10:18:19:da:fa:76:
                    2e:bb:a5:da:57:8b:fd:20:68:ea:66:37:23:02:01:
                    a2:94:97:e9:d4:5a:2b:aa:20:3a:a4:66:03:5a:39:
                    6c:f0:90:e3:47:7a:b2:15:5b:b5:50:90:8a:c4:61:
                    cb:fe:a8:a6:be:13:b0:47:20:29:2b:22:e6:a8:4d:
                    ae:32:7f:9d:59:7b:a3:46:13:08:69:96:5f:e8:ad:
                    a4:2f:95:ba:fb:b6:aa:8c:4f:e5:17:d9:79:79:4e:
                    e7:2b:5f:cc:ab:56:8f:1b:9f:f2:82:46:dc:43:25:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:C5:E8:51:53:4C:3C:5B:68:84:B7:48:74:77:51:58:A8:84:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f84ca666-b093-4804-b235-13fc835fad41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f84ca666-b093-4804-b235-13fc835fad41/f84ca666-b093-4804-b235-13fc835fad41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl

            X509v3 Authority Key Identifier:
                keyid:C8:5D:52:FE:76:34:E9:75:22:9E:2F:26:63:89:A4:37:A2:CD:1C:63

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.201.0.0/16
                IPv6:
                  2620:5f:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33281

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:32:8a:eb:2c:c5:9c:6d:d2:71:31:4d:c5:b8:c8:e1:66:c9:
         27:9a:c5:ae:9d:56:4a:0d:02:aa:0f:43:5d:21:e3:54:fa:6c:
         a4:c7:e0:a8:8d:df:7a:b3:06:99:74:e2:fc:21:7a:5a:2e:16:
         ef:a2:13:89:b5:9f:7d:ea:83:c5:3a:ee:d0:32:a7:10:c9:0f:
         c2:0f:7c:2e:a9:ee:ea:18:7c:a1:39:e9:5c:e3:14:99:2b:0a:
         05:99:fe:dd:c2:d6:cf:d4:04:47:27:fd:d8:e7:c5:05:6d:9c:
         de:fe:57:2f:df:98:d1:ed:56:bc:67:7c:4c:35:7e:7f:d5:dd:
         14:74:05:eb:23:09:67:62:0e:7c:35:2a:a8:26:0d:40:d7:d8:
         bb:41:fa:b1:ff:5c:b7:da:75:6f:75:5d:fa:4a:0e:2a:d8:2f:
         10:49:e5:ef:e9:31:6b:df:5f:50:65:40:16:14:6c:67:42:dc:
         cc:38:5c:b9:c9:3a:2b:2b:91:f9:13:9a:66:8c:c5:78:ab:6c:
         89:00:8f:88:f5:75:54:50:68:44:e7:e9:4c:1c:44:fb:60:a1:
         49:aa:d1:3a:0a:19:ef:33:ef:74:9a:b4:7b:8f:b9:9b:63:71:
         fb:c4:4d:7c:66:51:83:04:ec:bb:9c:1d:32:b1:89:b8:b9:68:
         95:37:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:03 2026 by rpki-client