Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer
File:                     1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.cer (raw, json)
Hash identifier:          rk06X+bjHB/VBQ8fO2HHZQwC8/G0wRJ5UJSuyqpPEXQ=
Subject key identifier:   BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584DE0AB0891FDA9703BB6733F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 May 2026 19:27:15 +0000
Certificate not after:    Wed 25 Aug 2027 00:45:37 +0000
Subordinate resources:    AS: 394584
                          IP: 66.43.0.0/22
                          IP: 69.5.191.0/24
                          IP: 170.178.148.0/22
                          IP: 192.139.159.0/24
                          IP: 2602:81b:c000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e0:ab:08:91:fd:a9:70:3b:b6:73:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: May 18 19:27:15 2026 GMT
            Not After : Aug 25 00:45:37 2027 GMT
        Subject: CN=1fc9a95e-53c1-4e1e-9c7b-39f8f242418e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:e8:a0:d1:31:8d:cf:7d:dd:dc:f5:ad:d4:
                    d7:11:ef:59:65:84:fa:bb:79:f9:ae:ea:f7:3f:f7:
                    ac:39:74:37:3e:b5:77:b5:fe:fc:57:9a:89:6c:e6:
                    94:7b:14:0d:19:f7:78:05:a2:4e:da:0c:73:82:fc:
                    36:11:c1:85:00:23:f5:8e:ee:f2:ca:76:5f:02:39:
                    8f:ed:d2:7e:e5:87:38:5b:47:2c:0b:5e:ec:e4:b3:
                    e4:01:ca:54:d1:f1:fe:1b:ca:4a:99:03:ce:9e:67:
                    07:cc:2f:fd:8f:ee:87:7e:0a:95:6f:ec:59:6c:8a:
                    58:b3:e1:ac:5e:11:88:cb:9c:91:69:52:01:42:02:
                    82:93:af:3d:e4:ea:5a:cd:ec:36:40:e6:69:d4:06:
                    21:3c:07:66:95:4d:96:61:fc:62:39:e5:b5:91:a4:
                    38:a9:12:e9:cd:f0:a7:27:37:35:3d:ce:70:ad:9d:
                    a0:ca:e3:4d:00:32:10:0c:96:73:48:2e:22:77:80:
                    ce:26:c9:cb:01:7e:86:79:4d:74:c2:06:04:7f:0d:
                    96:57:1d:25:b2:56:8b:df:e0:0f:4d:e6:2e:6e:dd:
                    a0:ca:e1:89:a7:04:ea:c8:b8:46:ce:62:3a:e9:75:
                    cd:2d:e4:dc:60:c9:24:97:c2:43:de:cd:03:e8:1d:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:47:5A:5F:33:6D:B7:0B:DE:C4:4B:99:00:36:AC:67:40:D0:DE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e/1fc9a95e-53c1-4e1e-9c7b-39f8f242418e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.0.0/22
                  69.5.191.0/24
                  170.178.148.0/22
                  192.139.159.0/24
                IPv6:
                  2602:81b:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394584

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:0b:b7:e6:18:12:5b:f4:fd:69:94:d5:56:ed:ee:f7:b8:
         11:09:f0:f1:61:b8:dd:10:56:00:3c:24:a9:34:27:ab:7f:e8:
         f0:3f:39:7c:12:8b:9f:0a:2d:ed:62:79:f7:8f:7d:b7:af:7f:
         f5:65:5f:c3:61:e6:ae:95:71:5b:6d:7b:c7:be:cc:91:ca:89:
         ea:33:ca:92:a8:ba:b6:ac:7d:0a:74:c7:6c:b3:4d:11:43:1a:
         62:b3:57:80:a8:c2:1b:02:87:d9:f4:2a:48:f7:11:7e:cf:67:
         ce:18:94:f3:db:d6:8a:0b:08:80:bc:3b:6b:22:ec:40:3b:2b:
         e0:ce:e6:62:ae:48:7e:47:2b:7e:31:5d:e0:b7:b9:02:84:c6:
         7e:18:8d:3c:db:05:c5:fb:5b:a2:e0:f5:8a:e5:d0:a8:84:e4:
         1c:79:2e:98:97:8c:e6:f8:e5:09:f9:87:7e:bc:93:35:8b:02:
         71:66:ec:36:8c:51:2a:59:dc:fc:f9:6d:ea:71:f3:3a:ab:b6:
         de:f9:35:4d:bb:49:43:3f:1b:d9:57:dc:6f:a3:95:8b:ff:ce:
         b4:ee:5d:76:61:8e:3c:94:c0:b6:6a:28:cd:54:a2:45:9c:60:
         d7:32:ea:ce:44:58:d3:88:3b:4d:01:b0:24:33:88:a1:d7:49:
         dd:f1:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 07:11:06 2026 by rpki-client