Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
File:                     e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer (raw, json)
Hash identifier:          gYZOjjEs5ZwmUgusdtZ2WKITCzZ/3qTDchvbB6+xxRo=
Subject key identifier:   51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority key identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E
Certificate issuer:       /CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62
Certificate serial:       010D0C9F4328584D693D771C24E75978151B2E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
Manifest:                 rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
caRepository:             rsync://rpki.roa.net/rrdp/xTom/51/
Notify URL:               https://rpki.roa.net/rrdp/notification.xml
Certificate not before:   Mon 06 Apr 2026 00:45:18 +0000
Certificate not after:    Sun 09 Jul 2028 00:45:18 +0000
Subordinate resources:    AS: 55158
                          IP: 23.159.160.0/24
                          IP: 2605:9c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:3d:77:1c:24:e7:59:78:15:1b:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62
        Validity
            Not Before: Apr  6 00:45:18 2026 GMT
            Not After : Jul  9 00:45:18 2028 GMT
        Subject: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:9d:61:55:4c:09:df:4e:c1:bc:a2:90:5e:
                    b0:09:ca:f0:19:52:40:c9:58:54:a8:bb:91:d4:89:
                    ce:c3:76:c4:07:f4:f4:35:e9:4e:ce:da:98:ef:7f:
                    76:8d:2f:f7:66:cf:9c:dc:80:32:38:d0:d0:91:7f:
                    4b:60:b3:d9:dd:59:3c:dd:1b:83:c0:a9:e3:f8:80:
                    9f:ae:1f:d7:3f:c2:4f:89:5c:c4:d0:e7:c3:9d:58:
                    03:7e:75:24:37:e4:4c:1a:85:39:57:09:f9:3a:94:
                    c2:e3:4a:43:19:45:32:72:17:28:ce:a0:75:0d:4f:
                    45:75:ae:a5:dc:c7:80:cc:82:bd:0f:b3:2f:69:1b:
                    30:09:8b:75:25:1a:39:16:f9:1c:12:c9:19:fb:ea:
                    cc:d8:f1:af:e0:d1:1c:02:82:a1:09:9c:47:1f:d8:
                    69:82:a9:67:b3:19:21:76:eb:51:81:44:11:2f:56:
                    95:93:8b:c9:99:b3:a8:74:b0:62:df:9c:b3:0e:ee:
                    9a:2e:e9:a1:fa:c0:08:16:cf:ac:62:22:67:ab:df:
                    17:7a:e3:f6:30:bd:0b:ea:2b:6c:ff:aa:b8:09:3c:
                    f9:46:28:38:00:da:6d:9e:6b:4a:9e:3c:be:89:b1:
                    6c:62:24:2c:ee:13:5c:a4:ba:10:08:2f:e9:ef:74:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/51/
                RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
                RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl

            X509v3 Authority Key Identifier:
                keyid:9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.160.0/24
                IPv6:
                  2605:9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55158

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7b:5e:ad:62:f4:55:6a:cf:a2:4c:1a:59:43:57:77:8c:e8:
         6f:b1:ef:97:e0:6b:e0:0d:c1:e4:54:db:c9:3d:7f:02:de:55:
         37:c1:bd:31:4d:88:70:26:e7:7f:8d:95:39:01:3b:48:5e:12:
         2f:c5:4a:15:7a:53:7d:be:81:08:8f:b5:02:b6:8c:59:83:7d:
         fc:2f:bb:d2:13:0d:ae:7b:a4:31:47:49:ee:c2:4a:d6:20:70:
         4b:92:9c:5f:b4:50:6c:7b:0a:ef:22:e1:f1:fa:b6:ae:a9:03:
         d8:c7:5d:2a:76:31:03:8b:4d:a5:da:f9:a3:5c:ca:54:a3:01:
         2f:4b:a1:5c:c3:4e:c5:72:38:0d:fb:c6:ee:55:e3:a5:fc:bb:
         be:d3:5f:b2:42:a1:f9:35:c1:df:b7:3b:23:1b:59:2b:9f:42:
         b9:55:33:ae:05:64:ab:c6:19:af:d7:b3:8d:fe:9a:bb:20:53:
         af:84:9b:c8:7d:7a:24:7e:8a:ce:f0:c3:ce:7c:4a:35:1a:76:
         61:8e:91:30:b3:ae:9f:77:59:21:ab:f8:c2:c8:98:ac:a0:d0:
         4b:7a:c7:d7:03:74:3b:bb:52:dc:03:af:e6:8e:db:87:0c:c6:
         fa:e8:26:da:06:6d:ff:aa:20:54:17:5c:a5:2d:a0:d3:f6:d5:
         42:fe:29:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 09:40:26 2026 by rpki-client