Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/43666cf2-8601-433d-83cf-c549fba17d4a.cer
File:                     43666cf2-8601-433d-83cf-c549fba17d4a.cer (raw, json)
Hash identifier:          WM+gN8dAFmTrnsfxkIYJEvgKyoZ6AvPz0oUqP7fw21I=
Subject key identifier:   00:A4:78:F2:1B:35:76:6E:CC:16:1F:D6:36:5A:2E:9E:37:DA:01:34
Authority key identifier: E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20
Certificate issuer:       /CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
Certificate serial:       010D0C9F4328584ECB53334268904CDA009FD8C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/43666cf2-8601-433d-83cf-c549fba17d4a/43666cf2-8601-433d-83cf-c549fba17d4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/43666cf2-8601-433d-83cf-c549fba17d4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Aug 2026 20:45:15 +0000
Certificate not after:    Sun 05 Nov 2028 22:25:24 +0000
Subordinate resources:    AS: 393938
                          IP: 158.184.3.0/24
                          IP: 158.184.110.0/24
                          IP: 158.184.192.0/20
                          IP: 158.184.213.0/24
                          IP: 158.184.224.0/24
                          IP: 158.184.229.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:53:33:42:68:90:4c:da:00:9f:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fe1dd-d829-4c87-b2cc-5689381a3c42
        Validity
            Not Before: Aug 10 20:45:15 2026 GMT
            Not After : Nov  5 22:25:24 2028 GMT
        Subject: CN=43666cf2-8601-433d-83cf-c549fba17d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:27:ac:4a:da:87:7c:13:99:d5:8c:2a:1e:0d:
                    6d:4f:6b:e2:3c:80:e8:33:21:b7:1b:c7:0a:84:62:
                    1c:df:2e:89:ee:51:62:56:0c:95:6b:45:ff:cb:5f:
                    c7:59:fa:4b:a9:f0:9e:aa:05:34:cd:de:51:9a:1f:
                    39:23:bb:cb:fc:01:ab:48:6d:74:de:5e:8d:9f:71:
                    00:10:95:17:9c:6f:ea:db:60:e2:c2:44:ce:a7:16:
                    04:fd:52:37:c8:cb:fc:75:90:81:2b:7c:69:ac:84:
                    de:d7:21:80:2c:fa:7f:cd:9d:1e:00:de:55:11:a2:
                    87:04:87:d5:59:9f:55:f7:1e:55:0b:29:01:ef:ea:
                    82:68:49:be:1a:da:b2:e2:a1:e5:55:bd:33:e5:bb:
                    16:35:9c:cb:11:38:92:33:f7:ec:38:e2:cf:9d:70:
                    46:22:11:df:ea:14:fb:2a:0d:27:00:47:85:47:21:
                    78:6c:51:f0:c5:b2:16:09:9f:9a:fa:a2:ae:95:ab:
                    a0:ac:c5:0f:98:11:17:7b:43:ea:01:3d:63:9a:59:
                    6f:21:fb:a8:6c:36:3a:0a:af:1b:ab:5f:58:66:80:
                    29:36:65:38:f1:57:d4:aa:28:cc:21:e1:73:cd:8c:
                    b9:01:2f:02:0d:02:f0:b9:0c:f0:cd:cc:86:55:6d:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:78:F2:1B:35:76:6E:CC:16:1F:D6:36:5A:2E:9E:37:DA:01:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/43666cf2-8601-433d-83cf-c549fba17d4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/43666cf2-8601-433d-83cf-c549fba17d4a/43666cf2-8601-433d-83cf-c549fba17d4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EA:13:0C:AD:48:49:28:78:AA:E3:3F:20:D5:10:61:DB:85:42:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.184.3.0/24
                  158.184.110.0/24
                  158.184.192.0/20
                  158.184.213.0/24
                  158.184.224.0/24
                  158.184.229.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393938

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:62:93:37:03:9d:6c:7b:ab:b3:7f:d5:07:5e:19:58:8b:bb:
         6b:8e:b3:c8:6e:08:93:6f:5f:e1:b2:cf:af:b5:e5:63:8c:35:
         30:39:3d:07:c8:d3:a8:4a:38:9f:ff:68:c7:c8:da:b0:5d:be:
         15:9f:77:6b:5c:6a:e7:35:33:b7:69:6c:ba:28:74:ef:3e:0b:
         e0:4f:36:3a:7b:ee:91:c7:fb:d0:66:33:13:ef:6a:72:84:53:
         f4:d5:77:42:40:17:4b:14:b7:23:87:89:58:ab:55:60:90:00:
         d7:d5:66:83:ee:e7:52:56:2b:ca:3d:c8:56:00:f3:e3:3d:bc:
         a4:5c:38:d5:a2:15:9c:0b:c7:c8:d3:b0:5a:90:5f:49:24:9f:
         4c:f2:20:dd:ab:74:aa:4d:d8:b0:88:6c:c2:49:ca:d6:32:8b:
         2d:03:d3:ba:84:04:fe:a1:50:f3:96:a0:30:ec:e8:60:ce:05:
         57:cf:dd:67:f3:1e:75:76:4f:62:24:fd:80:17:b2:fa:03:92:
         4a:12:e0:c8:a5:50:11:af:b3:a5:e9:d1:a5:69:b6:a4:f5:b9:
         59:ff:d8:9a:9e:f4:93:64:93:98:cc:5a:f2:99:a0:e0:b3:08:
         df:51:27:ed:92:ed:b3:8d:5d:98:6a:95:7e:7d:d8:b0:a6:77:
         08:35:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:52:57 2026 by rpki-client