Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
File:                     f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer (raw, json)
Hash identifier:          y7I+tuJFuXU6t4LrdTpa8NOCYmCOBnmc43kqMbNltuU=
Subject key identifier:   A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584F5C1985A2D9A71161D89B1D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Oct 2026 17:21:15 +0000
Certificate not after:    Tue 27 Jun 2028 00:45:23 +0000
Subordinate resources:    AS: 16909
                          AS: 396968
                          AS: 401507
                          IP: 23.129.212.0/24
                          IP: 130.12.92.0/24
                          IP: 206.220.48.0/22
                          IP: 2602:f78a::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:19:85:a2:d9:a7:11:61:d8:9b:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  1 17:21:15 2026 GMT
            Not After : Jun 27 00:45:23 2028 GMT
        Subject: CN=f914ac1a-b017-4cf4-9c3d-349dd19000d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:8d:c9:99:66:b0:50:a8:69:5f:23:79:e3:
                    95:27:4b:5d:29:a1:01:0b:d7:98:de:96:7b:2e:b3:
                    7e:6d:35:7e:ab:af:38:3c:2c:ed:c9:a5:07:f9:fc:
                    d9:de:85:8c:e9:48:1e:22:8c:a2:c4:f7:70:37:91:
                    9b:7b:4e:f4:09:49:63:ff:8e:16:63:6c:55:e9:48:
                    f1:21:33:e2:ea:41:c3:f7:e9:7c:5e:e7:0d:e0:2e:
                    b1:99:db:16:6a:3a:46:9c:4a:15:1a:90:78:07:53:
                    df:c2:50:d9:a9:a0:4b:5f:68:7f:7c:68:db:6f:ae:
                    85:1b:05:a6:45:d4:69:2f:78:72:bc:78:4f:b7:eb:
                    54:c6:93:1c:a1:9a:d9:60:52:c3:0d:37:6f:c5:c1:
                    5a:29:61:9b:50:2c:9c:66:54:ec:57:e3:6c:a2:5a:
                    bd:9d:30:cf:95:60:8e:3d:b9:55:17:96:77:d0:94:
                    53:f9:10:87:a7:27:96:6c:ed:5f:57:84:24:49:d8:
                    b0:ac:e2:43:9d:c9:01:03:61:5e:1a:f2:7a:aa:b3:
                    f9:8d:70:9f:4e:0c:2a:26:06:51:1c:44:0f:95:f3:
                    38:ba:bb:ba:74:1b:ad:a7:ab:f1:1c:87:4a:cb:10:
                    04:7f:7b:15:67:18:ee:8e:d0:9a:cd:84:f0:e2:27:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DE:15:60:B1:CB:BA:40:6B:DA:E9:4E:F4:ED:B0:81:3C:51:7C:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.212.0/24
                  130.12.92.0/24
                  206.220.48.0/22
                IPv6:
                  2602:f78a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16909
                  396968
                  401507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:16:d7:14:09:86:9c:f7:f2:95:e0:ef:c9:35:e4:8c:a1:
         7d:a6:7c:79:04:0b:34:7a:bf:0f:07:b3:5f:b4:f4:dd:5e:6a:
         24:c0:37:87:0f:ec:e6:dc:a8:49:d3:19:a7:11:a4:c1:8b:63:
         38:c7:8a:18:55:64:78:60:73:1c:1b:0c:2f:fd:3d:7f:26:fb:
         bb:05:d5:21:54:94:fd:0b:a9:91:33:d3:81:b2:c6:6c:02:89:
         d4:17:31:34:d1:53:42:ef:69:e4:40:03:e0:96:79:56:01:a1:
         82:03:b8:48:a6:46:8f:0c:2c:e2:73:74:d0:3b:7d:49:14:f1:
         5c:14:c0:97:be:9e:77:2f:46:a1:64:bc:b4:4a:04:26:4c:72:
         7a:7b:a0:b1:70:85:c2:d1:ac:09:29:40:92:de:84:01:8d:63:
         1f:75:53:e9:49:66:83:1e:d8:c2:78:af:e4:a0:22:a2:f4:66:
         ba:99:52:1e:23:82:14:d6:58:d4:ca:a0:0a:c7:b7:95:ec:2a:
         fb:dd:93:99:16:7d:93:52:eb:6b:3b:1a:4a:ce:c3:60:20:78:
         4b:d7:cc:e4:9e:dd:99:58:3f:94:41:09:ea:1d:91:21:0d:b6:
         48:a7:b9:75:dd:ef:fe:1c:e1:92:d8:b7:e9:5d:65:e7:7d:38:
         eb:8f:8c:ee
-----BEGIN CERTIFICATE-----
MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWE9cGYWi2acRYdibHUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI2MTAwMTE3MjExNVoXDTI4MDYyNzAwNDUyM1owLzEtMCsGA1UEAxMk
ZjkxNGFjMWEtYjAxNy00Y2Y0LTljM2QtMzQ5ZGQxOTAwMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH+NyZlmsFCoaV8jeeOVJ0tdKaEBC9eY3pZ7
LrN+bTV+q684PCztyaUH+fzZ3oWM6UgeIoyixPdwN5Gbe070CUlj/44WY2xV6Ujx
ITPi6kHD9+l8XucN4C6xmdsWajpGnEoVGpB4B1PfwlDZqaBLX2h/fGjbb66FGwWm
RdRpL3hyvHhPt+tUxpMcoZrZYFLDDTdvxcFaKWGbUCycZlTsV+Nsolq9nTDPlWCO
PblVF5Z30JRT+RCHpyeWbO1fV4QkSdiwrOJDnckBA2FeGvJ6qrP5jXCfTgwqJgZR
HEQPlfM4uru6dButp6vxHIdKyxAEf3sVZxjujtCazYTw4ieSrwIDAQABo4IEQDCC
BDwwHQYDVR0OBBYEFKfeFWCxy7pAa9rpTvTtsIE8UXwzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m
OTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5MDAwZDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05
YzNkLTM0OWRkMTkwMDBkMy9mOTE0YWMxYS1iMDE3LTRjZjQtOWMzZC0zNDlkZDE5
MDAwZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXgdQDBACCDFwDBALO3DAwDgQCAAIwCAMGACYC
94oAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAkINAgMGDqgCAwYgYzBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQAO3RbXFAmGnPfyleDvyTXkjKF9pnx5BAs0er8PB7NftPTdXmokwDeHD+zm3KhJ
0xmnEaTBi2M4x4oYVWR4YHMcGwwv/T1/Jvu7BdUhVJT9C6mRM9OBssZsAonUFzE0
0VNC72nkQAPglnlWAaGCA7hIpkaPDCzic3TQO31JFPFcFMCXvp53L0ahZLy0SgQm
THJ6e6CxcIXC0awJKUCS3oQBjWMfdVPpSWaDHtjCeK/koCKi9Ga6mVIeI4IU1ljU
yqAKx7eV7Cr73ZOZFn2TUutrOxpKzsNgIHhL18zknt2ZWD+UQQnqHZEhDbZIp7l1
3e/+HOGS2LfpXWXnfTjrj4zu
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:56:07 2026 by rpki-client