Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer
File:                     fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.cer (raw, json)
Hash identifier:          ayDXIejC9zOZvDIx5//oDUpucIxcbtLOB9Nj1mkQlP0=
Subject key identifier:   4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584E3E57A0D2D21038100822CD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Jun 2026 08:45:11 +0000
Certificate not after:    Sat 23 Sep 2028 08:45:11 +0000
Subordinate resources:    AS: 396425
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:57:a0:d2:d2:10:38:10:08:22:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 21 08:45:11 2026 GMT
            Not After : Sep 23 08:45:11 2028 GMT
        Subject: CN=fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:84:5f:56:09:0b:ee:b2:cf:85:dc:0a:d9:
                    c5:68:f4:3c:0c:43:28:38:3b:37:a7:24:4c:fa:36:
                    0d:eb:3d:0a:59:2d:30:0a:73:51:3c:6f:8a:b9:02:
                    57:8a:9d:f2:01:de:37:1d:48:f3:13:e6:dc:b0:2e:
                    8c:f0:6e:27:db:38:47:fd:dc:29:66:b3:44:7a:c6:
                    0a:91:e2:6d:81:6c:f2:b8:b7:5d:38:cc:8b:55:21:
                    9e:62:dd:9d:11:60:d8:ed:a9:a2:a1:c7:c8:d1:9f:
                    53:06:1c:84:5b:d0:95:73:76:94:22:5d:18:30:29:
                    1e:b0:bb:0e:c8:20:d7:3c:c5:68:b5:e0:8e:9b:97:
                    77:4d:44:71:bf:26:f5:c4:ae:df:d6:3b:92:5f:ea:
                    6f:b7:da:96:f8:f5:ac:41:26:a4:63:83:5b:34:75:
                    02:7c:cb:da:45:7b:e1:45:2d:7b:35:7c:f1:cc:81:
                    3a:95:13:d1:8d:25:16:6d:6a:c7:65:a5:f0:53:ac:
                    2e:2e:99:ed:ed:c1:79:35:5d:2c:fe:87:59:62:9e:
                    33:ff:36:df:4a:69:7b:9e:b8:59:09:2a:7c:df:01:
                    e1:37:b8:f4:dc:5c:f8:d5:2d:16:32:2e:22:4f:bd:
                    1b:97:b0:a2:0e:93:5c:f9:e6:f2:6d:97:b8:8a:bd:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1C:2C:D7:AC:8C:F9:15:BE:8D:9A:33:35:F8:8A:C5:4F:E6:5A:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7/fb5bdcb2-4792-445f-b7a6-75ccba8bb0c7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396425

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:c3:fb:9e:0d:00:86:6e:35:16:94:97:bc:96:c2:d2:93:
         86:58:02:e1:89:1d:1d:40:44:a7:f2:4c:27:c9:4e:ca:15:d7:
         a8:d7:a1:8c:94:dc:df:6f:7c:42:e5:69:2a:7a:cf:55:f5:5c:
         ae:57:b5:86:ba:8c:53:97:5a:68:54:be:6e:85:7b:87:4c:6e:
         3b:5a:4c:b8:af:e5:b5:e6:c4:33:ea:0c:f2:dc:14:d6:20:60:
         40:a4:86:9a:e3:4c:f0:12:40:d0:d5:da:96:4e:d6:75:f9:15:
         94:e4:ba:a7:c0:1e:4a:10:7c:27:06:1f:33:c7:8a:9e:37:e0:
         c6:f0:75:e4:e2:95:c1:1a:89:63:28:b6:fd:ac:80:bc:93:81:
         73:a4:60:e8:43:7a:cc:a0:26:5a:a4:27:17:8c:db:e2:18:43:
         43:ce:43:1d:65:29:3d:78:25:1d:b8:44:53:63:c4:08:b6:73:
         0d:6e:23:db:d7:d8:54:67:a3:c1:f2:6b:ed:f3:2e:d1:3e:c3:
         96:a7:e7:4e:1f:5f:a5:6b:bb:18:3f:3d:fd:a8:8e:4e:2c:10:
         63:8f:bd:cd:90:a7:79:9c:34:17:df:90:3f:98:8c:da:07:f9:
         78:61:b9:42:c8:59:2f:46:fd:2b:66:7c:e8:76:74:6f:7f:07:
         7e:f2:b3:4b
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE4+V6DS0hA4EAgizQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI2MDYyMTA4NDUxMVoXDTI4MDkyMzA4NDUxMVowLzEtMCsGA1UEAxMk
ZmI1YmRjYjItNDc5Mi00NDVmLWI3YTYtNzVjY2JhOGJiMGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB2EX1YJC+6yz4XcCtnFaPQ8DEMoODs3pyRM
+jYN6z0KWS0wCnNRPG+KuQJXip3yAd43HUjzE+bcsC6M8G4n2zhH/dwpZrNEesYK
keJtgWzyuLddOMyLVSGeYt2dEWDY7amiocfI0Z9TBhyEW9CVc3aUIl0YMCkesLsO
yCDXPMVoteCOm5d3TURxvyb1xK7f1juSX+pvt9qW+PWsQSakY4NbNHUCfMvaRXvh
RS17NXzxzIE6lRPRjSUWbWrHZaXwU6wuLpnt7cF5NV0s/odZYp4z/zbfSml7nrhZ
CSp83wHhN7j03Fz41S0WMi4iT70bl7CiDpNc+ebybZe4ir1z1QIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFEocLNesjPkVvo2aMzX4isVP5lp4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m
YjViZGNiMi00NzkyLTQ0NWYtYjdhNi03NWNjYmE4YmIwYzcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ZiNWJkY2IyLTQ3OTItNDQ1Zi1i
N2E2LTc1Y2NiYThiYjBjNy9mYjViZGNiMi00NzkyLTQ0NWYtYjdhNi03NWNjYmE4
YmIwYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgyJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJqlw/ueDQCGbjUWlJe8lsLSk4ZY
AuGJHR1ARKfyTCfJTsoV16jXoYyU3N9vfELlaSp6z1X1XK5XtYa6jFOXWmhUvm6F
e4dMbjtaTLiv5bXmxDPqDPLcFNYgYECkhprjTPASQNDV2pZO1nX5FZTkuqfAHkoQ
fCcGHzPHip434MbwdeTilcEaiWMotv2sgLyTgXOkYOhDesygJlqkJxeM2+IYQ0PO
Qx1lKT14JR24RFNjxAi2cw1uI9vX2FRno8Hya+3zLtE+w5an504fX6Vruxg/Pf2o
jk4sEGOPvc2Qp3mcNBffkD+YjNoH+XhhuULIWS9G/StmfOh2dG9/B37ys0s=
-----END CERTIFICATE-----
Generated at Mon Jun 22 20:40:05 2026 by rpki-client