Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
File:                     b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer (raw, json)
Hash identifier:          44eb1QZ4mm7KnXPi/Te1S9ZQac8VECuZcac+raGr8OY=
Subject key identifier:   E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584EBF3A360EB144586C0FFF2860
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Aug 2026 12:45:12 +0000
Certificate not after:    Wed 08 Nov 2028 13:45:12 +0000
Subordinate resources:    AS: 40244
                          IP: 66.206.32.0/20
                          IP: 67.231.240.0/20
                          IP: 94.26.27.0/24
                          IP: 94.26.31.0/24
                          IP: 94.26.44.0/24
                          IP: 94.26.46.0/23
                          IP: 94.26.67.0/24
                          IP: 94.26.73.0/24
                          IP: 94.26.84.0/23
                          IP: 104.129.168.0/22
                          IP: 162.213.120.0/22
                          IP: 162.250.200.0/22
                          IP: 163.182.168.0/21
                          IP: 173.198.192.0/18
                          IP: 173.233.64.0/19
                          IP: 192.111.37.0/24
                          IP: 198.48.48.0/20
                          IP: 199.223.252.0/22
                          IP: 208.85.0.0/21
                          IP: 209.240.96.0/20
                          IP: 2604:7c00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:3a:36:0e:b1:44:58:6c:0f:ff:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  6 12:45:12 2026 GMT
            Not After : Nov  8 13:45:12 2028 GMT
        Subject: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:65:8d:69:c5:1b:46:2b:a9:58:9c:49:29:
                    1a:84:69:84:d9:a0:10:28:4a:a3:ee:09:0f:92:9e:
                    fb:a2:0e:b5:7b:84:bd:5a:50:41:8c:bd:e7:16:17:
                    f6:ef:a8:31:6d:12:e1:64:f2:aa:0d:f7:75:60:af:
                    3c:40:7a:e5:d2:1c:31:7f:1b:6f:ca:6b:ab:fc:e7:
                    41:ba:13:fe:2c:f1:cc:d0:d5:f4:58:b3:2b:cd:69:
                    06:5e:52:60:00:74:61:17:ce:31:b0:98:73:b6:b3:
                    ba:96:51:a5:70:be:63:d5:3e:d4:61:a5:25:66:cf:
                    73:01:13:7d:ba:10:f9:0e:bd:b4:a8:17:8b:5b:cf:
                    9f:5f:26:35:df:f3:88:07:1b:6b:28:16:ac:80:15:
                    f8:51:55:a6:05:21:17:e8:09:20:6e:80:60:b6:95:
                    d5:07:ff:cd:89:81:9c:51:1b:d9:bc:ec:91:86:e5:
                    e5:bf:95:1b:aa:33:00:24:bc:4c:94:3a:a9:9d:47:
                    dd:fa:15:d2:9e:11:93:d7:df:16:ee:39:cb:40:04:
                    00:de:08:9c:47:c9:87:31:dd:9a:82:4e:fb:8a:8e:
                    82:82:45:03:ec:35:f9:32:ac:01:bc:80:af:c6:21:
                    9b:48:06:89:b0:89:9b:36:c6:cd:e6:04:bc:98:e0:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.32.0/20
                  67.231.240.0/20
                  94.26.27.0/24
                  94.26.31.0/24
                  94.26.44.0/24
                  94.26.46.0/23
                  94.26.67.0/24
                  94.26.73.0/24
                  94.26.84.0/23
                  104.129.168.0/22
                  162.213.120.0/22
                  162.250.200.0/22
                  163.182.168.0/21
                  173.198.192.0/18
                  173.233.64.0/19
                  192.111.37.0/24
                  198.48.48.0/20
                  199.223.252.0/22
                  208.85.0.0/21
                  209.240.96.0/20
                IPv6:
                  2604:7c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40244

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:51:04:35:e0:7c:f9:98:e9:a6:bc:6b:32:0a:d5:d1:72:b2:
         e4:59:dd:65:de:15:8e:2b:c8:8e:ec:a7:a3:9c:08:15:bc:2c:
         96:ee:47:3c:a5:19:62:15:10:9c:0d:93:a0:25:c5:50:2c:5e:
         db:60:f4:51:b2:9f:c7:24:fd:26:66:01:c3:4e:6d:d3:25:74:
         15:e1:fb:ae:e3:1a:d1:67:58:02:96:53:57:b2:a2:87:28:71:
         c8:fc:ed:73:32:a0:db:4e:f6:48:7e:c0:82:2f:19:f9:25:a8:
         f0:65:d9:cd:35:f0:17:01:1c:7c:0d:44:51:14:0a:33:6b:0a:
         91:f0:e0:ee:f0:bc:5f:d0:96:74:59:81:c7:fd:ea:a5:5a:bd:
         ef:b8:22:a3:9a:ed:79:e4:80:0c:df:14:ce:ce:8e:5a:52:15:
         2f:f3:d7:cf:c8:6f:c4:d4:50:18:6e:f0:55:0e:43:1f:c3:49:
         8d:aa:cf:9d:3f:fa:17:19:f3:9f:55:4e:84:f8:79:66:b4:78:
         c3:bd:7f:6a:5c:73:a0:46:c5:0f:11:d2:58:b9:8b:04:f8:57:
         50:31:4f:57:e4:46:7c:b8:7a:a8:2d:6b:15:35:f0:49:37:c1:
         12:b1:11:b0:a8:c6:fe:ef:62:93:56:d9:e9:3a:dd:9d:5d:c1:
         da:77:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:41 2026 by rpki-client