Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer
File:                     ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd.cer (raw, json)
Hash identifier:          4N0POLfcLtRWcihdUK2oThodmW+AjcIjl84AVS/flm4=
Subject key identifier:   C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
Authority key identifier: B6:B7:A9:D1:81:B4:F0:1F:F1:5E:02:8F:C8:58:1F:D7:B2:21:D2:B5
Certificate issuer:       /CN=26d1481e-4825-43d7-9d68-440e85e92eed
Certificate serial:       010D0C9F4328584F5BF7C5633E6BFFCC36F59580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 01 Oct 2026 16:13:14 +0000
Certificate not after:    Wed 03 Jan 2029 17:13:14 +0000
Subordinate resources:    AS: 13317
                          AS: 393855
                          IP: 23.148.156.0/24
                          IP: 205.207.248.0/22
                          IP: 2602:f50d::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:f7:c5:63:3e:6b:ff:cc:36:f5:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d1481e-4825-43d7-9d68-440e85e92eed
        Validity
            Not Before: Oct  1 16:13:14 2026 GMT
            Not After : Jan  3 17:13:14 2029 GMT
        Subject: CN=ddc28877686807dcc34a0ae5743d30fad3adfac8b055e6d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:81:7d:b9:7f:db:d3:c1:18:72:7e:91:07:
                    09:57:bf:e6:2f:b7:e7:d7:5e:4d:43:8a:da:5e:d8:
                    34:5b:a1:2f:10:78:4b:83:ae:d1:14:71:46:44:03:
                    77:78:00:8e:78:a8:6a:65:89:bd:78:ea:99:16:a7:
                    16:61:66:6e:5a:14:1a:8d:85:c5:c5:84:ea:6f:79:
                    24:cf:e8:0a:88:a3:69:32:93:47:f4:e8:49:cb:d6:
                    40:b4:d5:22:e1:fc:6a:32:3d:e8:f6:41:8c:95:aa:
                    8f:ed:2e:dc:16:5f:37:8a:6b:f4:7d:56:75:81:88:
                    af:1b:c4:be:d0:5c:98:ba:fd:0e:aa:e9:6d:f1:46:
                    f7:2a:c9:b1:7f:29:31:0b:bd:bc:05:10:28:16:24:
                    bf:eb:9e:8d:c6:85:c2:d4:33:1f:cd:33:89:17:92:
                    79:d2:6a:8a:d0:ab:9d:8c:78:b2:2a:06:0a:9c:de:
                    03:ef:b9:56:55:ee:f0:cb:ba:c9:d0:6c:51:d0:eb:
                    80:20:36:65:7d:44:25:d3:b8:3b:ab:54:b3:3e:d7:
                    aa:c1:9c:03:b9:0c:fe:d4:74:a2:a4:e6:67:0f:03:
                    3a:9f:aa:cd:84:f8:b3:a5:54:db:cd:81:f7:a2:dd:
                    eb:61:a2:08:6a:92:d7:c1:99:d2:b1:a8:fa:cc:a0:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:12:F9:4A:FC:5E:89:00:CD:D8:B9:E7:50:8E:96:A8:65:F9:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/1/C9A112F94AFC5E8900CDD8B9E7508E96A865F90D.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed/26d1481e-4825-43d7-9d68-440e85e92eed.crl

            X509v3 Authority Key Identifier:
                keyid:B6:B7:A9:D1:81:B4:F0:1F:F1:5E:02:8F:C8:58:1F:D7:B2:21:D2:B5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/26d1481e-4825-43d7-9d68-440e85e92eed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.156.0/24
                  205.207.248.0/22
                IPv6:
                  2602:f50d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13317
                  393855

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:37:8f:a2:fa:26:35:b0:38:6a:68:9d:a9:74:e0:98:15:
         34:cb:f6:a1:ba:34:6c:83:47:56:4a:d2:a9:1e:c4:17:fa:26:
         5c:0c:48:61:61:36:af:b1:cf:11:55:f2:31:34:18:a7:0e:01:
         2f:24:8e:fd:e2:d7:88:1b:ba:05:ec:30:86:46:3e:4b:e0:f9:
         85:22:24:d6:47:d7:45:6d:20:f2:d1:cf:5c:1a:84:49:4f:de:
         39:84:bf:b9:dd:62:eb:4f:b7:c4:ad:21:7c:97:4a:d4:25:86:
         8b:1f:05:f9:42:eb:5e:f5:8a:6c:48:18:7a:0d:f4:29:d1:f0:
         9b:74:78:8b:4c:12:7a:59:31:96:35:d7:74:4e:59:08:63:88:
         fa:95:7c:b9:70:0b:96:81:4e:f7:e2:1e:ee:ff:35:02:ef:d5:
         01:ec:32:de:ac:e0:07:09:43:1a:ca:ee:46:66:11:64:16:b5:
         ca:83:3b:3d:c7:8c:9a:46:50:96:6f:1b:67:53:a3:72:eb:8d:
         78:dc:86:2a:a1:aa:0d:92:7f:4c:24:67:1a:ce:b8:d5:48:e5:
         95:49:7c:42:62:63:12:7e:4f:5e:b0:af:ba:d7:9e:09:a7:86:
         0d:37:ad:9a:a5:2b:16:95:7c:5f:4c:6c:40:8b:d1:cc:bd:9a:
         67:02:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:09:35 2026 by rpki-client