Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
File:                     74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer (raw, json)
Hash identifier:          YinEOuEroHPbzGQzn0TaO+arbAlXDE8lgm526cX9XZg=
Subject key identifier:   D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584CB0128F3F655A77C5D7B6A880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Jan 2026 16:54:18 +0000
Certificate not after:    Sun 30 Jan 2028 07:40:29 +0000
Subordinate resources:    AS: 23506 -- 23507
                          IP: 2602:f704::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:12:8f:3f:65:5a:77:c5:d7:b6:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Jan 29 16:54:18 2026 GMT
            Not After : Jan 30 07:40:29 2028 GMT
        Subject: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:1d:85:47:fb:19:cb:84:89:9f:1f:bc:26:
                    82:ca:e5:2b:d8:d3:a4:52:19:7c:4a:70:a5:1a:86:
                    0b:37:4f:31:8a:ea:68:2e:1b:50:b6:df:88:43:54:
                    dc:ae:ac:db:82:a6:09:ae:f9:bd:88:ba:e5:79:db:
                    65:a1:60:06:fe:9b:84:88:da:d5:40:a4:c3:b9:19:
                    bd:b5:4c:65:32:3b:75:db:a5:ce:e9:23:a6:f8:f1:
                    fc:9d:5f:9f:f9:d6:b1:06:13:87:e9:03:06:d3:bd:
                    68:2f:81:ce:3f:e3:dd:88:23:58:26:4a:d1:31:4d:
                    e4:5a:61:d0:bc:03:7b:6e:dd:47:c8:3d:d1:05:f5:
                    87:38:89:bb:29:29:cd:a8:c6:5b:ba:0f:29:8b:d7:
                    dc:2e:16:82:77:9a:ee:4f:56:de:dd:8f:88:f6:8c:
                    7e:e2:2f:bf:a6:58:87:e6:67:d4:ab:64:56:75:eb:
                    da:9f:36:7c:a0:c6:e8:80:1f:d8:be:97:a2:07:8b:
                    78:d3:f6:cf:38:6d:cb:5e:cc:04:93:50:a3:c5:7c:
                    be:38:9a:fc:bf:5b:34:fb:70:bf:8c:f2:f3:4a:f7:
                    ea:33:cc:27:e8:6c:0a:3b:92:39:91:e2:17:bb:12:
                    8c:67:95:31:7b:eb:38:a9:55:25:36:a9:a9:1c:6c:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl

            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f704::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23506-23507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:76:0d:dd:75:cb:8b:9c:2b:59:88:a1:13:4a:92:1c:2d:53:
         d7:7a:f8:3d:28:fb:c1:f9:55:ce:1c:bc:b0:7a:e6:0b:35:d3:
         47:b6:4b:02:aa:2a:3f:63:ec:ab:c8:9b:01:a1:b6:d0:a9:ca:
         e3:d8:ae:65:60:b8:ef:9f:35:aa:f7:00:db:ba:46:19:be:60:
         10:85:da:14:5c:22:f7:0f:7d:1c:79:aa:4e:7f:ef:ed:7a:49:
         73:a9:a4:5f:d8:cb:a5:27:31:22:69:82:0f:6a:10:d9:0f:bd:
         48:a1:8a:89:75:6f:d6:69:c3:81:58:cb:20:68:a2:6e:23:df:
         e7:33:c3:51:cd:11:7a:5c:67:4f:eb:f7:3e:64:cd:fd:68:3a:
         0e:0b:b8:7f:69:43:82:8e:ce:45:a4:8a:06:62:82:86:9c:79:
         13:df:7d:9c:f8:84:b5:d0:de:2d:30:71:eb:8d:a9:9f:8d:6c:
         97:d5:61:41:80:cf:b9:61:a4:d6:25:e5:35:9d:34:2f:2c:a9:
         f8:73:48:ef:d2:49:56:da:48:42:14:63:b9:08:a9:65:9c:4f:
         0a:67:6a:d3:43:5d:ff:6c:03:a6:51:9a:3a:1e:ea:0a:4e:a6:
         93:d2:94:b6:ee:0c:54:6b:04:21:41:d4:db:c7:fa:7f:c4:4c:
         d5:fb:e0:59
-----BEGIN CERTIFICATE-----
MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEywEo8/ZVp3xde2qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDllZjFi
NGUyMB4XDTI2MDEyOTE2NTQxOFoXDTI4MDEzMDA3NDAyOVowLzEtMCsGA1UEAxMk
NzRjNWVhYTctNzhiYi00Y2NhLTgzNWEtMGRmODEyZmY3ZDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigsdhUf7GcuEiZ8fvCaCyuUr2NOkUhl8SnCl
GoYLN08xiupoLhtQtt+IQ1TcrqzbgqYJrvm9iLrledtloWAG/puEiNrVQKTDuRm9
tUxlMjt126XO6SOm+PH8nV+f+daxBhOH6QMG071oL4HOP+PdiCNYJkrRMU3kWmHQ
vAN7bt1HyD3RBfWHOIm7KSnNqMZbug8pi9fcLhaCd5ruT1be3Y+I9ox+4i+/pliH
5mfUq2RWdevanzZ8oMbogB/YvpeiB4t40/bPOG3LXswEk1CjxXy+OJr8v1s0+3C/
jPLzSvfqM8wn6GwKO5I5keIXuxKMZ5Uxe+s4qVUlNqmpHGz8GwIDAQABo4IEIjCC
BB4wHQYDVR0OBBYEFNJFylSD96rDNYkQssEUnlwuYdPTMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi83
NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJmZjdkODcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYt
MzdhNy00NTg4LWFiZWEtZTQ5MDllZjFiNGUyLzc0YzVlYWE3LTc4YmItNGNjYS04
MzVhLTBkZjgxMmZmN2Q4Ny83NGM1ZWFhNy03OGJiLTRjY2EtODM1YS0wZGY4MTJm
ZjdkODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2
ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWUwNmVhZi0zN2E3LTQ1
ODgtYWJlYS1lNDkwOWVmMWI0ZTIuY3JsMB8GA1UdIwQYMBaAFG+W/O41hwYWpaD5
uPTl5ZRdjXjkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1
ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQmAvcEADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
MAgCAlvSAgJb0zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBpdg3ddcuLnCtZiKETSpIcLVPXevg9KPvB+VXO
HLyweuYLNdNHtksCqio/Y+yryJsBobbQqcrj2K5lYLjvnzWq9wDbukYZvmAQhdoU
XCL3D30ceapOf+/teklzqaRf2MulJzEiaYIPahDZD71IoYqJdW/WacOBWMsgaKJu
I9/nM8NRzRF6XGdP6/c+ZM39aDoOC7h/aUOCjs5FpIoGYoKGnHkT332c+IS10N4t
MHHrjamfjWyX1WFBgM+5YaTWJeU1nTQvLKn4c0jv0klW2khCFGO5CKllnE8KZ2rT
Q13/bAOmUZo6HuoKTqaT0pS27gxUawQhQdTbx/p/xEzV++BZ
-----END CERTIFICATE-----
Generated at Thu Feb 26 19:57:55 2026 by rpki-client