Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
File:                     00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer (raw, json)
Hash identifier:          EvtoZQG0tqKvTCOaJkMTv5mpUuuL8tpI7xRQKFKGivM=
Subject key identifier:   F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584EE21FC3200D6AC5882722E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Aug 2026 00:45:12 +0000
Certificate not after:    Tue 21 Nov 2028 01:45:12 +0000
Subordinate resources:    AS: 16527
                          IP: 69.166.64.0/19
                          IP: 96.8.128.0/17
                          IP: 162.211.68.0/22
                          IP: 162.245.200.0/22
                          IP: 216.177.160.0/19
                          IP: 2604:2900::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:1f:c3:20:0d:6a:c5:88:27:22:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Aug 19 00:45:12 2026 GMT
            Not After : Nov 21 01:45:12 2028 GMT
        Subject: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:6a:5d:3f:3e:4e:b3:e3:25:55:40:85:92:
                    53:24:a6:b4:6b:2b:ff:b7:2d:b3:10:c1:c8:ef:16:
                    f9:45:a5:74:28:ac:36:d7:27:a8:a4:66:c8:bb:71:
                    4c:79:f1:b7:99:f5:1e:54:87:b3:27:7d:be:04:87:
                    01:78:64:72:6d:0e:af:46:ba:13:84:02:c3:85:00:
                    ab:c9:16:b4:41:3a:6e:97:7c:c8:34:6c:95:0c:04:
                    34:6c:ff:4e:0a:e4:1b:ba:3c:b9:55:6f:28:73:0a:
                    62:87:54:50:e8:97:3a:44:36:fe:66:6a:f5:3c:75:
                    d9:fd:18:61:43:31:a7:ef:c7:fd:ce:48:da:cc:9b:
                    6a:bb:1d:78:50:46:d7:d0:56:1c:a3:c6:a8:42:ec:
                    3c:f5:03:52:ef:5a:69:6b:58:7d:3c:c1:b7:86:5c:
                    99:a1:ab:74:7e:61:68:b6:66:cd:5b:59:8f:7f:8f:
                    11:32:85:88:41:4c:ae:4c:b6:0f:8c:c4:80:85:8d:
                    96:85:27:05:d4:c0:dd:2d:02:58:f1:e4:d0:83:b4:
                    7a:19:3b:11:83:5b:6b:61:e1:8c:b9:53:4b:90:e6:
                    05:b5:85:7d:91:4e:d5:4f:79:bd:e4:bf:7d:1b:86:
                    9a:1f:61:3c:1f:09:90:99:07:0b:a1:fd:6f:0c:ee:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.64.0/19
                  96.8.128.0/17
                  162.211.68.0/22
                  162.245.200.0/22
                  216.177.160.0/19
                IPv6:
                  2604:2900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16527

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:e1:80:bd:08:ae:7b:90:23:e1:49:5a:3c:10:51:ab:b5:
         fb:10:a9:ca:40:78:5b:73:7e:64:55:7c:e6:56:1d:d8:c5:89:
         03:27:99:cb:00:11:23:e1:1f:d0:12:1e:36:cd:52:89:59:a8:
         b0:77:43:d2:c1:1c:38:23:50:10:39:5c:a5:d5:a7:62:58:7a:
         a8:9d:40:44:38:b9:f4:30:07:58:4b:e3:19:ae:c4:a1:0e:25:
         50:de:d2:fc:0a:c4:43:7a:3e:99:68:64:44:58:ae:aa:51:77:
         e3:1b:03:fb:f1:11:c5:74:ce:87:48:d2:4b:aa:22:2a:59:a4:
         c1:ad:94:6d:fb:73:03:64:60:c6:c1:c7:a4:0b:08:b1:6d:eb:
         59:6f:e2:01:8d:68:b5:dc:81:95:99:4c:a4:61:d5:dd:07:5a:
         18:69:06:0e:65:04:8e:41:e5:70:e1:de:d6:d2:9b:1f:38:69:
         01:bb:ad:b6:fb:8b:df:be:09:69:07:b5:9b:fe:4f:f0:41:b7:
         df:8d:c0:49:44:8f:42:77:b1:e3:3b:bc:3f:44:d2:eb:3d:38:
         9f:43:ee:3d:9e:66:98:bb:1d:1b:9a:cd:9a:56:89:93:08:6d:
         65:55:92:d8:32:84:9e:4d:ba:4e:ca:5a:87:da:90:24:e4:0b:
         c5:47:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:46 2026 by rpki-client