Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
File:                     df45c214-cd13-454c-ac2d-2978c76c6f7f.cer (raw, json)
Hash identifier:          uOXRJyULtOj/yYPoxbM8/QU/WOBDgqMOqglBx37sg8o=
Subject key identifier:   D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584DFB5734A68FF893198BB28380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 May 2026 08:45:11 +0000
Certificate not after:    Wed 30 Aug 2028 08:45:11 +0000
Subordinate resources:    AS: 46355
                          IP: 23.135.36.0/24
                          IP: 2602:f6db::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:57:34:a6:8f:f8:93:19:8b:b2:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: May 28 08:45:11 2026 GMT
            Not After : Aug 30 08:45:11 2028 GMT
        Subject: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:52:e5:88:da:76:68:31:b9:a0:86:47:44:
                    51:83:a5:d3:21:e3:df:74:8a:f1:8c:83:d5:0d:c6:
                    51:9a:78:78:88:2d:55:7d:7c:c7:e8:ea:ac:a0:2b:
                    43:43:c5:9c:15:ab:5b:96:25:a7:ec:54:3a:e6:a9:
                    9b:16:db:96:5e:57:ed:1f:ac:0f:1c:f4:59:7b:3c:
                    0a:5f:8f:e1:a6:a3:70:20:af:a9:12:b6:9f:83:7b:
                    94:36:51:de:00:3a:f8:2e:d5:11:fb:16:ba:ca:68:
                    4b:5d:d1:fd:a6:89:77:af:3a:aa:64:41:f2:09:a4:
                    a9:88:c7:29:24:9d:2d:cb:50:1b:12:68:fc:58:1d:
                    6e:82:27:38:f4:9a:40:e1:eb:8b:d0:1f:78:8b:6b:
                    01:55:3b:fc:ca:ec:63:08:39:e8:84:db:3b:fe:8e:
                    58:5c:06:2f:b3:22:4d:5a:85:d3:1a:63:b1:a5:02:
                    b7:37:21:10:2f:77:12:f7:85:19:1d:cd:ec:cc:38:
                    e7:14:ac:ca:d0:c3:d3:3e:63:6f:85:31:c0:bb:50:
                    f3:1b:ce:77:f4:02:2b:35:00:41:bf:33:91:29:74:
                    06:66:bb:f4:42:c7:24:b1:a3:c5:65:15:aa:0c:4a:
                    e1:44:48:f6:95:0b:ac:f4:da:06:de:96:e5:1c:fe:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.36.0/24
                IPv6:
                  2602:f6db::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46355

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:3b:91:d8:89:f3:fd:62:f7:1d:7e:08:2d:25:13:d5:50:
         31:7f:c3:33:2a:c8:99:8e:e5:e0:96:41:6d:39:56:b8:6a:fa:
         f7:15:c0:66:65:3c:56:7f:ea:e6:6f:a9:23:c5:db:2a:06:e8:
         40:ba:b4:e3:5c:b4:bf:2e:23:9e:b3:cd:d2:99:28:9a:b6:22:
         02:44:5d:24:56:31:fc:b7:38:29:92:bb:3d:04:9e:65:d1:b6:
         0a:19:b7:a6:4e:50:0c:9b:90:e7:b9:76:94:6e:4c:c1:02:21:
         14:57:2a:4d:db:c7:5c:c8:db:44:dd:26:a7:ed:60:a1:71:0c:
         6c:97:0b:d2:ce:68:45:99:d0:78:58:54:86:e7:68:eb:a6:b5:
         8e:49:96:c7:66:ab:fb:ea:3d:ae:72:d9:a0:a5:16:77:02:93:
         8f:8a:b7:57:83:aa:55:43:07:e0:99:93:80:e6:6a:9b:fc:73:
         fb:f7:5b:9e:a8:2f:ef:c5:e2:10:49:75:8e:8a:3c:40:f8:ef:
         b5:c4:cf:d6:c6:6d:79:05:a8:ce:04:58:ea:ef:c3:69:08:4f:
         e6:07:f2:b2:92:ec:a8:83:a4:4c:7f:5e:2d:c8:a6:b2:67:a2:
         5a:42:1d:97:12:c0:50:b0:e2:fb:55:f5:38:c9:79:ce:6b:c5:
         75:07:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 19:43:08 2026 by rpki-client