Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2.cer
File:                     122e6c80-f523-4555-a85c-d2640af24cd2.cer (raw, json)
Hash identifier:          L2ZBR+YRmLmoZJ0GqIh0T1yCjyUwsCK2pGt9cG09Kvk=
Subject key identifier:   D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D0F317A8B9A94542E55B90900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Mar 2026 18:38:24 +0000
Certificate not after:    Tue 06 Jun 2028 17:38:24 +0000
Subordinate resources:    AS: 402256
                          IP: 2620:8:f080::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:31:7a:8b:9a:94:54:2e:55:b9:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Mar  4 18:38:24 2026 GMT
            Not After : Jun  6 17:38:24 2028 GMT
        Subject: CN=122e6c80-f523-4555-a85c-d2640af24cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:6a:01:89:0a:9f:69:65:ee:60:27:50:1a:
                    59:dd:95:c8:b7:37:6b:f1:b6:a6:a5:f9:bb:9b:a9:
                    43:ab:a4:af:c6:01:cd:d4:22:44:90:21:cb:50:7b:
                    5a:a1:8e:cd:2b:78:da:8e:e2:60:23:59:48:70:77:
                    d6:a1:12:e2:0b:f1:da:13:a6:8a:03:55:dc:48:ab:
                    73:6f:63:5b:ad:45:cc:eb:1f:d7:19:5c:e0:84:0d:
                    e5:5f:09:5b:71:45:f8:97:c9:2a:1e:60:04:30:66:
                    7a:aa:8c:eb:6c:00:66:1f:8c:e5:aa:d7:aa:ec:65:
                    4b:69:c0:ef:fe:40:49:8a:83:98:69:37:da:b1:9d:
                    16:a5:c4:d1:d2:87:88:13:43:f5:3a:a5:fa:be:89:
                    0e:55:f2:80:16:65:f7:d9:52:2c:50:55:17:fd:7f:
                    d9:8b:39:0c:8a:6e:e9:ef:f0:77:40:02:71:a5:0a:
                    ae:45:0f:e4:20:c2:f0:89:bd:04:10:9c:61:46:92:
                    b7:4e:0d:b8:f6:04:3b:78:5d:b1:a0:14:a1:77:32:
                    c5:8f:d4:76:ec:23:a5:ea:30:fb:2f:a0:5f:82:f7:
                    23:f5:41:d5:52:14:52:e3:ac:1f:76:29:4d:3d:c0:
                    6f:d8:17:2e:ef:15:1a:b9:05:50:c4:cd:47:2f:00:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5E:BB:B0:A3:77:4D:0D:80:69:B6:E4:CB:C5:D2:82:83:70:10:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/122e6c80-f523-4555-a85c-d2640af24cd2/122e6c80-f523-4555-a85c-d2640af24cd2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:f080::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  402256

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:22:91:cf:32:58:21:ee:a5:05:ef:ed:2f:0d:b6:77:1f:
         7a:d5:51:d9:93:9a:96:ca:59:15:0e:d3:1f:16:b2:d7:89:66:
         85:cb:82:c9:65:ab:77:e6:8f:5c:de:ca:72:fa:c7:7c:9a:e0:
         3b:88:d9:e9:59:df:e3:4f:1d:d4:35:d3:3b:f1:b2:38:d8:fc:
         37:c5:79:de:38:8c:9a:ab:95:13:8f:cf:61:d1:2c:66:90:90:
         e3:c8:70:d1:94:b6:29:2c:15:bc:33:2a:27:48:1d:91:bc:b7:
         00:74:15:23:c3:f4:f5:7c:58:05:be:43:40:27:57:f8:02:f2:
         d1:f2:a3:67:97:27:44:a1:86:d3:86:88:23:be:80:da:c2:b3:
         fa:82:ff:31:31:26:fc:43:33:0b:26:6c:aa:e5:79:04:ef:3a:
         33:fd:82:bc:00:04:6c:85:f2:3f:d9:32:97:f4:33:34:a7:8a:
         cb:f1:8d:ab:41:f2:7f:4d:21:d6:59:2b:e2:af:15:aa:1b:06:
         bf:47:44:3a:55:0a:f7:e6:04:6f:5b:07:0d:a0:7f:eb:25:1f:
         4e:89:90:8a:4f:6c:6b:06:a0:1a:9b:97:2d:cc:31:6d:f5:be:
         0c:e2:84:3f:57:01:ae:48:c5:bb:79:c8:ba:f3:bc:e3:bb:f2:
         ac:09:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:44:48 2026 by rpki-client