Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/567e5449-34ec-4dd1-b940-b2050a537fec.cer
File:                     567e5449-34ec-4dd1-b940-b2050a537fec.cer (raw, json)
Hash identifier:          x3apYSDs5gddbILIYDmxGJKKY3m1LJTL/i7J6djIj20=
Subject key identifier:   8D:42:20:6D:60:5F:49:2E:E5:7C:8C:43:1A:07:AA:C0:DF:28:1E:CD
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D5D7A5B0210A5AC987CCBB680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/567e5449-34ec-4dd1-b940-b2050a537fec/567e5449-34ec-4dd1-b940-b2050a537fec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/567e5449-34ec-4dd1-b940-b2050a537fec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 Apr 2026 19:38:17 +0000
Certificate not after:    Tue 04 Jul 2028 19:38:17 +0000
Subordinate resources:    AS: 393582
                          IP: 23.170.160.0 -- 23.170.165.255
                          IP: 104.193.160.0/21
                          IP: 2606:ac80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:7a:5b:02:10:a5:ac:98:7c:cb:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr  1 19:38:17 2026 GMT
            Not After : Jul  4 19:38:17 2028 GMT
        Subject: CN=567e5449-34ec-4dd1-b940-b2050a537fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:d2:5b:94:da:b5:15:ec:89:58:cb:93:99:
                    1a:ed:eb:ee:01:9c:90:a9:d5:01:d2:db:08:73:4b:
                    93:98:81:c6:0c:62:34:54:a0:6e:37:ed:0c:14:a8:
                    96:69:52:65:e6:14:01:0f:97:1b:73:28:b7:89:64:
                    db:46:02:ae:c7:b5:0c:fc:f0:8a:54:05:7c:2c:b2:
                    dc:c0:28:8a:34:90:ec:50:bb:a9:d2:17:03:d1:74:
                    50:dc:5e:5b:2d:9d:13:bd:89:08:a5:57:f4:f0:3e:
                    5f:87:0d:ed:05:40:73:eb:98:f6:c0:24:6a:ee:b9:
                    44:de:ef:44:00:84:e3:d9:de:1f:73:11:a6:06:b9:
                    3d:1e:fe:e3:71:ae:36:37:c9:38:09:5a:f1:77:f0:
                    2e:27:1f:54:82:65:d8:b1:7d:12:2c:ce:ff:a1:47:
                    be:15:ff:13:bb:f6:de:a1:d3:d7:c2:6b:b7:33:35:
                    06:bf:65:10:75:1f:01:97:8b:f5:87:b4:a8:ab:d6:
                    84:02:e4:52:27:6e:fe:ed:90:88:38:25:85:cf:45:
                    66:68:6e:04:85:65:ac:38:9d:f4:11:95:46:f6:2e:
                    74:dd:34:7d:87:fb:bf:b6:c9:bc:08:6a:a8:a5:ad:
                    31:2d:5e:c9:24:20:3f:9c:f8:54:14:80:63:69:2c:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:42:20:6D:60:5F:49:2E:E5:7C:8C:43:1A:07:AA:C0:DF:28:1E:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/567e5449-34ec-4dd1-b940-b2050a537fec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/567e5449-34ec-4dd1-b940-b2050a537fec/567e5449-34ec-4dd1-b940-b2050a537fec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.160.0-23.170.165.255
                  104.193.160.0/21
                IPv6:
                  2606:ac80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393582

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:93:22:2b:64:b9:df:0b:de:a6:86:a2:d0:da:3d:5c:4a:
         26:f1:6b:9a:31:6a:5b:2d:c9:42:6b:57:a5:f5:bd:cb:a1:ed:
         03:ce:96:ec:3b:02:97:72:e6:fa:e7:d3:fd:b2:46:30:fd:6e:
         9e:a2:a7:b7:c3:0f:5d:7b:9e:de:87:99:b4:c3:ec:6b:96:da:
         ad:ab:7c:4f:db:36:f5:b6:88:3c:b8:bc:40:36:4b:b0:5d:70:
         a2:62:63:98:cc:69:4a:6a:61:0f:cb:67:eb:60:19:9f:af:55:
         20:8e:89:e9:33:9a:62:2d:8d:00:5b:5c:4a:f1:a4:5f:a6:90:
         bd:4d:8d:b6:6c:77:59:ed:1a:5f:cc:ca:67:b4:f1:8a:d8:02:
         a8:8a:32:54:9a:ba:20:9d:81:d1:bd:ea:0b:69:13:cf:44:37:
         50:a1:27:3a:55:38:55:b8:64:4a:e6:53:47:19:35:f7:d8:86:
         99:16:b4:b4:23:6d:7d:73:75:94:ea:aa:88:de:5d:cb:c7:85:
         a6:fa:98:ad:e0:1f:77:35:f8:29:bd:9d:31:5a:65:5b:c3:21:
         f4:84:04:d7:e7:45:d4:b3:85:54:7c:0b:db:e5:d1:70:6f:ea:
         0b:80:83:49:33:64:5f:9b:2d:de:1b:30:3c:2a:ac:04:e4:06:
         f3:65:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:23 2026 by rpki-client