Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515.cer
File:                     6147fef5-fde1-436c-a6b6-04ed80854515.cer (raw, json)
Hash identifier:          C3z3rTawGcwUb/Y8UjqdTjdM1aGpV6K1rD0TPYXunOI=
Subject key identifier:   A8:94:C0:2C:3B:56:3C:8B:DF:06:DE:82:81:21:48:5A:42:17:7A:89
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D7E94202AF434DEBA6164C180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6147fef5-fde1-436c-a6b6-04ed80854515.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Apr 2026 16:11:53 +0000
Certificate not after:    Sun 16 Jul 2028 16:11:53 +0000
Subordinate resources:    AS: 26123
                          IP: 23.152.164.0/24
                          IP: 76.76.6.0/23
                          IP: 199.59.236.0/22
                          IP: 208.81.192.0/21
                          IP: 2604:4b00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:94:20:2a:f4:34:de:ba:61:64:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Apr 13 16:11:53 2026 GMT
            Not After : Jul 16 16:11:53 2028 GMT
        Subject: CN=6147fef5-fde1-436c-a6b6-04ed80854515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:20:e7:90:ce:84:d6:b6:66:92:51:c3:1e:
                    62:c3:a7:cc:c4:a0:59:7e:f1:71:66:b9:57:97:fb:
                    67:d1:03:26:d1:d4:dd:80:b0:6d:4c:45:b1:7e:fe:
                    80:28:80:f4:e1:18:bd:da:a3:52:3e:bd:bf:75:9e:
                    cb:c0:27:1c:85:66:fb:1e:77:77:fe:e7:ba:54:1f:
                    bd:e4:5c:35:5d:4e:22:e9:43:74:2e:0d:cf:97:b7:
                    5e:4f:0f:fa:16:b9:8d:2b:73:40:04:46:ac:39:26:
                    10:9a:c6:81:7a:a9:ef:f7:2c:2d:24:69:83:cf:cc:
                    07:20:ea:cf:ba:4f:4d:ee:33:2f:16:2b:3a:16:61:
                    87:9e:27:a5:ba:a4:10:5e:94:01:7f:d7:c2:ae:51:
                    52:07:7f:21:1f:fc:5b:0f:17:e6:76:35:68:11:d9:
                    36:88:6f:8d:1b:1e:5e:54:23:a1:91:7d:f2:45:03:
                    10:8c:c9:06:82:a0:88:d0:46:72:1c:2f:16:41:1e:
                    19:b9:89:01:75:55:b9:82:66:9e:31:a4:53:83:6c:
                    57:db:44:26:16:eb:12:cb:da:d0:6e:57:8a:5e:60:
                    cb:98:14:a0:68:c4:f8:e3:50:18:15:82:4c:4e:ee:
                    9e:5a:71:63:3e:47:67:1a:af:9c:e7:f2:77:ea:9b:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:C0:2C:3B:56:3C:8B:DF:06:DE:82:81:21:48:5A:42:17:7A:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6147fef5-fde1-436c-a6b6-04ed80854515/6147fef5-fde1-436c-a6b6-04ed80854515.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.164.0/24
                  76.76.6.0/23
                  199.59.236.0/22
                  208.81.192.0/21
                IPv6:
                  2604:4b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26123

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:f8:17:d6:65:38:85:32:23:08:54:88:f7:a7:91:f7:d2:
         3a:df:cc:7d:d9:f0:0e:16:a3:ec:e5:70:e6:07:41:9d:ae:4e:
         7a:59:11:96:55:29:67:38:2a:c1:4b:0c:5e:41:38:3e:9e:5c:
         ff:6b:cd:4a:f7:6a:30:e6:22:c2:62:70:97:3a:f1:2d:1b:12:
         38:30:f8:d1:c8:96:f5:17:88:22:61:ba:76:03:21:91:a1:62:
         d0:03:36:9a:f3:e9:25:33:cd:df:0f:ff:ab:ca:fe:56:1f:53:
         59:98:13:b1:b0:3f:0f:d8:8d:7e:36:65:97:df:8a:03:5c:99:
         91:8e:f1:23:1e:af:89:bd:9f:a8:0a:af:f6:43:6c:77:87:c9:
         2a:51:3e:da:b6:4c:e8:e1:9f:72:c5:2c:03:a9:f5:36:89:5c:
         3e:66:56:33:38:df:17:e1:b5:d1:08:e6:37:f5:c2:a2:7d:e2:
         3a:45:7a:4b:62:fe:01:a4:a5:08:9b:eb:39:8a:3f:cc:3e:8d:
         4e:bf:8a:0d:38:64:76:cb:50:f2:75:8b:04:42:78:c0:7f:3a:
         f8:60:96:f5:16:f1:54:41:2a:94:59:08:da:54:42:ed:e5:ac:
         f8:87:3b:c3:c1:8b:79:75:4b:b5:41:c5:02:7a:55:39:67:e7:
         5d:30:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:12 2026 by rpki-client