Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668.cer
File:                     b22497e5-0c43-47f7-b5bb-766cb0487668.cer (raw, json)
Hash identifier:          sV6t+n63Nn019DqsCHMz/hpoaYP0NJr1xptrOQVFjcY=
Subject key identifier:   76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584DE5DCA7DB1C7DBB4A47538A60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 May 2026 16:06:17 +0000
Certificate not after:    Mon 01 May 2028 15:06:01 +0000
Subordinate resources:    AS: 22460
                          IP: 165.197.0.0 -- 165.198.255.255
                          IP: 169.225.0.0/16
                          IP: 198.185.213.0 -- 198.185.216.255
                          IP: 204.136.64.0/18
                          IP: 2606:5740::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:dc:a7:db:1c:7d:bb:4a:47:53:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: May 20 16:06:17 2026 GMT
            Not After : May  1 15:06:01 2028 GMT
        Subject: CN=b22497e5-0c43-47f7-b5bb-766cb0487668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:14:0e:ed:9a:3e:62:d4:d1:cb:f8:f9:81:
                    d6:e3:44:42:50:23:bf:97:77:78:c7:39:e3:a2:2a:
                    3b:f5:76:57:90:95:d6:68:c6:ce:e4:c1:61:5a:c4:
                    8c:73:49:16:30:2e:b8:ca:7d:57:62:b1:cd:f2:02:
                    f6:94:2d:f2:f8:57:68:d2:b1:df:e0:47:8f:57:91:
                    3f:d4:db:e8:5a:e2:35:2d:e5:56:23:5b:b3:76:07:
                    e9:34:a0:e7:0d:57:62:30:17:ae:2b:28:c8:33:0a:
                    91:1d:7b:c9:a2:e6:7c:c6:79:86:d6:72:c9:96:46:
                    0a:52:46:0b:bc:8c:63:b9:82:ed:cc:8a:78:45:7f:
                    fb:05:d2:a3:bb:5c:76:ba:17:d0:1e:29:ec:44:e8:
                    06:f4:fa:c1:9d:fd:2d:52:11:30:fc:59:8a:f4:20:
                    4c:fa:e2:49:ec:f0:e2:47:ae:f0:3e:8e:c8:14:c2:
                    97:d0:b9:ae:29:09:29:f0:57:fb:25:90:fb:7e:ee:
                    f8:b1:5e:48:cb:3f:58:14:cc:41:3e:62:09:ab:d1:
                    96:c1:a0:70:70:e1:80:27:da:d0:85:2e:4a:5e:ac:
                    6a:79:33:07:ee:48:6d:ca:92:6a:54:06:cc:6a:1a:
                    fe:c8:14:c9:b9:18:6e:c7:4a:0e:fe:f6:e8:2a:22:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:F4:E0:05:3C:FE:79:05:15:A5:0D:4F:31:A0:A4:58:34:99:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b22497e5-0c43-47f7-b5bb-766cb0487668/b22497e5-0c43-47f7-b5bb-766cb0487668.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.197.0.0-165.198.255.255
                  169.225.0.0/16
                  198.185.213.0-198.185.216.255
                  204.136.64.0/18
                IPv6:
                  2606:5740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22460

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:20:87:99:1e:af:48:60:b0:57:71:cd:f9:cc:b9:72:f6:a5:
         46:62:ab:09:77:8a:f3:76:e3:f7:7c:13:56:52:fb:4b:1e:0e:
         85:da:e8:04:36:d7:bf:31:c1:69:eb:50:f2:ce:18:12:96:cb:
         54:ce:4e:ce:c2:26:7e:d1:94:2b:8d:bf:7d:8c:d9:56:e2:3e:
         c5:c4:17:7f:87:93:06:d4:86:ed:5d:8a:0c:92:26:94:0f:c9:
         5b:fa:04:63:f4:e4:e2:38:8f:f8:af:8a:3b:dc:82:03:66:ad:
         89:c1:ac:f4:ae:ee:14:4e:22:91:40:d9:07:8e:2d:5a:d0:40:
         bd:c9:3d:7a:79:fc:bf:72:6c:21:09:6d:99:2d:f1:01:be:fd:
         4f:70:02:c7:de:31:70:32:d8:96:e7:33:92:75:bb:21:9a:09:
         36:0e:e2:56:38:75:89:1e:f8:98:35:95:03:c3:53:c0:a0:fd:
         ca:42:4b:c5:7c:94:8a:b3:39:59:25:3b:38:2c:5b:71:bf:56:
         b4:0e:23:d6:80:26:80:ed:02:9a:48:cc:da:47:cd:08:11:a0:
         57:1d:82:4f:ee:bf:ae:92:db:91:d2:64:4f:a3:ba:a1:93:08:
         cb:c9:4a:da:60:e5:65:c4:96:90:c5:41:90:06:4a:18:4e:a1:
         49:7a:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 21:46:24 2026 by rpki-client