Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer
File:                     b51d7dfa-2f7b-45ed-856d-e64e586ecdea.cer (raw, json)
Hash identifier:          11hR/CvTNtTktvRebNCUByla1BsQb+QZOMgwzSsNe5k=
Subject key identifier:   60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer:       /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial:       010D0C9F4328584D5A16C7FDEB7595846F7AF380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Mar 2026 14:30:14 +0000
Certificate not after:    Mon 26 Jun 2028 13:40:57 +0000
Subordinate resources:    AS: 16788
                          IP: 64.250.32.0/20
                          IP: 130.51.172.0/22
                          IP: 153.76.96.0/20
                          IP: 2606:6b80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:16:c7:fd:eb:75:95:84:6f:7a:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
        Validity
            Not Before: Mar 31 14:30:14 2026 GMT
            Not After : Jun 26 13:40:57 2028 GMT
        Subject: CN=b51d7dfa-2f7b-45ed-856d-e64e586ecdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:9d:11:e9:2a:a8:5e:b1:d7:6d:5b:8c:49:
                    ca:31:45:cf:98:11:ff:7c:d5:ab:8c:17:18:b2:db:
                    19:76:e2:4f:bd:c7:b4:45:bf:15:6b:34:3c:57:4f:
                    2c:af:68:9f:10:4b:55:97:07:1a:f2:77:fb:7e:e8:
                    35:a3:d6:42:83:aa:c1:83:b9:e2:80:40:60:2f:9d:
                    ab:28:43:b1:14:2d:41:58:2b:ae:91:8b:52:b4:1d:
                    20:51:bf:5e:73:93:78:a3:94:f1:8e:f9:65:52:e0:
                    b5:ee:6d:c0:5d:dc:7f:b3:c8:16:2f:65:43:49:27:
                    1c:26:4a:f1:e8:a1:9a:d4:d8:dc:10:5c:53:44:65:
                    3b:5b:58:19:1f:d4:77:64:4f:11:84:3a:45:26:a9:
                    f6:f9:b2:59:6f:22:ec:ad:fe:42:71:63:9b:78:07:
                    85:6d:f5:59:17:49:c3:d0:f5:cc:ee:c6:77:2c:c7:
                    2d:76:3c:75:5b:9d:32:96:89:64:e6:8f:7a:c3:e8:
                    bd:6d:c9:29:3a:03:cb:c9:a0:ff:e2:ea:83:db:0b:
                    55:0a:c3:24:7d:9b:0f:d4:f1:34:98:f6:ae:56:ea:
                    1f:89:62:1f:a2:34:16:0a:b0:9c:85:33:5f:36:3d:
                    b3:63:20:23:84:45:b3:bc:c7:32:1c:de:43:bf:78:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:E8:6C:D4:A1:E9:F4:6D:35:72:25:DF:85:39:75:3B:6F:39:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b51d7dfa-2f7b-45ed-856d-e64e586ecdea/b51d7dfa-2f7b-45ed-856d-e64e586ecdea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl

            X509v3 Authority Key Identifier:
                keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.32.0/20
                  130.51.172.0/22
                  153.76.96.0/20
                IPv6:
                  2606:6b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16788

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:50:e1:f9:bf:30:3b:88:c2:03:5c:e1:a4:59:c4:c4:cf:81:
         f8:fa:73:14:34:23:75:74:37:d7:af:c2:ac:40:f6:36:78:d1:
         97:e8:1a:4e:22:78:b4:75:53:16:8a:ad:f2:05:98:0e:12:9c:
         47:cf:a8:7d:df:60:7d:54:68:e8:47:f4:9d:a7:54:3b:97:e8:
         fe:a5:e5:e2:de:f4:e6:e5:ab:fc:19:56:3b:44:29:45:da:70:
         61:19:07:a0:3e:28:97:ab:e1:90:83:71:81:fc:c7:ff:ee:8f:
         5e:18:48:f2:75:b2:5b:4f:56:8f:73:4b:2d:eb:a9:f3:4a:21:
         29:27:5a:a7:44:e0:db:54:4f:1a:74:a7:fb:2f:0b:49:84:e3:
         ee:14:0e:b9:2c:50:db:75:76:b5:4b:e9:2c:4d:85:b0:1a:e0:
         1b:0c:18:f4:75:d0:ad:d5:8e:e4:d1:f9:d8:af:1e:8f:5e:5a:
         3b:b7:e3:a6:6b:16:66:a4:b9:d6:22:43:c5:da:33:ee:2e:0c:
         ba:83:fc:fd:5d:71:f1:30:a9:60:88:e9:27:07:e9:b4:b1:c8:
         69:4c:db:a3:10:dd:4a:7c:3f:73:02:7c:a0:23:58:c0:11:96:
         63:b1:d5:a1:e2:f5:61:91:19:c8:c8:8f:72:40:1c:33:26:c9:
         95:37:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:08 2026 by rpki-client