Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer
File:                     14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer (raw, json)
Hash identifier:          bdgP0aPX2RN8HbF5oBcZ+MclEg/LtcsZYRU3v/QnENw=
Subject key identifier:   FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584CC6CA49B831BAEC4FF916B740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 06 Feb 2026 20:12:17 +0000
Certificate not after:    Tue 13 Jul 2027 00:45:34 +0000
Subordinate resources:    AS: 11368
                          AS: 12276
                          AS: 40271
                          AS: 63055
                          IP: 149.112.5.0/24
                          IP: 149.112.115.0/24
                          IP: 149.112.188.0/23
                          IP: 192.33.255.0/24
                          IP: 206.197.187.0/24
                          IP: 2001:504:30::/48
                          IP: 2620:8b:e000::/48
                          IP: 2620:11a:b000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:ca:49:b8:31:ba:ec:4f:f9:16:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb  6 20:12:17 2026 GMT
            Not After : Jul 13 00:45:34 2027 GMT
        Subject: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:77:cf:be:19:37:5b:29:4d:42:7e:e5:64:
                    bc:21:0a:74:8e:1a:be:a7:e2:66:d5:30:f9:c8:c9:
                    2a:74:cd:2a:92:13:3f:fa:8e:44:02:c5:c8:10:30:
                    84:ce:c0:46:6e:74:b6:52:20:18:44:59:0b:89:15:
                    3a:df:87:5a:4d:33:17:8f:27:e3:41:64:cc:76:11:
                    44:ff:37:dd:b7:fa:4b:a2:71:55:03:c3:ab:87:81:
                    d9:1e:88:a6:4f:76:f8:5d:59:96:50:ec:10:cd:e1:
                    82:a1:5f:ab:8e:97:4d:8d:e2:9e:d5:93:39:14:94:
                    6c:99:10:0e:b6:ea:ed:38:6f:77:c2:ec:a9:29:36:
                    2d:9f:13:b5:ce:12:b3:28:09:a9:9d:7a:3d:f7:01:
                    55:56:a2:0c:d4:6a:a7:e5:5d:10:4a:fd:c2:95:4d:
                    d9:f3:07:ed:ed:13:df:d8:66:ff:cf:a9:be:7e:60:
                    6d:71:01:a4:f1:d7:c3:11:88:4b:df:9f:0a:73:81:
                    c0:f1:54:7d:c8:62:ba:70:a5:94:d6:a6:cf:1b:ca:
                    3f:89:5e:68:88:88:36:1e:cb:d2:66:8b:70:ed:82:
                    00:96:c7:7d:ca:8d:b7:7f:d8:b6:3f:02:20:74:43:
                    d6:06:ac:a9:47:bf:b2:9a:e6:71:50:55:dc:f6:8c:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.5.0/24
                  149.112.115.0/24
                  149.112.188.0/23
                  192.33.255.0/24
                  206.197.187.0/24
                IPv6:
                  2001:504:30::/48
                  2620:8b:e000::/48
                  2620:11a:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11368
                  12276
                  40271
                  63055

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:40:11:ce:20:55:49:4c:b3:77:55:a4:8f:1d:30:14:f7:29:
         30:18:de:42:ff:ea:65:a0:3b:cd:35:2a:3e:bd:8e:56:2a:86:
         c0:23:2c:02:40:2e:0b:fa:90:0a:96:78:7b:aa:c6:23:8a:15:
         4e:a6:fc:47:bf:56:35:bb:08:dc:b6:f5:39:f1:44:81:88:43:
         0a:39:6f:d8:73:23:12:4f:91:32:3b:12:6d:ff:6d:81:17:0d:
         da:73:cc:6d:ea:eb:b7:a0:fe:bd:21:9f:46:23:e7:7e:8d:99:
         ea:a0:cb:8f:21:f3:b1:8f:d2:4c:4f:15:15:07:0c:f6:04:f7:
         a2:a8:14:dc:f0:67:54:ef:70:e5:4c:7a:fc:48:87:8f:eb:cc:
         6f:9d:62:15:71:fd:3f:2b:b6:6f:f2:83:91:75:d6:c7:8b:0f:
         f0:b9:2d:61:af:d1:71:8b:a3:a0:41:02:dd:f2:24:23:5e:f2:
         2c:7c:3e:d4:72:6b:83:d6:7d:e3:ef:4a:ec:1a:36:e5:12:2d:
         2d:78:4c:b7:47:cb:29:94:4d:eb:c3:8d:c5:2b:93:97:eb:65:
         2d:d6:c2:51:a7:d7:24:f0:d5:ea:4a:b8:e8:bf:26:e9:16:2e:
         34:16:04:b8:a8:ac:15:9c:35:d2:14:6a:af:e2:ab:ed:eb:a1:
         35:7e:7c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:26:35 2026 by rpki-client