Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer
File:                     bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer (raw, json)
Hash identifier:          2so02oUI+4pa74DyMfu/8eMkl/fKVW7wR/ulKew32vI=
Subject key identifier:   A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584F15C56ADB4799415197FF9580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Sep 2026 12:45:12 +0000
Certificate not after:    Sat 09 Dec 2028 13:45:12 +0000
Subordinate resources:    AS: 393437
                          IP: 23.186.64.0/24
                          IP: 2600:b400::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:c5:6a:db:47:99:41:51:97:ff:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep  6 12:45:12 2026 GMT
            Not After : Dec  9 13:45:12 2028 GMT
        Subject: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:69:56:1d:d8:61:de:c6:a8:3d:91:c5:a7:
                    cf:02:6a:48:46:8e:f2:bc:9c:c4:33:51:37:83:02:
                    77:a2:33:37:6e:e2:e5:dd:6d:2b:28:c6:16:4d:21:
                    0a:cb:9d:e8:47:d0:1b:02:5d:ca:80:47:22:75:52:
                    69:d4:47:ed:f9:e7:76:bc:ea:dc:2e:39:e5:a0:ca:
                    b7:bd:fc:9d:29:ec:23:06:aa:37:ac:de:d2:bc:10:
                    3d:a7:da:40:6d:47:fa:9f:94:d7:a6:80:88:c7:39:
                    e6:76:b5:56:25:e9:c1:c8:27:6f:63:a2:d6:bb:3d:
                    1a:86:ed:71:29:79:e0:7d:7d:2e:fc:d0:0e:8a:2d:
                    57:b7:5d:5c:5c:62:45:f3:e1:de:18:c6:5b:72:18:
                    62:25:0c:aa:59:22:ed:54:c5:9f:75:01:0f:3d:ef:
                    12:2c:d7:d3:b7:71:d1:13:15:a6:73:5c:20:7d:32:
                    fe:a9:6e:18:9a:62:3a:c1:d2:7c:69:c1:0f:c0:47:
                    bb:2c:17:7c:91:64:17:96:43:c3:aa:7c:88:f2:ce:
                    fb:fa:66:d6:dd:73:7b:bc:e5:8d:2b:d6:18:51:b7:
                    19:67:84:df:f4:62:d3:e3:c0:af:49:6f:0c:92:a8:
                    1d:a3:77:7f:3a:b0:ef:8f:15:61:c6:0f:11:1f:dc:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.64.0/24
                IPv6:
                  2600:b400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393437

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:28:fa:2e:87:2a:9a:f4:26:f1:eb:07:11:a0:6a:25:bb:6d:
         c5:0d:28:eb:e1:3f:c8:e6:de:17:53:cf:2c:a5:26:b8:a0:ee:
         f1:85:5f:3b:a1:24:fc:b6:72:8d:49:b3:a0:3d:5a:69:66:45:
         ac:1c:26:80:87:e9:53:87:50:f9:0d:ae:be:40:57:21:63:03:
         0f:d6:95:ac:1e:60:e5:ba:17:52:11:94:43:60:04:21:73:9b:
         12:32:db:a2:c4:59:b2:9d:4e:62:8d:18:02:c7:7f:de:e4:47:
         6e:c7:d1:fe:3f:b5:d6:27:82:e1:07:98:fa:df:c8:27:7e:7b:
         0c:da:f8:37:d5:01:3f:07:64:6c:58:59:f3:e5:d1:ad:bf:0f:
         df:10:2d:34:5b:80:05:f0:db:2e:4f:72:e8:a2:73:19:88:e4:
         6b:96:85:24:e6:1b:8d:e9:7d:5c:15:ec:31:db:0f:f7:0e:18:
         90:3a:e5:f9:e9:26:00:f8:19:71:b2:d9:a6:99:7d:60:6b:b9:
         4c:8f:40:4c:c1:f0:5e:34:8a:c7:c5:ee:22:c9:77:c1:31:13:
         c5:de:db:19:a6:d7:b7:bb:ad:9f:58:4e:ee:7e:30:8a:e7:78:
         b3:3a:9f:cc:08:21:41:ca:5b:f3:7a:be:f2:3e:5d:af:a3:88:
         8f:6e:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:19:47 2026 by rpki-client