Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
File:                     e4877b41-a7e3-491a-a87e-56a8cf46d169.cer (raw, json)
Hash identifier:          lUBgXge2GzsZRSgZTes+ejIbqRuVahxDnI/utdNwrk4=
Subject key identifier:   79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584FB504316230233D9CA429C080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Nov 2026 13:45:12 +0000
Certificate not after:    Sun 04 Feb 2029 13:45:12 +0000
Subordinate resources:    AS: 26269
                          IP: 160.223.176.0/22
                          IP: 162.216.232.0/22
                          IP: 173.45.176.0/20
                          IP: 198.135.144.0/21
                          IP: 199.58.144.0/22
                          IP: 199.241.220.0/22
                          IP: 2602:ff89::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b5:04:31:62:30:23:3d:9c:a4:29:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov  2 13:45:12 2026 GMT
            Not After : Feb  4 13:45:12 2029 GMT
        Subject: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:96:bf:61:63:f7:69:e5:10:1f:8e:7c:e6:
                    80:44:26:9b:e6:63:3c:3b:17:17:0b:4e:bd:f3:90:
                    39:e0:30:23:3f:51:57:02:87:e3:aa:cf:93:dd:27:
                    c5:1b:66:d5:6f:fe:69:6b:57:80:ba:0c:15:10:9c:
                    66:5f:f8:37:d4:83:6d:a5:09:f9:b6:46:9b:b6:fe:
                    92:e4:49:d9:01:6f:72:a9:37:c1:ba:59:10:a8:55:
                    f7:72:42:2c:83:05:07:10:5c:0f:de:c3:24:c2:4d:
                    03:ac:4a:08:83:6f:a6:2c:ac:f9:79:05:0f:27:5f:
                    30:c2:28:88:da:06:cc:0d:22:eb:e5:88:66:07:d2:
                    7b:c8:f1:0f:a3:e5:c0:53:a4:d9:ca:62:a9:31:1e:
                    c5:cf:2f:75:86:66:ac:09:2f:30:a9:f0:f5:e8:70:
                    5c:ba:16:37:97:6b:7e:c7:ce:fd:ad:60:cc:73:e2:
                    81:49:e3:89:29:2d:c3:78:f9:67:48:08:fb:ca:22:
                    ff:b6:c7:0b:14:6a:d0:ce:fb:e8:e4:c6:37:e3:97:
                    2d:dc:1f:bf:10:d5:8d:0b:19:b5:ac:9e:15:a9:8f:
                    96:9c:83:44:a9:2c:77:ce:eb:ce:69:12:11:52:be:
                    61:5b:96:ca:88:66:65:fc:08:be:5e:e3:43:d7:cf:
                    7a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.176.0/22
                  162.216.232.0/22
                  173.45.176.0/20
                  198.135.144.0/21
                  199.58.144.0/22
                  199.241.220.0/22
                IPv6:
                  2602:ff89::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26269

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d2:d5:e5:2d:49:bb:f8:ff:60:cf:50:b9:7b:cf:0a:db:3a:
         28:bc:07:60:03:54:75:72:78:68:eb:7d:66:68:f5:3a:54:dd:
         0e:74:80:19:70:63:28:10:54:ec:98:81:89:7f:dc:1b:86:9c:
         3e:40:e9:dd:42:78:e0:7a:c3:92:01:39:84:72:23:f3:47:16:
         fb:f6:e4:ca:f0:a6:70:60:82:0a:a7:9e:42:c6:a0:fc:70:0f:
         eb:19:7c:7f:1f:85:f7:a8:f7:1d:7b:73:b1:0f:ab:68:03:b9:
         28:f0:17:8c:fc:f7:a4:cc:68:81:8c:0d:37:ac:77:0f:20:98:
         d2:7d:ed:9f:cb:00:1d:13:c3:24:1f:18:02:44:a7:27:80:19:
         3e:dc:fc:75:b1:e2:62:94:d8:37:03:e5:fe:fb:08:d6:4f:d2:
         e7:7a:05:27:b9:80:e0:76:3a:ea:d7:3c:31:bd:56:6d:8d:84:
         80:89:4c:56:e8:1c:f7:9d:3b:0a:ff:52:1c:e7:62:49:16:c9:
         7e:3d:51:6e:35:47:dc:11:5e:60:09:0c:8a:0d:e7:dd:29:4f:
         f7:1c:e2:2f:84:36:7c:bc:0d:1e:cd:06:5a:55:c1:71:c1:b0:
         95:d5:b2:31:15:f5:ab:1c:a5:b1:fb:ce:9c:1a:fc:50:88:bf:
         c1:4e:52:5a
-----BEGIN CERTIFICATE-----
MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE+1BDFiMCM9nKQpwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI2MTEwMjEzNDUxMloXDTI5MDIwNDEzNDUxMlowLzEtMCsGA1UEAxMk
ZTQ4NzdiNDEtYTdlMy00OTFhLWE4N2UtNTZhOGNmNDZkMTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvCWv2Fj92nlEB+OfOaARCab5mM8OxcXC069
85A54DAjP1FXAofjqs+T3SfFG2bVb/5pa1eAugwVEJxmX/g31INtpQn5tkabtv6S
5EnZAW9yqTfBulkQqFX3ckIsgwUHEFwP3sMkwk0DrEoIg2+mLKz5eQUPJ18wwiiI
2gbMDSLr5YhmB9J7yPEPo+XAU6TZymKpMR7Fzy91hmasCS8wqfD16HBcuhY3l2t+
x879rWDMc+KBSeOJKS3DePlnSAj7yiL/tscLFGrQzvvo5MY345ct3B+/ENWNCxm1
rJ4VqY+WnINEqSx3zuvOaRIRUr5hW5bKiGZl/Ai+XuND1896xwIDAQABo4IESDCC
BEQwHQYDVR0OBBYEFHlP7PRf7C3PPfyO5GC/0JRG1SblMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l
NDg3N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4Y2Y0NmQxNjkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U0ODc3YjQxLWE3ZTMtNDkxYS1h
ODdlLTU2YThjZjQ2ZDE2OS9lNDg3N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4Y2Y0
NmQxNjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTQYIKwYBBQUH
AQcBAf8EPjA8MCoEAgABMCQDBAKg37ADBAKi2OgDBAStLbADBAPGh5ADBALHOpAD
BALH8dwwDgQCAAIwCAMGBCYC/4kAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmad
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJTS1eUtSbv4/2DPULl7zwrbOii8B2ADVHVyeGjrfWZo9TpU3Q50
gBlwYygQVOyYgYl/3BuGnD5A6d1CeOB6w5IBOYRyI/NHFvv25MrwpnBgggqnnkLG
oPxwD+sZfH8fhfeo9x17c7EPq2gDuSjwF4z896TMaIGMDTesdw8gmNJ97Z/LAB0T
wyQfGAJEpyeAGT7c/HWx4mKU2DcD5f77CNZP0ud6BSe5gOB2OurXPDG9Vm2NhICJ
TFboHPedOwr/UhznYkkWyX49UW41R9wRXmAJDIoN590pT/cc4i+ENny8DR7NBlpV
wXHBsJXVsjEV9ascpbH7zpwa/FCIv8FOUlo=
-----END CERTIFICATE-----
Generated at Wed Nov 4 23:04:01 2026 by rpki-client