Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer
File:                     f5b47d91-eb0d-4085-9bc2-452042c0b313.cer (raw, json)
Hash identifier:          o0a7cAb/w71cTlmJENKePb2GXi9FNEuxoigM3roNGQw=
Subject key identifier:   DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584F055D2C4DBF7E63B77B665480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 31 Aug 2026 15:42:13 +0000
Certificate not after:    Tue 01 Feb 2028 01:45:23 +0000
Subordinate resources:    AS: 1088
                          AS: 20318
                          AS: 31775
                          AS: 394868
                          IP: 23.174.0.0 -- 23.174.4.255
                          IP: 64.201.232.0/22
                          IP: 69.194.148.0/22
                          IP: 104.153.28.0/22
                          IP: 104.244.192.0/22
                          IP: 115.84.192.0/19
                          IP: 147.185.187.0/24
                          IP: 149.76.32.0/19
                          IP: 162.0.160.0/19
                          IP: 167.94.99.0/24
                          IP: 199.241.26.0/23
                          IP: 2605:9480::/32
                          IP: 2606:e780::/32
                          IP: 2606:ea40::/32
                          IP: 2607:2640::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:5d:2c:4d:bf:7e:63:b7:7b:66:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug 31 15:42:13 2026 GMT
            Not After : Feb  1 01:45:23 2028 GMT
        Subject: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:4d:38:5e:0f:c0:3f:7a:85:02:07:2c:58:
                    fc:37:5f:ee:5e:74:cd:57:ca:11:bd:ae:17:44:27:
                    bb:81:fa:08:89:57:81:d9:df:2b:59:b7:15:b3:df:
                    7a:e9:06:53:2c:d9:6a:9d:55:51:48:1b:51:55:8b:
                    60:7f:27:22:95:fa:a8:aa:95:84:81:20:ec:72:64:
                    70:44:f4:b8:59:fc:52:01:9e:a9:bd:d0:ce:23:1f:
                    28:16:47:89:32:b1:7a:e3:7a:8e:d2:f1:63:b1:c4:
                    0e:69:67:0d:a3:84:65:98:2d:00:dd:22:93:cf:b1:
                    d2:36:68:7a:70:2e:e8:30:e5:b4:42:15:d3:92:27:
                    d8:29:7a:5f:d0:11:79:ba:a9:c9:e7:0d:a4:1e:88:
                    47:14:29:02:80:24:b0:9d:81:00:40:93:62:f5:f9:
                    d7:aa:bb:d9:99:09:05:30:a5:69:7c:cd:75:10:31:
                    4b:f8:ea:45:4a:18:f7:04:60:b0:65:16:35:ce:41:
                    0a:d5:36:82:37:8f:bd:89:16:91:fd:f3:df:9a:92:
                    bb:2f:54:11:c0:22:58:14:00:6e:5e:60:80:f3:f6:
                    82:2d:c0:98:ed:49:46:c5:cd:5e:b4:68:60:fa:48:
                    a0:34:5f:ba:9d:c9:41:ef:b0:53:22:29:e4:6d:5e:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.0.0-23.174.4.255
                  64.201.232.0/22
                  69.194.148.0/22
                  104.153.28.0/22
                  104.244.192.0/22
                  115.84.192.0/19
                  147.185.187.0/24
                  149.76.32.0/19
                  162.0.160.0/19
                  167.94.99.0/24
                  199.241.26.0/23
                IPv6:
                  2605:9480::/32
                  2606:e780::/32
                  2606:ea40::/32
                  2607:2640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1088
                  20318
                  31775
                  394868

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:4b:c2:6b:55:a0:79:71:9b:c0:b4:45:68:c0:c5:ff:82:2a:
         75:38:f6:cb:ad:54:7e:fa:b1:8c:9f:4b:0b:09:df:07:24:e9:
         a9:fd:74:11:3d:51:23:ec:b5:42:af:83:88:44:97:b4:73:9f:
         ee:3c:c6:cb:86:73:01:87:29:83:5f:71:c0:c6:f8:50:14:f3:
         87:93:01:b8:e2:a5:0f:c6:c5:77:5a:bd:09:59:0e:d4:9a:00:
         ff:7c:38:7b:2a:f7:46:3f:5b:61:56:ab:c8:22:41:ff:8c:1c:
         da:52:c1:38:ca:d1:61:30:4b:e6:c4:52:95:f7:13:29:ec:f4:
         a8:5c:da:94:16:f3:d0:4c:96:3c:4e:67:f8:80:dd:07:c0:36:
         2f:da:f8:95:98:0c:b0:9c:48:17:63:c1:67:35:93:ed:c1:d0:
         6e:51:ce:01:2c:8a:0b:8a:08:58:0b:40:d2:41:cd:9f:8d:8a:
         35:a3:56:74:b6:7e:99:4c:0c:f3:8e:5f:54:74:81:f2:ba:e7:
         88:66:1a:40:99:87:b1:3c:72:a6:5c:ad:92:03:8b:f2:a4:e8:
         a8:e9:c7:b4:31:b2:52:3f:6b:bb:62:d7:ab:9c:48:7d:99:3e:
         15:fa:ba:6c:9e:7f:66:4e:6e:b8:fe:13:ab:6c:94:f0:b0:4d:
         4a:ca:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:20:39 2026 by rpki-client