Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213.cer
File:                     3c79d01a-3026-45da-a74e-6fc6517ec213.cer (raw, json)
Hash identifier:          zK3yqBT+Szwzf9LHepSrd5d9ZvFphB8TLAMsnWAXG0A=
Subject key identifier:   38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584E5E015F7B8C6E3EA0B6170A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Jul 2026 16:57:16 +0000
Certificate not after:    Mon 03 Jan 2028 19:14:44 +0000
Subordinate resources:    AS: 397954
                          IP: 199.245.150.0/24
                          IP: 2602:f541::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:01:5f:7b:8c:6e:3e:a0:b6:17:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Jul  2 16:57:16 2026 GMT
            Not After : Jan  3 19:14:44 2028 GMT
        Subject: CN=3c79d01a-3026-45da-a74e-6fc6517ec213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:59:80:96:f1:6c:26:ca:89:2d:a0:43:68:
                    24:15:0f:de:42:32:74:b5:76:92:50:e3:31:e4:96:
                    91:ad:d6:5d:55:2d:2d:8d:fb:8b:a8:5c:06:84:e0:
                    05:96:3b:8f:d0:4e:bd:21:27:55:81:f5:0b:a0:1e:
                    c1:3e:99:b6:25:de:3e:29:89:b9:ae:63:82:02:7d:
                    6a:a7:70:5f:d9:db:8f:07:a6:50:9e:58:51:43:9e:
                    d2:4d:80:8b:10:76:cd:17:de:81:3e:4c:80:bb:a2:
                    69:a9:96:40:b0:a7:8a:48:f4:d5:40:2a:53:30:02:
                    ae:cd:e2:64:1f:d5:63:69:a3:c2:bf:0e:77:59:d3:
                    5f:95:d9:5a:63:b7:81:8f:c6:77:66:13:61:72:ee:
                    5a:e8:77:6b:79:6c:6a:0e:e6:0a:04:c0:0f:14:0e:
                    40:af:17:3d:41:83:4e:79:4a:fb:8a:b5:93:85:ad:
                    c8:94:f7:ac:28:bf:44:76:ef:22:f9:4a:16:69:f5:
                    0e:13:1a:df:f8:29:79:41:44:84:9f:31:c1:95:96:
                    59:b3:37:99:7c:d6:68:56:b1:ab:19:18:e7:1b:c2:
                    91:e7:66:93:93:1a:da:a3:f0:3f:7a:e2:92:6f:02:
                    c3:0e:9e:34:f7:37:f0:ea:33:f0:23:a3:a0:3c:bd:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:85:35:02:D3:9A:24:CF:76:A2:21:15:88:E3:F8:53:B7:4B:28
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c79d01a-3026-45da-a74e-6fc6517ec213/3c79d01a-3026-45da-a74e-6fc6517ec213.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.150.0/24
                IPv6:
                  2602:f541::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397954

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:45:17:86:cf:a7:2b:db:f7:eb:f5:4a:6b:ff:d5:48:b5:
         5f:0a:86:c3:9b:87:e5:42:cd:86:8c:11:b0:fd:66:16:53:1f:
         21:40:5a:fc:b0:1f:34:2c:6e:bc:07:3b:08:72:2f:dc:de:3a:
         4b:b9:7f:f6:d8:1d:2c:fe:dc:67:38:30:f0:1c:22:a5:ba:49:
         d8:e3:a1:8f:36:b3:af:dc:16:30:92:55:0b:ec:0b:c9:c7:0b:
         fe:01:07:9d:80:81:15:08:79:f6:e9:e5:46:db:d8:4f:9c:40:
         84:58:db:66:cc:04:a4:71:6f:1e:97:fd:d3:a7:fa:fe:f3:b4:
         29:e5:3d:05:6a:89:60:f1:6b:dc:a7:cf:a2:08:6d:8b:c0:04:
         f0:5a:af:83:db:a9:a7:9d:5c:c0:46:e2:7e:a2:79:49:e3:bd:
         6f:32:ff:a3:4a:e0:e2:d1:00:1a:1c:7c:07:1c:ef:3a:ba:26:
         ff:97:49:68:e1:23:6c:95:ff:e9:9d:cd:c8:75:42:6e:02:c8:
         e6:07:e6:10:0c:3d:bc:53:ab:70:e5:e5:b2:b2:9c:e3:62:55:
         92:28:a3:25:d8:bc:39:d6:df:35:5b:90:75:0a:10:af:23:8b:
         90:34:90:15:fe:90:11:39:d9:b1:fc:f8:3b:61:76:0a:6b:bc:
         75:84:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:18:39 2026 by rpki-client