Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
File:                     405ae070-e9e9-4d3c-b449-868426ff2303.cer (raw, json)
Hash identifier:          0naReVZla939HUTRnYwv70lMcJl9vvm+V1mc3ZkD3wo=
Subject key identifier:   F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584A1E230AC055881303525B8B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Jun 2025 00:45:37 +0000
Certificate not after:    Sat 11 Sep 2027 00:45:37 +0000
Subordinate resources:    AS: 15296
                          IP: 162.246.156.0/22
                          IP: 199.116.232.0/22
                          IP: 204.209.76.0 -- 204.209.80.255
                          IP: 2605:fd00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:23:0a:c0:55:88:13:03:52:5b:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun  8 00:45:37 2025 GMT
            Not After : Sep 11 00:45:37 2027 GMT
        Subject: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:76:bb:41:0d:b8:d5:e9:36:94:01:dc:ce:
                    0e:63:cf:e8:eb:e7:0d:91:12:02:46:51:c9:34:2b:
                    6b:6c:71:b0:8d:d5:ce:84:69:2a:8b:bb:db:fd:ac:
                    28:f9:d3:7d:18:bf:79:5b:2c:cb:27:42:db:dd:ca:
                    6c:dc:e2:c3:a5:a3:40:61:03:b2:48:ca:ad:e6:53:
                    38:6c:4d:72:ed:3f:d7:c1:c0:ab:21:bf:fd:a6:3c:
                    85:f8:8c:a2:49:84:a9:c3:89:08:c2:b1:4d:25:18:
                    c7:93:cb:b3:f6:87:67:a2:cd:91:55:97:f7:02:a1:
                    ca:29:28:47:8d:b8:1e:62:5a:56:bb:01:f1:e8:9c:
                    f7:94:16:34:ad:2d:d6:bf:9a:dd:d0:45:6f:d1:fb:
                    76:12:dc:1e:64:72:f3:f7:77:37:11:8b:69:58:02:
                    38:cb:f1:e4:5b:53:8c:54:ee:e2:59:79:51:42:a1:
                    9b:4c:91:a3:55:72:e9:a2:88:1c:ab:80:41:63:1d:
                    a4:7c:76:f7:10:da:f8:a2:fe:94:80:71:f0:9d:a5:
                    40:be:b2:0f:75:5a:51:75:e0:17:87:fb:d6:74:09:
                    25:34:25:5e:6f:64:b9:fd:12:9d:e3:29:2a:e3:71:
                    83:92:69:bc:f9:1e:aa:48:2b:e9:9f:23:4d:8d:5e:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.156.0/22
                  199.116.232.0/22
                  204.209.76.0-204.209.80.255
                IPv6:
                  2605:fd00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15296

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:cb:cd:92:c4:64:3d:0f:44:c6:d1:34:aa:3f:b8:e2:9d:
         46:22:e2:bf:af:40:b3:72:ee:fb:c4:91:fb:6c:eb:f8:75:53:
         74:f6:e2:33:db:7a:94:6a:54:e1:23:cb:d4:28:1d:5c:71:0a:
         89:4d:20:79:23:f9:44:89:03:fe:ce:f3:ef:ad:19:c2:af:a8:
         49:8b:f6:0e:eb:f6:97:c7:9e:38:cf:b1:8f:e6:38:47:63:2c:
         75:13:fd:07:d5:90:fe:a8:0c:28:55:f0:81:5c:d6:a6:bd:06:
         ff:2c:7a:c0:3e:ac:68:e4:2c:f1:1e:5d:c6:79:e4:5c:4a:ac:
         18:9d:39:39:66:68:d7:0c:cc:52:da:6f:0e:83:05:ff:37:90:
         7e:96:42:31:0e:0b:ca:cd:dc:82:d8:5b:f2:2e:7a:49:16:18:
         92:56:99:8f:40:18:a6:a2:4b:48:e0:4e:81:d9:fa:d6:d5:49:
         41:8c:44:c2:32:bc:cb:8c:db:58:06:2b:00:aa:35:79:1b:42:
         cc:30:83:6c:e8:ac:48:14:03:44:bf:7f:83:80:c3:92:2f:ea:
         a6:2e:1b:bc:30:dc:5c:f6:f7:72:d7:9e:31:d4:19:e2:36:87:
         19:d0:9c:a8:b7:45:f6:5b:fc:0e:a5:11:b2:12:f2:42:bc:0a:
         36:89:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:17:45 2025 by rpki-client