Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
File:                     fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer (raw, json)
Hash identifier:          Z0fYR21ICpVdRmhl0V9S58TCa3m20NdDVTKLh1i+a9Q=
Subject key identifier:   96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285849FCA2D513146B5E7F7288DAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 May 2025 00:45:36 +0000
Certificate not after:    Mon 30 Aug 2027 00:45:36 +0000
Subordinate resources:    AS: 7954
                          IP: 104.254.52.0/22
                          IP: 207.167.116.0/22
                          IP: 2605:e380::/32
                          IP: 2620:8d:4000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:a2:d5:13:14:6b:5e:7f:72:88:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 27 00:45:36 2025 GMT
            Not After : Aug 30 00:45:36 2027 GMT
        Subject: CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:f9:62:80:d8:b6:fe:3f:17:39:ac:7f:75:
                    a9:80:ef:b7:1e:17:4c:92:73:4c:78:d6:c7:18:79:
                    3a:4a:42:2c:cc:70:8d:65:1d:5c:7e:2b:e5:ba:b9:
                    db:8e:15:78:38:a8:0f:5c:79:f5:73:ba:29:1d:8e:
                    d6:2e:7a:30:cc:70:6f:31:2e:37:d8:90:8c:ac:92:
                    a9:f9:05:90:e0:7f:79:97:f3:9e:ae:28:92:f2:c7:
                    ce:09:3c:c9:55:be:33:8e:57:99:d5:fa:26:c0:ff:
                    38:11:5d:6e:dd:0c:b3:6d:d8:23:64:7a:95:6e:19:
                    96:48:56:2e:15:cf:1e:a2:6c:84:cf:2e:ab:bf:f2:
                    aa:b7:69:8c:7c:62:3e:96:38:0a:7c:1b:b5:a7:ad:
                    0a:f3:f4:c0:be:77:7c:7b:5c:22:57:df:ec:6a:69:
                    1a:17:d2:37:5c:dc:f3:55:a9:0c:5b:0c:0b:a3:59:
                    9c:21:c3:7a:42:b5:2f:ac:5f:79:f1:7d:e5:cc:73:
                    81:96:78:1b:a0:dd:d1:a7:f7:1e:e9:0f:05:eb:68:
                    14:cd:6b:63:94:e6:0d:55:c3:43:ed:a1:33:cf:a8:
                    43:ce:1a:d1:8c:b0:64:63:86:ce:90:52:70:d3:f5:
                    ab:41:dc:6d:ef:33:e5:54:8f:a9:7b:50:d1:99:41:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.52.0/22
                  207.167.116.0/22
                IPv6:
                  2605:e380::/32
                  2620:8d:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7954

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:5a:e2:c3:bd:74:f3:4d:75:c3:1c:76:b3:8f:7f:69:fa:c9:
         69:27:8f:a8:d8:bf:c1:48:1c:2e:57:dd:33:40:1a:6f:a7:d0:
         4f:db:05:f7:07:29:1c:a5:5b:c4:cf:34:21:13:5c:d3:4a:d4:
         23:10:ea:58:b4:08:c9:19:60:a4:90:82:3b:a4:95:22:57:e7:
         07:c3:22:4f:a0:06:fd:dc:f6:1b:aa:76:56:e0:88:d5:2d:28:
         ec:31:1a:73:0e:55:a3:4f:eb:88:1d:e7:57:b4:8e:aa:0f:8a:
         a5:87:09:8d:9f:27:1f:ee:ef:6b:69:72:46:dd:e9:5e:21:cd:
         5b:68:af:3b:d4:32:d6:38:eb:4a:11:a8:fe:2d:d5:8d:df:51:
         22:8d:be:a1:ef:5d:74:1e:51:f3:3e:20:8e:f8:40:be:c5:60:
         49:9d:6c:5e:cd:8c:2f:5d:a6:61:77:80:2d:58:45:d7:ea:4f:
         92:93:00:bb:cf:b8:70:73:22:ea:1a:05:bc:7e:2c:28:98:61:
         e6:89:31:9d:e3:52:c1:91:6f:7a:11:29:ce:4d:59:b8:39:03:
         ac:45:30:5c:5d:7f:77:92:c3:74:8a:66:fd:ee:fa:73:42:d2:
         25:e6:89:93:d5:19:af:4d:07:d2:2b:0a:a4:0b:ac:52:b3:7f:
         d6:05:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:33:24 2025 by rpki-client