Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer
File:                     015b5d4f-9c30-41d6-b021-48574f07c8a6.cer (raw, json)
Hash identifier:          yOIqRTkjIlcOMMf3ciAo8i9Y6T5oR//TFRrFXCw2ryU=
Subject key identifier:   6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584AB2192FAA75F00821E2E04AC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Jul 2025 00:45:23 +0000
Certificate not after:    Wed 03 Nov 2027 00:45:23 +0000
Subordinate resources:    AS: 398962
                          IP: 23.171.240.0/24
                          IP: 76.76.2.0/24
                          IP: 76.76.10.0/24
                          IP: 147.185.34.0/24
                          IP: 206.253.88.0/22
                          IP: 2606:1a40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:19:2f:aa:75:f0:08:21:e2:e0:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 31 00:45:23 2025 GMT
            Not After : Nov  3 00:45:23 2027 GMT
        Subject: CN=015b5d4f-9c30-41d6-b021-48574f07c8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:17:7a:8a:ef:88:23:24:49:4e:b2:da:d8:
                    03:eb:eb:19:b9:b2:90:65:31:12:74:37:23:c8:04:
                    63:b3:93:57:87:74:8d:30:95:fb:b7:3c:3e:09:36:
                    e2:35:07:60:98:09:df:c6:40:fb:80:74:76:c2:86:
                    2b:65:43:5d:05:ee:04:9a:75:b7:d3:e2:68:1c:c3:
                    76:f6:c4:b1:5d:c5:27:ee:7f:d5:91:4b:c1:6a:17:
                    f4:40:cd:00:2c:c3:8e:4d:52:ec:fd:39:d6:a5:d8:
                    75:7e:2a:90:e4:e0:a7:82:de:03:fe:fb:56:9c:e8:
                    a9:0d:63:a3:2b:31:e7:61:7e:c8:d0:a7:78:cc:20:
                    92:63:31:9c:54:f3:3d:cf:e4:9b:5b:d8:2d:91:fb:
                    9f:83:22:c3:ee:7b:a2:61:6c:43:ca:85:7d:1b:ee:
                    56:03:22:71:5c:6b:a2:ab:df:65:2d:7e:d7:70:9d:
                    e3:7c:5b:00:4a:a9:e8:21:44:8e:88:9d:1f:03:90:
                    e2:88:88:a4:fb:f6:01:ff:9b:13:cf:11:bb:99:cd:
                    9b:25:e2:82:3b:87:b0:0e:64:bb:e5:c9:e1:db:53:
                    88:c3:e9:67:a3:7d:79:33:e9:0c:56:9b:7b:29:50:
                    c9:b8:97:aa:7a:ad:7d:fd:ae:26:46:75:0d:2b:50:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.240.0/24
                  76.76.2.0/24
                  76.76.10.0/24
                  147.185.34.0/24
                  206.253.88.0/22
                IPv6:
                  2606:1a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398962

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3c:b9:9e:43:78:8a:c7:66:c0:d6:1e:16:80:55:b5:ec:bf:
         69:5b:01:2c:38:d3:c2:3c:c7:06:fc:26:3f:24:4e:6b:f5:b1:
         71:18:07:be:ce:b8:73:80:8e:1e:5c:a2:f6:42:0a:56:a2:ef:
         85:94:aa:69:0b:49:ac:fe:eb:47:0c:46:c2:d4:1e:3e:ed:3d:
         34:4d:8a:70:c6:1c:29:6d:92:20:34:19:66:8f:17:c1:c0:5e:
         65:8c:2b:35:88:a0:0b:6e:eb:7a:4b:d4:61:f6:37:01:54:a8:
         e9:6a:26:25:d4:22:ab:43:0a:47:d9:b7:6d:06:11:0b:57:a2:
         44:2e:d0:69:7d:ad:65:a4:18:2f:79:f3:c1:8b:a0:19:e7:5f:
         be:a3:9e:d7:d3:a9:90:c0:e6:b7:de:d3:5b:3a:de:e0:d5:78:
         80:f5:b6:df:e7:5c:7c:94:24:1c:b6:6d:5f:7d:ac:fb:59:54:
         3a:d9:6d:9c:17:ac:1b:3c:9d:5e:16:5e:7d:6a:11:24:71:36:
         60:d7:7a:d9:a9:f4:8f:ef:f8:cc:22:32:b7:40:65:30:92:5f:
         46:41:1b:80:33:96:15:51:b6:1f:c4:f3:9d:0f:95:50:e6:53:
         5c:d3:ad:84:4a:c9:68:01:05:08:b5:85:5c:aa:48:9f:f5:6b:
         f2:0c:56:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:50 2025 by rpki-client