Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer
File:                     554d5371-2bc4-4645-9f6e-22976d2fc4a6.cer (raw, json)
Hash identifier:          PamEr4gx8x/7IS156jCoygwMzhyn4e+ARTjHqD/sypY=
Subject key identifier:   53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584BBF9DF79EE14B2DBF2083AF30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Nov 2025 13:45:22 +0000
Certificate not after:    Mon 07 Feb 2028 13:45:22 +0000
Subordinate resources:    AS: 12132
                          IP: 199.231.220.0/22
                          IP: 2604:fc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:9d:f7:9e:e1:4b:2d:bf:20:83:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Nov  4 13:45:22 2025 GMT
            Not After : Feb  7 13:45:22 2028 GMT
        Subject: CN=554d5371-2bc4-4645-9f6e-22976d2fc4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:04:00:3c:ca:c7:42:ca:02:ae:cb:8a:e3:
                    53:bf:b9:d7:9f:84:47:87:65:98:a2:75:99:6d:5c:
                    b3:06:5d:a7:5f:e7:60:fa:1c:b5:0b:b0:5d:ed:e3:
                    41:01:e8:8e:46:da:df:57:64:9c:14:e2:bc:e8:13:
                    2d:99:ff:52:e3:97:20:fd:07:08:a1:4f:f0:be:5e:
                    3c:16:89:eb:cd:00:5a:2c:65:e5:f9:3e:bf:9f:83:
                    3c:c8:ac:2e:02:82:8a:49:5b:1f:09:38:7d:b5:fc:
                    f3:40:d7:72:93:56:f0:43:cd:0b:70:fc:9a:d8:25:
                    65:cd:11:24:aa:cb:e0:f6:64:55:14:c8:90:6e:71:
                    55:ab:48:5d:09:88:d9:54:07:1e:c4:d0:55:f2:c1:
                    4d:d7:06:4c:be:42:89:9d:84:c9:87:51:65:1f:da:
                    8e:b8:06:8b:d6:b7:c6:cf:6e:74:a6:e8:9c:c3:57:
                    ec:cb:61:14:ad:83:4c:b7:db:28:62:7e:73:00:4c:
                    13:e1:11:d1:d1:75:88:9c:93:0f:7a:d4:38:08:54:
                    1c:05:a2:b4:4e:38:b2:13:4c:cd:80:77:bc:08:fa:
                    fc:35:cf:9b:8d:33:10:55:29:ed:cd:9e:a1:04:72:
                    18:30:d3:b2:a5:56:31:59:1b:e4:82:1c:50:21:77:
                    2d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EA:1C:18:6E:A7:41:FC:BA:D5:54:BC:07:72:A3:DD:82:19:3B:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/554d5371-2bc4-4645-9f6e-22976d2fc4a6/554d5371-2bc4-4645-9f6e-22976d2fc4a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.220.0/22
                IPv6:
                  2604:fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12132

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:40:59:c4:ab:7c:b0:7a:61:d9:92:b1:ac:60:40:40:41:
         0d:b2:c0:64:12:2c:29:67:d5:97:25:59:e2:6e:d8:97:a3:38:
         55:14:af:ea:e5:42:d3:9c:a2:74:3b:f2:41:ae:0a:37:ef:e0:
         34:0a:de:4d:80:9d:c5:3a:0b:b1:39:68:2e:4e:85:c9:95:46:
         34:c0:f3:99:f5:92:fc:5d:3a:f7:68:85:3d:67:ee:78:8f:53:
         39:52:58:85:1f:ef:08:03:65:6d:62:26:8c:d8:4f:ac:6a:a8:
         73:0a:b2:d9:e5:7e:96:aa:bd:50:c0:a9:41:bd:80:90:d3:5f:
         39:70:cb:dc:e4:45:1f:4b:ba:2f:d1:06:a7:ff:25:40:b0:46:
         ac:ba:fc:50:3d:94:29:0b:00:cf:05:44:a8:f1:1b:31:6f:8b:
         b4:f9:05:ac:f0:67:d4:33:8d:e8:81:ea:e0:8b:19:36:b8:54:
         17:fa:76:de:08:86:aa:74:b6:56:f2:75:3d:25:f0:2a:23:db:
         4d:77:aa:ad:4b:6b:54:fd:82:f4:de:c5:fc:f6:fc:7b:ef:c7:
         39:a9:f2:32:8c:8f:71:97:41:f1:7b:d3:a4:ae:e9:15:74:07:
         86:2f:0a:96:fb:94:46:e7:29:60:ce:9e:7a:da:54:b5:49:b7:
         1b:60:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:39 2025 by rpki-client