Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
File:                     69df89b1-6446-4f76-b802-330eeb5819c6.cer (raw, json)
Hash identifier:          yfhB/nDBEHHG8FZ+LFIohxZwWqAxiJYPnHdF9QgJ5Qo=
Subject key identifier:   3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B99CFF5B609F0617535A83440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Oct 2025 00:45:23 +0000
Certificate not after:    Tue 25 Jan 2028 01:45:23 +0000
Subordinate resources:    AS: 1706
                          IP: 128.196.0.0/16
                          IP: 150.135.0.0/16
                          IP: 192.12.69.0/24
                          IP: 192.12.196.0/24
                          IP: 192.31.28.0/24
                          IP: 192.80.43.0/24
                          IP: 192.82.237.0/24
                          IP: 198.60.121.0 -- 198.60.131.255
                          IP: 198.60.133.0 -- 198.60.191.255
                          IP: 199.104.128.0/18
                          IP: 199.104.208.0 -- 199.104.255.255
                          IP: 204.27.250.0/24
                          IP: 204.43.0.0/16
                          IP: 204.99.0.0/17
                          IP: 204.228.0.0/18
                          IP: 204.229.192.0/18
                          IP: 206.207.1.0 -- 206.207.49.255
                          IP: 206.207.51.0 -- 206.207.63.255
                          IP: 206.207.128.0/17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:cf:f5:b6:09:f0:61:75:35:a8:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Oct 22 00:45:23 2025 GMT
            Not After : Jan 25 01:45:23 2028 GMT
        Subject: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b0:26:65:15:f7:00:8f:11:d6:14:dd:07:79:
                    ab:44:33:b0:5e:c9:d8:0b:7c:f2:6c:27:0f:da:6c:
                    b7:2e:9b:7a:dd:30:29:2f:c3:31:58:c9:fd:e0:ff:
                    0d:29:46:82:35:89:47:d0:85:21:67:dd:28:3a:60:
                    a5:53:61:42:37:a2:8b:70:8d:3f:7c:4a:c7:b8:ec:
                    b1:64:b3:a3:c3:29:86:e8:c7:2c:ae:f9:5d:88:31:
                    f7:7a:7c:05:1a:18:60:35:7d:57:2f:66:8a:5b:1d:
                    5f:15:6e:1d:7e:b0:5c:bb:c0:b9:74:b6:dc:b7:87:
                    cf:6b:26:40:e3:73:41:a4:50:3f:12:e8:1b:e0:68:
                    27:24:ff:1f:fd:be:29:cf:ca:ce:e2:39:92:3f:97:
                    20:bd:29:e2:34:bc:6e:3f:47:88:f0:c6:4a:99:4d:
                    31:c8:79:af:4e:8f:cc:28:dd:8f:b5:dc:9e:47:67:
                    2c:a2:78:c6:e8:2f:11:00:56:e7:71:7f:ad:4e:dc:
                    fe:7e:a0:8a:97:85:70:05:6e:49:84:16:b2:77:c7:
                    87:f7:3c:d4:bf:b6:1e:8f:d2:1b:01:3b:2d:27:3a:
                    e0:5a:f1:74:1a:38:2f:30:b2:da:6e:e2:66:70:d7:
                    5f:6c:24:20:4d:bb:ba:78:d8:13:02:fa:69:66:c6:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.196.0.0/16
                  150.135.0.0/16
                  192.12.69.0/24
                  192.12.196.0/24
                  192.31.28.0/24
                  192.80.43.0/24
                  192.82.237.0/24
                  198.60.121.0-198.60.131.255
                  198.60.133.0-198.60.191.255
                  199.104.128.0/18
                  199.104.208.0-199.104.255.255
                  204.27.250.0/24
                  204.43.0.0/16
                  204.99.0.0/17
                  204.228.0.0/18
                  204.229.192.0/18
                  206.207.1.0-206.207.49.255
                  206.207.51.0-206.207.63.255
                  206.207.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1706

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:68:8a:d0:0b:53:8e:c3:fa:20:e5:87:16:6f:67:d2:07:65:
         37:64:f7:39:64:80:f2:44:16:d4:62:a3:ce:42:f0:cb:be:5c:
         98:e9:5e:92:58:52:6a:cc:9e:e5:83:f5:d4:5b:e0:d3:cc:77:
         c6:72:9b:02:36:e4:ee:e6:f2:21:c3:b1:c9:2b:64:60:45:9b:
         95:93:1a:45:29:c4:cb:84:a6:f3:53:68:ab:a3:cc:4a:f0:8f:
         ec:66:d7:76:d1:cc:82:4f:c9:47:53:47:c6:7d:b7:9f:8b:cd:
         f4:a0:ce:4c:a1:f5:2f:66:45:fd:9c:ed:5a:fa:92:9c:11:b0:
         e9:b4:51:39:14:42:bb:7f:7f:9c:58:99:54:8c:d0:76:2f:89:
         3b:72:57:b7:5d:61:87:e0:17:b7:1d:be:e1:4a:31:d6:3c:a3:
         be:be:00:10:08:dd:56:b9:08:a4:8a:09:63:12:62:23:ad:08:
         47:99:b0:50:a7:1d:de:59:c0:12:4f:74:80:f0:85:c1:48:50:
         d8:21:61:5d:7f:96:ca:6f:5f:94:18:0f:73:8c:ca:8b:f0:5f:
         6d:a6:c1:f3:a8:da:72:17:42:6c:3d:4d:5d:ee:b1:ea:91:11:
         20:13:47:f3:79:6c:5a:70:ed:54:1f:b7:67:51:18:cf:37:dd:
         fb:11:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:00 2025 by rpki-client