Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
File:                     a2159823-806a-4879-9de9-7be634e8cd31.cer (raw, json)
Hash identifier:          BXaLjb+kDPpZ/NSJ3v3B8Wg7CyjbwM1K1jRRB9hYmiE=
Subject key identifier:   A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584AA6EE8FEB97B9CF596978F780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Jul 2025 00:45:37 +0000
Certificate not after:    Sat 30 Oct 2027 00:45:37 +0000
Subordinate resources:    AS: 6334
                          AS: 7128
                          AS: 14215
                          AS: 19213
                          AS: 40708
                          IP: 151.193.0.0/16
                          IP: 199.204.28.0/22
                          IP: 2620:115:b000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:ee:8f:eb:97:b9:cf:59:69:78:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 27 00:45:37 2025 GMT
            Not After : Oct 30 00:45:37 2027 GMT
        Subject: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:8a:36:29:b8:12:c9:7f:b7:de:3f:ab:5f:
                    91:27:a3:f9:ce:b0:4b:10:15:d3:8b:04:7c:92:3d:
                    00:50:b8:f9:9e:9f:dd:1f:e6:26:0b:00:45:dc:73:
                    91:ad:60:af:8f:56:d7:4e:bb:cf:ee:7d:16:3d:ab:
                    80:26:0c:90:a6:56:cb:31:48:91:52:f4:dd:29:70:
                    91:b4:a2:70:4c:c5:82:a8:c5:a0:c4:13:81:47:b8:
                    3b:8f:8e:41:64:88:38:3f:32:11:7f:9f:f5:2f:a6:
                    9d:57:ee:10:f4:48:89:06:95:a8:eb:e8:f5:64:dc:
                    59:c2:ff:8b:1d:df:e6:f8:4a:b0:d3:5c:a9:da:25:
                    7d:73:5f:4f:6c:1c:c6:cd:b5:08:7e:78:1e:5d:6c:
                    d5:fb:35:d4:31:fd:e4:50:f6:86:2e:b9:3d:90:27:
                    18:26:df:50:49:7b:66:9b:dc:a8:d4:76:8d:2e:15:
                    0a:fc:9a:f0:90:c2:fb:60:e9:fd:5a:c7:36:3a:1f:
                    a6:c9:59:36:f1:da:6a:41:d9:ad:5c:80:60:4b:9e:
                    23:e8:81:33:2e:84:da:7e:d4:ee:bf:36:30:e0:82:
                    85:4c:ee:67:30:0a:50:78:53:c9:58:77:e9:99:a4:
                    82:7d:a3:62:13:32:c3:2b:4d:83:52:88:03:ab:61:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.0.0/16
                  199.204.28.0/22
                IPv6:
                  2620:115:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6334
                  7128
                  14215
                  19213
                  40708

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:5f:74:c1:a8:1f:22:c3:ff:78:7d:80:6a:43:aa:88:60:
         84:ae:f6:53:7f:70:53:67:95:c5:c6:57:dd:32:80:ff:9a:30:
         f9:d2:28:87:56:e5:98:fa:32:fb:f4:1c:36:e8:b1:54:1f:cf:
         3c:d9:cc:57:24:8e:e0:a7:20:db:9e:5b:a5:d2:c9:04:b1:a3:
         88:54:5d:86:32:98:c8:e4:a6:2b:76:a5:b1:25:f6:ae:a1:81:
         b5:d5:a2:3d:92:a5:55:68:91:05:61:50:78:fc:c9:63:2d:af:
         b2:85:14:8c:b2:7d:ce:ff:08:31:ba:e1:da:7c:55:c8:e3:ea:
         6e:1d:a6:f5:32:cc:7e:03:75:f3:ac:ea:6a:87:2f:4d:84:c1:
         11:d9:e2:23:a4:b3:64:60:0e:c7:23:2f:ee:18:9d:e2:0b:80:
         f1:ef:34:98:5f:82:3c:30:80:42:dd:3a:dc:92:1e:a8:10:0a:
         19:a1:58:27:0f:37:f7:4f:f3:a2:fb:ac:a3:40:3f:18:71:a1:
         a5:ae:17:af:a0:90:e2:fc:c4:b7:0e:dd:60:da:01:34:c8:52:
         3c:ec:6b:d7:2d:56:04:bf:99:68:12:bf:2b:e3:42:61:2b:61:
         82:ca:5d:69:55:a9:b1:2c:b8:5e:1f:f9:5f:99:d5:d6:30:11:
         6f:72:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:36 2025 by rpki-client