Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
File:                     22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer (raw, json)
Hash identifier:          MYRMydryOsf39+PLierUR9sdxULbMj6eUpzsyCSeI7c=
Subject key identifier:   3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority key identifier: D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3
Certificate issuer:       /CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87
Certificate serial:       010D0C9F4328584BA875C6D787BBB3E3718E60C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
Manifest:                 rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
caRepository:             rsync://rpki.avsisp.com/repo/AVSISP/2/
Notify URL:               https://rpki.avsisp.com/rrdp/notification.xml
Certificate not before:   Mon 27 Oct 2025 06:40:48 +0000
Certificate not after:    Sun 30 Jan 2028 07:40:48 +0000
Subordinate resources:    AS: 23506 -- 23507
                          IP: 23.133.204.0/23
                          IP: 2602:f704::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a8:75:c6:d7:87:bb:b3:e3:71:8e:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c5eaa7-78bb-4cca-835a-0df812ff7d87
        Validity
            Not Before: Oct 27 06:40:48 2025 GMT
            Not After : Jan 30 07:40:48 2028 GMT
        Subject: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:4b:8f:27:56:3f:f7:61:e0:90:fc:6b:3c:
                    57:38:1f:6d:0e:23:76:74:51:a5:1f:42:bb:d2:d1:
                    42:d7:91:8c:f1:5f:c3:b2:24:2b:16:41:15:36:3b:
                    25:4b:8d:4b:2d:76:52:41:97:51:18:1f:12:c6:d0:
                    17:5e:fc:24:8d:46:be:e5:53:51:fe:90:59:04:56:
                    cb:7f:02:15:e6:e3:23:dc:83:11:43:96:f6:21:54:
                    31:b6:e2:fe:d3:7c:73:82:b4:01:f2:27:a3:61:e3:
                    21:ad:9b:0a:40:4b:00:87:ad:83:56:ab:99:ba:cb:
                    e0:71:cc:83:15:89:20:c5:1f:d6:79:3c:f5:34:35:
                    19:d6:66:e2:8e:85:a0:a1:5b:78:d3:6c:fe:c1:50:
                    96:db:6f:42:10:93:02:0f:cb:d2:9e:04:56:3e:df:
                    6b:22:b2:ee:06:f9:1c:cc:65:4d:eb:e4:31:53:0d:
                    96:2c:64:0e:02:c2:0e:04:38:1b:20:b4:2c:83:45:
                    04:6e:8f:fc:22:18:9e:cd:31:b0:ba:d4:b1:55:ba:
                    85:bf:ad:36:91:33:af:dc:1a:36:a2:4c:be:37:d2:
                    ec:df:c8:11:67:60:6e:1a:93:f2:f5:fb:c2:ad:ca:
                    41:e5:e0:33:c7:36:0c:b2:9d:7a:89:35:d1:90:cb:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/
                RPKI Manifest - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
                RPKI Notify - URI:https://rpki.avsisp.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl

            X509v3 Authority Key Identifier:
                keyid:D2:45:CA:54:83:F7:AA:C3:35:89:10:B2:C1:14:9E:5C:2E:61:D3:D3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.204.0/23
                IPv6:
                  2602:f704::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23506-23507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:a3:cb:e4:18:b1:9c:40:46:85:13:6b:ac:50:bc:6f:fd:
         17:7f:4c:a3:0d:57:00:69:ac:0d:e8:79:84:20:74:8f:e2:e5:
         1e:2e:5d:d7:18:17:0e:e3:78:23:f9:62:e3:40:76:5d:bb:fd:
         3d:76:e2:1a:c5:b9:83:16:8d:47:60:fa:c5:15:78:ab:4e:47:
         64:a5:7c:e5:1c:77:03:ce:ff:44:23:b5:ac:37:e2:4a:58:a5:
         09:57:f6:b6:36:f3:f5:83:62:cf:d7:ec:d3:ac:03:16:88:24:
         fc:2d:dc:6b:cd:98:34:50:d4:81:0b:5d:eb:27:83:c4:b7:c5:
         f7:da:8f:1a:60:a2:7a:b9:68:b4:10:6b:ce:fb:60:d1:e2:5d:
         f2:68:c4:37:a9:fe:06:3b:6c:12:6f:34:87:a3:b5:d7:26:05:
         ba:1b:6a:40:98:f4:89:bf:7e:f7:9a:26:4e:f2:d6:17:6f:d4:
         1f:04:b1:71:50:68:4b:ca:7a:b4:3e:af:06:fd:06:b2:75:05:
         c9:54:f5:48:9f:42:e9:86:7d:4a:46:bf:4e:42:1c:69:07:0e:
         b6:8e:50:ab:0b:1d:1b:ca:90:e0:6a:82:e4:50:37:40:0f:f2:
         5f:4f:7b:68:84:b0:ba:7e:25:cf:9f:39:1d:42:1d:d7:58:36:
         76:11:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:55:24 2025 by rpki-client