Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer
File:                     8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer (raw, json)
Hash identifier:          71pEnJtPBRm4pNatRu9x4lusUtKyIek3+lwAgP29jwk=
Subject key identifier:   4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6
Authority key identifier: 31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3
Certificate issuer:       /CN=8d37a072-15ae-4905-810e-991fc6201b45
Certificate serial:       010D0C9F4328584A893860549A3FD00B83E252C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
caRepository:             rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 16 Jul 2025 09:20:06 +0000
Certificate not after:    Tue 19 Oct 2027 09:20:06 +0000
Subordinate resources:    AS: 19330
                          AS: 394839
                          IP: 23.168.24.0/24
                          IP: 2602:f9ba::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:38:60:54:9a:3f:d0:0b:83:e2:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d37a072-15ae-4905-810e-991fc6201b45
        Validity
            Not Before: Jul 16 09:20:06 2025 GMT
            Not After : Oct 19 09:20:06 2027 GMT
        Subject: CN=8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4d:6e:82:2a:d7:b7:1e:76:cf:75:78:77:e1:
                    02:fb:9f:0a:b3:11:e9:27:17:ed:70:b6:16:22:40:
                    27:01:3f:7d:95:e5:76:ef:6c:6a:3b:fe:59:cb:06:
                    dc:9b:d8:61:3d:28:d4:cb:dc:3f:73:78:79:55:99:
                    56:f1:e0:3c:42:c6:be:90:d0:32:1c:44:4c:8e:f1:
                    bd:2f:ec:e6:ad:ad:43:db:03:c6:b9:f4:96:76:4d:
                    d4:de:3b:68:48:40:6b:22:45:eb:ac:91:8a:bb:2f:
                    6c:6e:44:f3:5f:5d:24:d0:b2:50:86:1c:0c:97:a1:
                    39:d7:c1:ea:a8:e4:fd:0f:5c:62:94:e7:96:2a:eb:
                    a3:c8:7e:ac:cd:26:8d:29:c2:6c:1c:a3:e7:70:57:
                    45:09:75:3e:53:9d:1a:53:80:b4:73:99:bc:d2:7a:
                    78:1b:30:f5:dd:29:5a:c8:be:2c:76:4c:b1:c1:85:
                    b8:e0:08:c1:c0:c5:37:79:40:9e:f8:33:9b:1d:44:
                    c7:92:01:d6:7a:36:92:94:6a:a6:a4:cd:24:ee:14:
                    96:22:19:7d:db:e8:d8:7c:9b:5f:3e:d4:82:e3:62:
                    09:0c:dc:dc:69:4d:f8:fc:f7:13:8f:d2:a2:5b:22:
                    69:5c:ab:f2:9f:79:bc:44:44:d2:e2:00:34:b6:63:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl

            X509v3 Authority Key Identifier:
                keyid:31:F3:6A:E0:EB:81:E6:E3:7B:6C:55:02:40:E4:4F:91:B0:18:8C:B3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.24.0/24
                IPv6:
                  2602:f9ba::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19330
                  394839

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:73:fb:c0:90:19:2b:5b:78:3e:9e:89:d3:6d:d6:12:34:
         12:5b:1c:9b:11:62:00:fe:3b:68:ec:d8:1f:bf:28:08:5f:b6:
         ee:c5:51:43:91:8b:c9:dd:3c:26:f5:7a:3f:be:89:bd:0b:4a:
         49:67:53:57:99:43:a7:d0:08:f2:63:27:ec:45:eb:a4:e7:d2:
         93:16:c1:11:8a:78:46:9c:9a:95:e9:49:24:a8:e7:0b:f3:d7:
         08:7d:e7:1a:37:a1:3c:1c:65:77:2d:b6:f9:5b:6c:4b:82:c4:
         9d:bc:c3:41:c9:a1:12:59:50:97:c3:0e:ba:01:64:b2:cb:41:
         a9:27:4b:47:a0:68:65:db:0f:1c:b4:40:ab:2b:fb:ca:68:ca:
         94:01:26:7a:0b:f0:93:37:c7:c0:ec:de:54:a0:dc:28:77:98:
         ab:60:1a:42:f1:96:dc:03:2d:e8:a8:fc:93:81:62:79:be:99:
         ea:c5:20:ac:64:e1:33:a0:e8:89:bf:3b:60:e9:5f:7f:49:ed:
         aa:9d:ed:15:bb:4d:5f:48:16:49:64:7e:5b:31:6f:fd:43:e2:
         64:29:0e:06:c1:f8:20:75:d4:9f:65:6f:62:d0:c5:86:01:8c:
         72:97:46:07:06:37:5c:70:31:45:d8:36:da:a0:97:47:47:66:
         0f:a5:b1:1e
-----BEGIN CERTIFICATE-----
MIIG0TCCBbmgAwIBAgIUAQ0Mn0MoWEqJOGBUmj/QC4PiUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzN2EwNzItMTVhZS00OTA1LTgxMGUtOTkxZmM2MjAx
YjQ1MB4XDTI1MDcxNjA5MjAwNloXDTI3MTAxOTA5MjAwNlowPTE7MDkGA1UEAxMy
OGQ4YTY3MmRkNzQyOWM0YWYyNWU3MjBlNTM5OWJlMTkwNGYzMjkzYWFiODlhYmQx
NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTW6CKte3HnbPdXh3
4QL7nwqzEeknF+1wthYiQCcBP32V5XbvbGo7/lnLBtyb2GE9KNTL3D9zeHlVmVbx
4DxCxr6Q0DIcREyO8b0v7OatrUPbA8a59JZ2TdTeO2hIQGsiReuskYq7L2xuRPNf
XSTQslCGHAyXoTnXweqo5P0PXGKU55Yq66PIfqzNJo0pwmwco+dwV0UJdT5TnRpT
gLRzmbzSengbMPXdKVrIvix2TLHBhbjgCMHAxTd5QJ74M5sdRMeSAdZ6NpKUaqak
zSTuFJYiGX3b6Nh8m18+1ILjYgkM3NxpTfj89xOP0qJbImlcq/KfebxERNLiADS2
Y8VfAgMBAAGjggPVMIID0TAdBgNVHQ4EFgQUTWMTjC5FaWEDASgZEjjXGryuSqYw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOWE2ODk2NGY1ZmY2NDBlYmFkMTAwZGVl
YTdjOWJhNDYvMS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOWE2ODk2NGY1ZmY2NDBlYmFkMTAwZGVlYTdjOWJhNDYv
MS80RDYzMTM4QzJFNDU2OTYxMDMwMTI4MTkxMjM4RDcxQUJDQUU0QUE2Lm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkz
YS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzhkMzdhMDcyLTE1YWUtNDkwNS04MTBl
LTk5MWZjNjIwMWI0NS84ZDM3YTA3Mi0xNWFlLTQ5MDUtODEwZS05OTFmYzYyMDFi
NDUuY3JsMB8GA1UdIwQYMBaAFDHzauDrgebje2xVAkDkT5GwGIyzMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03OTNhLTRhNDUt
YTBhOS05NzgxNDgzMjFhMDcvOGQzN2EwNzItMTVhZS00OTA1LTgxMGUtOTkxZmM2
MjAxYjQ1LmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEABeoGDAOBAIA
AjAIAwYEJgL5ugAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICS4ICAwYGVzBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQATpHP7wJAZK1t4Pp6J023WEjQSWxybEWIA/jto7NgfvygIX7buxVFDkYvJ
3Twm9Xo/vom9C0pJZ1NXmUOn0AjyYyfsReuk59KTFsERinhGnJqV6UkkqOcL89cI
fecaN6E8HGV3Lbb5W2xLgsSdvMNByaESWVCXww66AWSyy0GpJ0tHoGhl2w8ctECr
K/vKaMqUASZ6C/CTN8fA7N5UoNwod5irYBpC8ZbcAy3oqPyTgWJ5vpnqxSCsZOEz
oOiJvztg6V9/Se2qne0Vu01fSBZJZH5bMW/9Q+JkKQ4GwfggddSfZW9i0MWGAYxy
l0YHBjdccDFF2DbaoJdHR2YPpbEe
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:56:36 2025 by rpki-client