Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer
File:                     cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer (raw, json)
Hash identifier:          oDOQcgtIwKTfliBv6Fm3v6YP2JA/1d2WQ2iqTvABM3I=
Subject key identifier:   EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC
Authority key identifier: DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71
Certificate issuer:       /CN=e91c6482-7261-4772-b3f7-fd5fa4ae995c
Certificate serial:       010D0C9F4328584A25C6469587B69BEE29B08980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.mft
caRepository:             rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 10 Jun 2025 18:25:10 +0000
Certificate not after:    Mon 13 Sep 2027 18:25:10 +0000
Subordinate resources:    AS: 401760
                          IP: 23.140.20.0/24
                          IP: 2620:d9:2000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:c6:46:95:87:b6:9b:ee:29:b0:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91c6482-7261-4772-b3f7-fd5fa4ae995c
        Validity
            Not Before: Jun 10 18:25:10 2025 GMT
            Not After : Sep 13 18:25:10 2027 GMT
        Subject: CN=cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:15:f4:9d:f3:b6:c7:e6:95:ce:5c:dc:53:
                    7d:02:ce:1b:fc:32:09:a4:a5:72:7d:b8:a5:97:de:
                    76:55:ad:9f:af:20:bf:7a:f1:0c:9a:bb:0d:16:15:
                    85:a4:53:c8:24:ad:71:76:83:c1:40:0b:17:10:6d:
                    dc:6f:43:b5:9c:9b:38:2a:17:bc:f7:67:7a:5a:a0:
                    05:80:e1:76:e6:40:10:63:58:73:7d:75:a4:f1:6f:
                    4b:98:c3:a6:23:a6:09:30:7f:93:06:a7:fa:db:8b:
                    b0:2d:da:65:85:10:45:ec:0d:f7:9b:f7:b5:b2:53:
                    b0:26:c6:ce:9e:3a:2a:eb:de:b5:5f:d3:7f:a5:c3:
                    c9:bb:60:ac:da:ab:6b:f4:33:90:8b:76:87:1e:a0:
                    f3:34:33:19:49:43:63:5a:3b:f2:0b:5c:39:bc:b5:
                    1c:19:eb:e1:96:6b:2b:c8:e4:ef:b9:c5:d6:9f:36:
                    91:af:65:6a:fb:db:b1:3e:b4:74:e0:0e:fc:bc:20:
                    35:23:66:12:36:9f:00:44:75:52:ea:24:bd:43:ef:
                    a8:5c:54:1d:68:60:82:dc:89:ff:e8:d3:a3:58:d3:
                    ae:ff:ee:de:4f:97:03:cf:ef:78:e4:04:0d:fb:1b:
                    71:2a:69:fe:b5:3b:c6:f2:68:13:ba:07:f1:cb:50:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl

            X509v3 Authority Key Identifier:
                keyid:DE:2F:43:B6:C4:85:E6:DC:33:B0:1E:76:7C:AB:3C:9A:D0:6C:6F:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.20.0/24
                IPv6:
                  2620:d9:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401760

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:d2:ec:dc:c5:64:b2:df:d5:16:b4:60:e2:3f:f4:2a:c9:
         81:33:e5:b7:ee:21:a4:43:a0:12:2b:f7:55:cb:77:ee:22:8d:
         fd:fc:c2:21:97:52:cd:ba:cd:55:e6:0f:09:1d:0b:0f:fd:55:
         8a:62:65:b0:2e:1c:0f:ab:d0:0b:5e:d6:11:d3:fd:f1:e1:b2:
         76:44:91:18:68:e2:91:46:70:f9:4b:ae:d0:71:07:6f:ae:b2:
         b5:ac:74:4c:74:22:f4:c3:e0:1a:bd:03:8a:be:93:0f:9e:e0:
         71:a2:09:a1:ba:7f:72:bb:c6:e9:56:d8:00:4a:05:4a:b4:77:
         73:e1:bf:ad:74:c3:fd:ba:e4:c9:7c:8e:31:4b:de:4e:ed:1a:
         74:e7:32:aa:36:e5:0d:cf:79:d2:b5:8c:a4:ff:b0:8a:1c:6c:
         33:b9:87:bb:b7:fd:22:f1:f2:f3:4e:d5:1e:40:b5:80:ad:40:
         93:2a:72:1d:9d:54:da:af:8a:4b:0f:be:0f:e3:a1:45:4b:a6:
         f3:f2:e1:43:8e:90:0e:8d:ab:73:de:3b:f1:b7:5e:98:f9:10:
         2d:46:34:cc:25:f9:63:89:36:03:6b:73:00:b0:ac:33:a5:4e:
         8d:6f:89:29:64:c0:9b:cc:99:43:29:20:95:73:3d:23:0b:e5:
         9c:5e:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:35:46 2025 by rpki-client