Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer
File:                     3975c39a-715c-4dc0-891a-b38f9d7cb3e8.cer (raw, json)
Hash identifier:          ecn6w36QFJChV3rUAqcIWFFJ2Ek45pBA2w9oWrSunSk=
Subject key identifier:   EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849DFC16192F3CC0321B383CBC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 May 2025 16:28:44 +0000
Certificate not after:    Thu 19 Aug 2027 16:28:44 +0000
Subordinate resources:    IP: 50.115.80.0/20
                          IP: 63.251.16.0 -- 63.251.85.255
                          IP: 63.251.128.0 -- 63.251.223.255
                          IP: 64.74.96.0 -- 64.74.255.255
                          IP: 64.94.24.0 -- 64.94.67.255
                          IP: 64.94.224.0 -- 64.95.3.255
                          IP: 64.95.28.0 -- 64.95.79.255
                          IP: 64.95.216.0 -- 64.95.255.255
                          IP: 66.150.132.0 -- 66.150.179.255
                          IP: 66.150.184.0 -- 66.150.227.255
                          IP: 66.151.124.0 -- 66.151.163.255
                          IP: 66.151.168.0 -- 66.151.207.255
                          IP: 66.151.220.0 -- 66.151.255.255
                          IP: 69.25.0.0 -- 69.25.51.255
                          IP: 69.25.64.0 -- 69.25.111.255
                          IP: 69.25.136.0 -- 69.25.179.255
                          IP: 70.42.0.0 -- 70.42.83.255
                          IP: 70.42.128.0 -- 70.42.163.255
                          IP: 70.42.214.0 -- 70.42.255.255
                          IP: 72.5.48.0 -- 72.5.95.255
                          IP: 74.201.64.0 -- 74.201.171.255
                          IP: 74.217.36.0 -- 74.217.199.255
                          IP: 74.217.204.0 -- 74.217.255.255
                          IP: 75.98.0.0 -- 75.98.35.255
                          IP: 216.52.156.0 -- 216.52.255.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:c1:61:92:f3:cc:03:21:b3:83:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May 16 16:28:44 2025 GMT
            Not After : Aug 19 16:28:44 2027 GMT
        Subject: CN=3975c39a-715c-4dc0-891a-b38f9d7cb3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:19:55:05:87:89:ff:7d:2f:64:50:0f:ef:
                    50:ea:53:4a:40:25:d3:f4:ef:06:96:a1:eb:25:65:
                    2c:22:bd:d4:9c:92:a3:59:97:c1:92:7e:cb:da:bc:
                    c2:63:9e:57:b2:bc:90:13:43:95:92:31:b2:66:ec:
                    36:83:f3:f0:bf:99:de:b9:02:ab:56:16:db:30:98:
                    00:cd:cd:22:26:24:87:80:52:21:bf:c2:e3:47:e4:
                    c9:0b:f2:28:a6:df:3d:c9:58:a1:b3:d0:8a:97:9a:
                    92:8c:83:19:c4:f1:63:ae:1d:cc:6d:ac:8b:2b:31:
                    72:e2:c7:20:d2:f9:5a:bc:7d:42:90:cd:c4:09:57:
                    1c:49:20:72:45:93:42:ed:2a:5c:eb:5b:0b:cc:1d:
                    fb:2a:3d:81:96:9f:ef:68:37:87:cd:78:d1:76:0b:
                    3d:4b:43:b6:39:e3:04:28:b5:67:a4:d9:76:01:53:
                    22:4a:7f:e1:00:d2:ca:d9:e0:d9:8b:3a:0d:08:b0:
                    8a:ce:e8:9f:a3:57:54:85:f9:86:ee:28:96:80:51:
                    e9:d3:1c:87:d4:dc:5f:5b:fa:58:00:10:53:d4:00:
                    f3:cd:79:77:e4:ea:6a:58:b6:4d:5a:0b:0e:a7:43:
                    e8:d4:85:16:74:12:49:dd:be:bd:08:29:8d:d6:4f:
                    6e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:F7:B0:DF:9E:48:6A:B0:B0:6F:45:6D:0F:57:CC:95:0E:8A:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3975c39a-715c-4dc0-891a-b38f9d7cb3e8/3975c39a-715c-4dc0-891a-b38f9d7cb3e8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.80.0/20
                  63.251.16.0-63.251.85.255
                  63.251.128.0-63.251.223.255
                  64.74.96.0-64.74.255.255
                  64.94.24.0-64.94.67.255
                  64.94.224.0-64.95.3.255
                  64.95.28.0-64.95.79.255
                  64.95.216.0-64.95.255.255
                  66.150.132.0-66.150.179.255
                  66.150.184.0-66.150.227.255
                  66.151.124.0-66.151.163.255
                  66.151.168.0-66.151.207.255
                  66.151.220.0-66.151.255.255
                  69.25.0.0-69.25.51.255
                  69.25.64.0-69.25.111.255
                  69.25.136.0-69.25.179.255
                  70.42.0.0-70.42.83.255
                  70.42.128.0-70.42.163.255
                  70.42.214.0-70.42.255.255
                  72.5.48.0-72.5.95.255
                  74.201.64.0-74.201.171.255
                  74.217.36.0-74.217.199.255
                  74.217.204.0-74.217.255.255
                  75.98.0.0-75.98.35.255
                  216.52.156.0-216.52.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:27:3e:9a:1d:76:74:c6:bf:30:70:00:20:c0:dc:83:94:44:
         2d:d8:2f:98:d2:d1:b4:50:35:72:89:19:9c:c9:dc:fb:46:d6:
         44:ce:60:33:4e:51:e8:e9:59:ed:2f:6f:49:7c:62:f8:ac:37:
         13:cb:26:37:10:3c:3e:f9:fa:cb:93:f0:df:1c:90:32:81:ec:
         f5:b7:e2:d5:52:a1:43:6c:b0:03:39:d7:f5:0e:c5:0b:6e:d9:
         01:d8:c3:04:c8:f9:53:c2:26:fd:49:2d:b8:5e:65:d2:0a:b5:
         f0:8d:d6:df:d2:e2:d9:06:17:e5:7e:32:39:23:fc:1d:a2:4a:
         ec:39:60:79:0f:2e:5c:3a:3f:f1:6a:ef:19:0f:e6:a3:40:28:
         41:7f:61:9f:8d:34:41:98:82:b4:10:59:42:08:ef:13:53:01:
         b5:e0:bb:d3:e7:ce:c3:99:fa:e9:d2:d1:2f:fe:db:d2:3a:49:
         cc:f3:f5:30:54:82:0c:b6:33:c4:99:71:41:2d:20:81:17:c9:
         59:1d:46:c3:b6:03:27:4c:e9:e7:3b:86:27:47:c8:2a:0c:86:
         bc:f2:c1:eb:47:9e:ad:62:9a:cb:b3:21:d1:b9:06:81:13:6e:
         04:b2:e9:10:e4:02:ed:98:05:8d:fe:9d:5d:8f:43:99:19:24:
         39:85:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:05:25 2025 by rpki-client