Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
File:                     95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer (raw, json)
Hash identifier:          fHcwBrJn8xEwUQ4YTTwmMOdt8v7Mh1YJfZCXM3uxwNQ=
Subject key identifier:   3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority key identifier: 96:C5:1D:10:E4:05:BD:BB:D6:D7:16:DD:55:60:46:7C:91:EF:F4:7F
Certificate issuer:       /CN=4265131f-f3fe-4bd3-9309-8f048cc23b7e
Certificate serial:       010D0C9F432858499E48C4D611C4319DF08C1DA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
caRepository:             rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 23 Apr 2025 05:38:10 +0000
Certificate not after:    Tue 27 Jul 2027 05:38:10 +0000
Subordinate resources:    IP: 45.132.80.0/22
                          IP: 45.150.52.0/22
                          IP: 80.91.218.0/24
                          IP: 91.238.92.0/23
                          IP: 91.239.148.0/23
                          IP: 91.244.196.0/22
                          IP: 95.214.176.0/22
                          IP: 176.105.228.0/22
                          IP: 185.177.24.0/22
                          IP: 194.179.146.0/23
                          IP: 212.115.124.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9e:48:c4:d6:11:c4:31:9d:f0:8c:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4265131f-f3fe-4bd3-9309-8f048cc23b7e
        Validity
            Not Before: Apr 23 05:38:10 2025 GMT
            Not After : Jul 27 05:38:10 2027 GMT
        Subject: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:7a:94:cb:a1:eb:bc:51:42:a0:2c:d7:85:
                    f2:fe:77:a3:48:9b:9a:a5:a7:c6:4f:2f:51:a0:96:
                    c2:ae:1e:16:00:89:12:36:de:0c:d5:2a:a7:41:f1:
                    38:76:32:fd:29:c6:67:b2:8f:92:9a:52:25:93:84:
                    1f:47:2e:04:b4:b0:33:f9:cf:68:81:f3:2c:63:05:
                    74:9d:11:13:79:5c:d0:0d:5b:a5:2d:d9:9c:4e:96:
                    7e:6e:e2:3f:92:da:fc:ee:dd:e9:d1:22:e6:08:ac:
                    e0:91:36:f0:27:9e:1d:d7:07:cd:79:d1:db:df:87:
                    d5:38:f0:c0:e3:1e:a0:90:6d:83:a3:a3:f1:ce:cf:
                    c0:a6:85:49:3b:fb:d4:13:ac:0d:12:73:c4:39:ee:
                    90:77:0f:f0:ac:6a:0f:ca:03:5d:ec:ad:0b:ee:22:
                    67:2d:54:2a:09:3a:c7:66:5e:be:fd:2c:fb:83:46:
                    c1:fa:2f:77:d4:2a:ed:e4:70:0a:4f:17:8a:15:d0:
                    03:e0:04:02:ca:09:7a:6e:14:4f:74:c6:99:e7:d9:
                    a6:54:21:37:bc:47:e1:7b:49:17:52:c4:56:fa:56:
                    f3:93:55:a3:01:1d:cb:13:20:89:94:5a:24:46:92:
                    2f:e8:63:36:6e:9d:89:87:23:2e:2b:bc:ca:df:57:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl

            X509v3 Authority Key Identifier:
                keyid:96:C5:1D:10:E4:05:BD:BB:D6:D7:16:DD:55:60:46:7C:91:EF:F4:7F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.80.0/22
                  45.150.52.0/22
                  80.91.218.0/24
                  91.238.92.0/23
                  91.239.148.0/23
                  91.244.196.0/22
                  95.214.176.0/22
                  176.105.228.0/22
                  185.177.24.0/22
                  194.179.146.0/23
                  212.115.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:44:9b:2f:ae:21:f4:d2:21:0f:04:fb:c8:49:9e:79:4b:
         77:55:f2:9e:71:3c:91:0b:98:fb:61:41:18:96:37:87:c2:bf:
         5d:0c:e0:b5:c9:86:01:5c:97:29:cb:c6:1d:fa:c9:48:de:ce:
         35:a7:69:14:fa:25:8c:62:fb:b3:16:78:22:f8:52:03:60:1a:
         63:ee:03:74:26:64:fb:fa:d2:0f:11:3e:df:c3:8b:56:72:7a:
         a9:39:e1:6a:9f:1f:13:b9:66:89:9e:22:48:98:b2:22:d4:fd:
         96:0b:16:6c:5e:e7:0f:1e:8e:5d:af:95:28:5f:9a:6b:33:df:
         4b:80:8f:05:5d:84:e3:11:80:14:a9:55:63:d1:32:3b:70:e9:
         83:09:ca:40:4a:69:68:9c:b6:21:bb:1f:fb:94:b9:29:4e:8c:
         41:be:e7:8a:e6:c5:6d:e8:f9:cb:60:56:da:ea:8a:1c:c4:5b:
         d3:c3:7a:9b:f4:d4:76:80:db:9d:4d:d8:dc:11:f8:45:04:28:
         09:01:55:1a:2a:ae:a3:46:34:05:54:99:38:1b:c6:45:c6:16:
         13:da:38:3b:f8:2a:ea:a6:16:5c:35:12:63:c1:ec:bd:ee:d9:
         ab:9e:c9:2a:4b:6a:41:3c:55:28:0a:9e:44:18:ee:d4:11:fc:
         df:f2:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:27:46 2025 by rpki-client