Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer
File:                     883ca040-a898-4e47-b1e1-f2461996a058.cer (raw, json)
Hash identifier:          cz4X5p43GB/I1Mkm44WWl2/GZpi4VjLfzvyWxhi9brI=
Subject key identifier:   BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849EAC69D03DE1F397634B295A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 May 2025 15:13:10 +0000
Certificate not after:    Mon 23 Aug 2027 15:13:10 +0000
Subordinate resources:    AS: 54249
                          IP: 209.189.128.0/18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:c6:9d:03:de:1f:39:76:34:b2:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May 20 15:13:10 2025 GMT
            Not After : Aug 23 15:13:10 2027 GMT
        Subject: CN=883ca040-a898-4e47-b1e1-f2461996a058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:36:cb:72:5c:ac:6c:90:82:45:d1:20:4d:
                    ff:e3:4d:46:bf:1f:0b:0a:eb:25:98:57:71:47:1a:
                    c7:a7:63:40:f8:e2:95:fe:0e:99:99:f8:da:77:4d:
                    58:5f:b9:76:b4:0d:41:f6:91:ba:97:32:07:52:46:
                    f4:07:8c:ca:0a:af:65:6e:cf:3b:1c:40:5b:74:8f:
                    c2:a6:fb:53:72:8e:72:7d:d3:40:5e:e8:f6:47:31:
                    74:b5:69:73:35:e0:b1:f6:59:23:98:71:77:82:26:
                    1e:0f:9e:2b:af:c8:28:46:0c:99:2b:95:35:06:a7:
                    30:7a:3c:66:4b:f8:86:9f:42:b7:48:51:70:37:b6:
                    f1:93:f4:fa:d8:bb:64:f0:c7:6e:c8:70:86:82:9d:
                    a2:ea:eb:0b:fb:41:a9:a4:93:6d:48:07:b9:21:32:
                    87:0a:67:50:69:2b:0f:8a:0d:67:fe:23:3c:df:2e:
                    a6:18:de:d8:8d:6c:65:a7:6a:d5:16:d8:4a:c9:89:
                    3f:f9:43:1f:ce:b1:c3:8f:c2:9e:4c:8e:5c:9e:6c:
                    88:a8:95:9b:4f:a7:bf:cf:03:3a:50:2a:ee:f3:74:
                    39:e6:d1:06:80:a9:7c:b2:32:9e:02:0b:a2:c3:78:
                    f7:c4:35:48:07:a3:de:98:ba:12:1e:a4:78:59:ec:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.189.128.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54249

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:33:57:05:a0:dc:48:d2:10:8c:2a:b8:66:86:cc:85:9a:93:
         7e:91:33:0b:ea:8b:06:28:ae:02:d9:ea:e5:ee:91:ff:a5:2f:
         52:d2:65:5a:9a:e5:ea:4c:7c:e4:44:03:f9:26:58:40:ef:25:
         cc:d7:82:07:f3:6a:38:f3:8a:67:68:8c:cc:64:ee:42:4d:b6:
         04:6c:5e:ac:fe:85:c7:e6:ae:dc:ec:35:ed:e0:a6:c2:14:8c:
         df:54:ab:f2:cc:f5:f1:03:90:b3:be:03:66:bf:c1:70:05:f9:
         3a:8e:be:e4:08:16:dd:4d:6e:98:ec:6a:8a:69:41:2f:fb:6f:
         d7:6c:3c:dd:87:51:49:d8:a0:ec:7e:0d:a4:32:78:2c:04:1a:
         ef:00:c4:3d:6a:5d:9a:3a:15:72:73:e5:4c:f4:2a:38:cf:d1:
         d2:95:13:8b:1f:88:8c:e7:ed:55:40:a7:43:99:e5:e8:f0:55:
         75:f8:84:56:57:86:ca:5d:ec:53:d9:8e:a1:07:eb:f5:1a:c3:
         77:23:11:fb:23:5f:a4:fe:97:4c:e7:40:d3:57:b3:0a:b0:ae:
         32:24:88:3b:8d:17:32:02:cf:3f:80:62:33:e8:aa:04:65:5c:
         e9:97:d7:df:c0:9a:0d:40:ce:e1:d8:2f:74:93:64:c5:ec:8c:
         38:7c:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:48:27 2025 by rpki-client