Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
File:                     9405685a-cbfe-4a3e-8842-f5f720c7959c.cer (raw, json)
Hash identifier:          VHMGAiCW0qCitZkhhkYQeMhQrE0dUfnZq6z9hxUCij0=
Subject key identifier:   16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849FA0505EB21675E63F32FF8C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 May 2025 02:16:02 +0000
Certificate not after:    Sun 29 Aug 2027 02:16:02 +0000
Subordinate resources:    AS: 396305
                          IP: 83.229.48.0/22
                          IP: 170.76.155.0/24
                          IP: 170.76.214.0/23
                          IP: 173.205.222.0/23
                          IP: 2604:43c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fa:05:05:eb:21:67:5e:63:f3:2f:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May 26 02:16:02 2025 GMT
            Not After : Aug 29 02:16:02 2027 GMT
        Subject: CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:6d:6c:c4:dd:75:17:af:38:cc:a8:1e:8a:
                    8b:d0:62:98:fe:f4:b4:05:46:0a:14:c3:f4:28:9e:
                    1d:56:16:10:1e:ea:28:a1:20:8b:e5:04:b5:a8:83:
                    ec:6d:f0:5d:bd:ed:bd:46:4d:ce:b0:21:73:30:23:
                    13:6b:af:d8:98:13:35:f7:29:97:72:58:cd:e9:fb:
                    89:fc:d8:45:3a:ab:ae:40:a7:13:de:cd:41:b0:28:
                    5b:69:c3:76:ce:4a:95:fc:9e:55:33:b5:a5:c0:2d:
                    a3:8a:0f:91:ad:03:24:37:be:83:c9:68:e1:ef:f1:
                    66:d7:11:68:16:6f:5b:07:94:d6:73:02:08:bf:98:
                    7a:9f:7a:85:73:21:5e:b1:9a:7a:24:67:07:96:0b:
                    1b:e8:91:4a:4b:c2:96:c7:66:bc:23:6a:f6:60:b0:
                    26:4f:e0:b7:67:c9:da:52:94:ec:75:28:67:e1:71:
                    0a:a8:09:e1:89:fe:d5:8a:b3:5c:8a:1b:2b:50:93:
                    0e:6b:90:65:83:1e:07:a3:69:95:d2:d4:34:92:07:
                    f2:c6:06:07:75:d0:1e:78:33:4b:46:78:34:19:19:
                    19:1b:3b:26:b5:17:3b:50:79:16:99:5d:aa:0d:86:
                    77:99:1d:17:5c:0e:da:4e:5e:cd:2e:06:ea:9e:0b:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.229.48.0/22
                  170.76.155.0/24
                  170.76.214.0/23
                  173.205.222.0/23
                IPv6:
                  2604:43c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396305

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:47:b2:fa:91:cc:89:0e:ed:7a:c5:24:3b:b9:3f:88:64:
         36:31:28:36:c9:7c:4b:58:18:87:8f:15:2b:ea:a3:93:f5:16:
         09:29:7f:cc:83:db:0c:4b:9a:68:52:7f:41:44:05:31:16:45:
         2f:16:35:4d:17:a3:66:28:c3:85:b9:60:b1:4a:f6:30:c3:d0:
         60:53:df:1b:18:fd:44:44:86:60:7d:f7:38:d6:a9:7d:df:3a:
         ca:cb:33:d5:b4:56:24:77:62:4c:c7:39:8b:5b:67:b8:89:e2:
         68:95:ab:0e:b4:86:4e:22:12:12:0c:3c:eb:a5:c9:f4:ab:94:
         c3:ed:49:25:c4:75:98:27:ce:27:5a:69:43:8a:08:97:e1:f3:
         7f:39:07:3f:11:f5:5e:2e:e6:cd:e3:77:a5:0d:be:89:7a:ad:
         83:ba:f2:a7:1c:bf:0c:3e:ff:da:a3:9f:a0:78:39:93:16:a1:
         1d:38:c4:25:c6:d3:f7:4d:47:1a:5e:17:8d:73:45:b3:49:8e:
         11:f8:48:d5:e7:b4:a3:7b:30:d7:b6:51:0d:d9:5e:84:df:25:
         93:92:d8:95:e2:95:4d:59:af:5e:34:fe:f6:e8:4c:a0:45:e4:
         ca:f9:a9:6b:71:a1:c7:f0:22:fa:5c:55:3a:b3:36:ed:32:b1:
         90:85:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:08:22 2025 by rpki-client