Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
File:                     c1ca327a-71b9-47e5-b718-53788c38e86c.cer (raw, json)
Hash identifier:          X016wCD7O775FRw9XT+ZSs28P5JssReRlCyIr3npujQ=
Subject key identifier:   CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A010F59C19D27BF9888E52D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 May 2025 14:47:30 +0000
Certificate not after:    Tue 31 Aug 2027 14:47:30 +0000
Subordinate resources:    AS: 399821
                          IP: 66.150.128.0/22
                          IP: 67.202.214.0/24
                          IP: 68.233.46.0/23
                          IP: 98.97.240.0/21
                          IP: 159.112.234.0/24
                          IP: 164.152.6.0/23
                          IP: 198.232.236.0/22
                          IP: 2606:5b40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:01:0f:59:c1:9d:27:bf:98:88:e5:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May 28 14:47:30 2025 GMT
            Not After : Aug 31 14:47:30 2027 GMT
        Subject: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:af:5d:18:c7:dd:41:b4:bd:32:3d:d6:b3:
                    38:f1:4b:61:33:84:62:92:6e:3e:47:a0:f7:7b:f0:
                    61:89:3b:f1:bf:c6:c6:35:48:a7:bd:df:fa:fd:24:
                    8f:51:87:fb:29:66:96:c5:02:ec:88:11:a9:c3:b2:
                    04:4a:51:63:61:49:2d:69:fd:f3:c9:3d:bc:86:b9:
                    7b:26:ad:3c:33:26:1b:0d:49:9d:b3:c5:14:4d:f2:
                    66:03:17:11:c1:80:b3:7d:de:47:7c:41:da:41:59:
                    52:b4:65:21:73:26:cd:80:7b:2f:b9:14:e6:bc:19:
                    67:24:61:e6:e4:9d:15:45:df:96:2f:2b:58:43:17:
                    06:65:48:9f:5a:82:9c:a5:39:dd:be:c3:89:46:8b:
                    ed:65:39:53:9a:b8:d4:e0:ec:39:1f:dc:6c:ff:3b:
                    fe:e5:bc:14:37:58:7a:95:17:9b:56:0b:24:45:80:
                    f0:46:36:8d:0b:7a:a5:cf:17:ce:1e:97:5b:72:2f:
                    65:16:8e:d0:10:c8:3f:cd:13:ad:7f:2f:68:6c:77:
                    00:c3:db:9c:3d:1f:0a:7d:22:59:a1:60:3d:22:e9:
                    f3:1c:b7:a0:fd:82:b9:c3:0f:7a:9a:f8:18:dc:e9:
                    2b:82:5b:db:88:ff:b0:1c:35:8c:22:e1:ee:27:00:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.150.128.0/22
                  67.202.214.0/24
                  68.233.46.0/23
                  98.97.240.0/21
                  159.112.234.0/24
                  164.152.6.0/23
                  198.232.236.0/22
                IPv6:
                  2606:5b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399821

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:30:29:bf:85:4f:5f:7a:bc:0f:f8:b0:91:39:87:bc:a1:
         9d:d6:37:98:c4:05:62:5a:a0:92:1b:14:87:0d:e6:ca:36:11:
         d5:5a:d1:54:8c:51:d4:a3:e5:c4:7a:95:32:db:5d:8d:bd:2b:
         6a:ef:7f:35:7f:21:88:b1:7e:80:7b:a6:c3:c7:f2:9c:70:5f:
         28:1b:7a:84:a6:66:94:b9:d4:f6:71:6d:3b:ae:96:36:2b:78:
         57:4e:3e:6c:42:9c:53:03:2f:11:25:1f:8b:ed:58:be:39:1f:
         30:18:3e:c0:4f:ff:0d:27:00:f0:92:c6:36:4d:16:1e:2b:a8:
         bc:f6:7f:98:fe:8a:8e:82:af:94:0e:8d:c2:3a:9a:6c:94:bb:
         c6:f3:a0:ff:fa:6a:5e:68:55:80:82:b6:49:15:bc:09:17:ae:
         8d:2c:ff:d2:46:c1:d9:0e:85:73:60:b3:a7:c6:0d:17:c0:0e:
         a3:19:9b:04:d1:09:6c:79:5a:4f:2a:b8:5f:3f:a6:5b:75:72:
         91:30:cb:d0:fa:b7:65:8b:9d:b3:64:51:9b:fe:85:6f:62:db:
         33:f2:03:40:76:ce:0a:56:98:69:c2:11:74:94:81:a6:79:47:
         00:43:a5:46:9d:07:23:dd:10:12:44:42:ac:7c:82:fc:83:49:
         8b:80:d8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:05:48 2025 by rpki-client