Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer
File:                     e7a41e2a-3e61-430a-b260-195a50cc7fbd.cer (raw, json)
Hash identifier:          eDKfHJvHMy/7rPBAExGaUF4S1a+eNzTTn3TUSbOEAS0=
Subject key identifier:   44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A38418CE322262D414E204F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Jun 2025 09:18:06 +0000
Certificate not after:    Mon 20 Sep 2027 09:18:06 +0000
Subordinate resources:    AS: 10363
                          AS: 10668
                          AS: 33265
                          IP: 192.104.182.0 -- 192.104.231.255
                          IP: 198.175.232.0/23
                          IP: 204.238.114.0/24
                          IP: 209.96.0.0 -- 209.96.95.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:41:8c:e3:22:26:2d:41:4e:20:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Jun 17 09:18:06 2025 GMT
            Not After : Sep 20 09:18:06 2027 GMT
        Subject: CN=e7a41e2a-3e61-430a-b260-195a50cc7fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:02:30:ee:f8:9c:21:6b:e1:82:0f:58:2d:
                    b2:77:0c:f5:c6:5d:3c:95:bd:82:04:a6:92:7d:13:
                    4c:1d:55:e3:de:33:71:c2:bb:e6:95:99:c0:3f:fa:
                    b7:8b:4b:02:0a:df:79:ae:5d:c4:38:a8:5c:48:d7:
                    c8:ee:97:c5:56:d9:96:58:59:99:34:f7:4c:88:1c:
                    29:62:b2:6f:19:a1:2e:f1:3c:67:69:ed:a6:33:6e:
                    bf:6a:d4:8f:cb:0f:e8:0a:77:82:2c:12:fc:cd:b1:
                    19:8a:3c:71:c6:5b:e2:ef:76:b6:7f:d7:9e:36:3b:
                    68:92:51:51:49:03:c1:f9:01:ca:0f:69:7f:78:e8:
                    c0:79:11:43:5e:49:76:57:72:14:8d:da:a3:dc:6b:
                    3e:a1:35:c1:89:d7:c4:05:d8:d6:4f:a7:82:51:8a:
                    81:ec:ec:d3:e7:5e:78:5b:1c:cb:44:8d:cf:a4:29:
                    c1:60:90:40:d5:90:2b:f8:f5:af:52:ea:c6:f2:cc:
                    65:a7:a7:59:6c:f1:56:4e:cf:b0:2e:db:ba:e2:fa:
                    c8:50:27:f8:b7:a2:2b:c0:e8:d8:4f:d6:1c:b8:58:
                    ba:be:c3:d1:19:30:aa:2d:a7:71:e9:38:51:98:dd:
                    c0:c7:8f:28:87:e3:32:9e:66:c4:b9:7b:47:02:7e:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C0:A8:3A:16:E4:C5:E9:9D:45:C5:63:B4:63:2C:26:CF:5D:EB:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7a41e2a-3e61-430a-b260-195a50cc7fbd/e7a41e2a-3e61-430a-b260-195a50cc7fbd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.182.0-192.104.231.255
                  198.175.232.0/23
                  204.238.114.0/24
                  209.96.0.0-209.96.95.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10363
                  10668
                  33265

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:b3:6f:c1:66:24:65:b0:cc:1f:49:e1:8b:4d:81:73:f4:
         5f:9b:c5:57:f6:e4:1e:e6:82:09:ed:f4:e9:21:06:cf:7b:8a:
         38:4b:0f:60:6f:80:54:66:f9:e4:c7:0c:93:ea:91:eb:64:c3:
         46:5d:8e:6e:77:16:aa:a1:d0:2e:73:e2:12:17:e3:9a:49:19:
         33:9a:09:bf:14:d1:dd:91:b0:63:ea:cd:7e:5b:49:d1:8a:a4:
         3e:73:7b:6c:f8:1e:7a:03:7f:ef:76:24:b2:3d:d8:3a:8d:a0:
         0d:61:22:2b:1a:0b:1a:69:bf:ee:90:3b:20:48:28:93:31:4d:
         d0:1b:2c:bd:3b:21:e4:4e:49:a2:10:1e:52:61:08:b0:1d:23:
         79:4c:cf:3c:8c:c8:4d:48:79:6d:e4:e3:b4:15:f0:ac:2c:87:
         c3:a6:a0:76:c6:b5:be:7c:0c:52:df:90:ca:be:2d:9c:ad:e4:
         d3:c1:6b:38:74:13:ca:85:4e:3b:07:e4:ea:54:fc:da:bb:90:
         54:46:e9:22:0a:bd:07:3f:41:60:9f:26:cf:b0:24:41:aa:9a:
         1f:20:e6:0a:7c:93:a0:81:6b:3f:d2:36:c9:7c:d4:34:da:8f:
         c2:79:dc:b5:55:a1:f6:87:de:fd:12:4e:fa:3a:15:13:3e:e8:
         75:6c:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:45:41 2025 by rpki-client