Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
File:                     d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer (raw, json)
Hash identifier:          nOXHFed5Txp4frYm/ByEBSup+AbS0BrIy485ZC6GRNM=
Subject key identifier:   D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584BA9E7C9F1011B3A296BFE6F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Oct 2025 19:06:20 +0000
Certificate not after:    Sun 13 Jun 2027 12:46:44 +0000
Subordinate resources:    AS: 22779
                          AS: 53733
                          IP: 148.66.38.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:e7:c9:f1:01:1b:3a:29:6b:fe:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Oct 27 19:06:20 2025 GMT
            Not After : Jun 13 12:46:44 2027 GMT
        Subject: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:0c:65:49:2c:0c:4a:d7:fe:24:d8:44:9b:
                    05:23:4a:e0:b7:2c:85:b4:81:58:b8:3a:3c:69:78:
                    37:34:20:44:70:da:c8:3f:46:60:92:e9:91:16:ba:
                    e3:17:c3:2c:7d:3d:0d:b9:71:56:ae:a4:92:8f:32:
                    de:dc:ad:46:d5:db:9e:8a:17:2f:85:0b:f5:b6:ca:
                    1d:32:a6:ff:f9:81:f1:9b:7b:5f:50:93:74:16:ec:
                    02:f3:a7:ee:34:dd:85:a6:30:f4:ef:1c:b1:91:42:
                    22:71:7c:95:ba:c0:61:4c:87:e1:42:13:bb:b8:1e:
                    8f:95:bf:2a:4b:c1:45:ed:bd:22:c1:78:e0:e4:fb:
                    78:35:5f:56:d3:a8:fa:25:d6:ad:0b:94:ba:77:20:
                    36:10:23:56:ef:78:64:bd:7d:e8:8f:36:15:7d:74:
                    49:51:4c:45:eb:50:05:fb:4e:28:a1:df:b1:c0:27:
                    d6:37:6e:7f:e9:55:b4:69:b8:d3:fb:8c:36:66:f8:
                    e8:ba:b8:5b:dc:8a:df:d1:fd:7d:a8:28:f9:7c:c2:
                    63:9d:53:d1:0d:36:45:68:63:1d:71:21:15:ed:35:
                    b4:38:32:a7:42:70:b3:c9:b8:d7:31:00:15:57:c3:
                    a6:36:a7:a4:9e:f8:94:24:fe:1c:af:45:fb:89:c7:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.66.38.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22779
                  53733

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:a5:10:97:6b:87:5c:34:d6:c1:08:e9:dd:11:f6:61:da:
         94:c6:38:c9:9a:87:5a:37:65:b6:ef:f0:80:b8:82:a1:02:48:
         a6:d6:ae:4d:87:86:3d:82:57:a8:81:8f:01:a6:8b:19:14:80:
         b8:c0:21:b6:af:3b:1a:66:82:ff:b6:a0:7d:88:61:8d:90:03:
         d5:2a:42:73:af:4d:42:11:58:c9:c3:87:84:2d:85:a7:a7:9a:
         7e:5c:75:33:53:5e:4d:15:bf:34:35:47:4e:73:ed:71:77:bd:
         91:d9:41:5a:d4:f6:86:03:85:e4:5c:b9:bf:f2:18:0f:f3:ed:
         ad:32:84:19:de:3a:d0:2e:5a:aa:cb:35:9e:a6:5d:86:71:dc:
         55:a8:d4:38:93:6d:c6:85:15:ab:63:b6:57:a6:93:d0:2d:7d:
         27:a9:36:39:e7:a6:a7:9b:25:2e:af:f8:06:39:71:cd:fe:2a:
         d5:57:71:06:8e:c5:a4:d7:74:0e:a8:0a:8a:af:42:b3:20:62:
         94:86:a6:72:50:2a:02:6b:73:50:60:9a:44:40:a4:08:e6:d5:
         f7:bc:71:13:cc:80:51:b1:ee:fb:b1:65:6f:40:d0:9f:81:0a:
         fd:77:f3:78:a4:9d:32:b5:34:37:0d:3e:da:b0:6c:c2:12:c8:
         c7:cb:8e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:31 2025 by rpki-client