Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6.cer
File:                     bdc4d216-9fdc-4d71-91cb-90828e6718a6.cer (raw, json)
Hash identifier:          t6I3+NHQDg/4W013U1YdIIVFEcOP8q8jZSVPlf8PlW8=
Subject key identifier:   8B:BC:6A:83:C6:E1:F9:22:AB:25:AB:9B:27:FE:25:8B:E7:C9:4C:73
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584ABA793BBC13ADAA11DB493200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/bdc4d216-9fdc-4d71-91cb-90828e6718a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Aug 2025 00:45:23 +0000
Certificate not after:    Sat 06 Nov 2027 00:45:23 +0000
Subordinate resources:    AS: 13578
                          IP: 199.188.48.0/21
                          IP: 2602:808:5000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:79:3b:bc:13:ad:aa:11:db:49:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  3 00:45:23 2025 GMT
            Not After : Nov  6 00:45:23 2027 GMT
        Subject: CN=bdc4d216-9fdc-4d71-91cb-90828e6718a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:91:ea:38:aa:1b:0a:a3:84:7f:91:78:f9:
                    ea:e1:a7:69:ce:45:81:42:de:09:9d:35:74:f8:4c:
                    0e:21:db:19:88:f1:d8:a7:fa:b6:6d:8f:d4:58:3b:
                    b5:07:88:78:3e:4d:a5:08:e3:72:0d:85:28:c5:22:
                    0f:bc:16:42:d8:8d:37:df:67:9b:de:29:65:90:e3:
                    c7:01:2f:04:cc:6d:8e:35:b2:79:e8:fb:4a:cd:6c:
                    d3:44:80:a7:6b:74:44:ea:2a:c8:b0:db:eb:70:c0:
                    bd:50:0f:a5:e6:a6:62:74:83:d5:71:05:bd:64:da:
                    94:05:08:66:0e:1e:22:b2:68:c4:08:c1:84:26:31:
                    a3:76:d4:ed:21:32:75:dc:3c:02:56:f1:40:4f:52:
                    e6:43:14:ec:0f:7a:dd:f4:93:fa:b5:2d:0c:7f:e9:
                    c7:69:48:ca:0c:19:00:b3:5d:74:d7:fa:b1:6e:8b:
                    b5:f8:77:bd:7d:73:d2:ed:b9:42:c3:c8:81:fd:aa:
                    d1:b4:e2:18:f9:f8:04:4f:88:fc:0e:8a:4b:57:c6:
                    49:cd:4c:8a:49:69:ac:3c:18:86:9f:3a:2d:fc:1c:
                    37:9f:58:f8:20:a0:e9:b1:a4:6b:3d:f9:01:ec:37:
                    cf:ce:02:f0:f4:13:1b:27:d9:34:dc:c5:ee:05:03:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:6A:83:C6:E1:F9:22:AB:25:AB:9B:27:FE:25:8B:E7:C9:4C:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdc4d216-9fdc-4d71-91cb-90828e6718a6/bdc4d216-9fdc-4d71-91cb-90828e6718a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.48.0/21
                IPv6:
                  2602:808:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13578

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:f9:c6:8e:80:01:c7:c9:14:fb:09:14:45:d0:21:e9:d4:
         23:5d:96:56:f4:bc:e9:e9:af:8e:b4:f0:73:b3:8f:0c:57:d9:
         65:d8:8c:af:bf:46:ce:df:8d:04:94:f8:ae:a9:d1:7b:8e:78:
         5f:7f:50:7f:60:52:4a:11:34:72:8d:3b:d4:b9:ea:ea:2c:b3:
         97:f4:73:96:2f:18:9a:fd:0a:a9:e2:55:95:a6:ad:8c:f4:71:
         4c:7f:7b:0b:a4:e0:22:ca:71:55:4b:e7:ed:c8:48:44:ae:b5:
         30:85:27:5a:6a:d8:c2:53:02:5f:41:2f:e8:03:f2:13:3f:18:
         d2:d4:c5:82:11:42:2d:ef:aa:81:6b:15:c4:40:67:77:3c:71:
         f0:22:ac:6c:32:44:83:78:45:fa:ca:68:e9:e5:50:2f:d8:11:
         36:49:2d:25:b7:fe:e1:a6:14:3a:0f:0b:27:9e:91:31:7c:89:
         87:da:0d:80:a4:c5:1b:40:ef:06:96:99:7b:47:c8:f7:10:c6:
         03:fa:cf:c5:91:7a:fe:20:ee:4c:af:ac:4a:65:3c:d6:62:0d:
         bb:49:08:c7:75:9a:0a:76:d1:5f:8f:8a:52:5e:29:38:0d:51:
         e9:7b:9f:4d:68:38:f9:0c:33:46:8c:9b:06:b3:87:ff:5a:e9:
         fb:de:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:00 2025 by rpki-client