Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d.cer
File:                     2037352b-8ef1-42c4-98c9-d4986a32093d.cer (raw, json)
Hash identifier:          z7NCJLtAZYWuF2YdMGvbsWi27KgzQhv5Hy3AkaiMCEA=
Subject key identifier:   06:E5:34:42:C2:AB:00:06:CC:E9:76:E2:EC:CE:F4:5A:93:7E:5C:DF
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584A900F813CD8D7997F01647060
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/2037352b-8ef1-42c4-98c9-d4986a32093d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 18 Jul 2025 20:08:24 +0000
Certificate not after:    Thu 21 Oct 2027 20:08:24 +0000
Subordinate resources:    AS: 397836
                          IP: 98.143.184.0/21
                          IP: 104.153.244.0/22
                          IP: 203.55.71.0/24
                          IP: 209.236.128.0/18
                          IP: 216.169.150.0/24
                          IP: 2606:5bc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:0f:81:3c:d8:d7:99:7f:01:64:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Jul 18 20:08:24 2025 GMT
            Not After : Oct 21 20:08:24 2027 GMT
        Subject: CN=2037352b-8ef1-42c4-98c9-d4986a32093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:ae:d3:1a:78:b5:be:80:9f:85:21:c9:20:
                    63:61:53:bc:20:5f:0f:9b:57:5b:96:0a:2a:e7:2d:
                    7a:ff:d1:42:e9:42:eb:f0:29:bc:0d:ae:0d:98:c0:
                    38:0d:fa:44:15:2b:f8:b6:27:34:ac:3b:ab:ee:0f:
                    aa:64:d7:af:a7:d8:0d:27:fb:d0:3c:ac:df:f2:f8:
                    6e:ab:6c:85:cf:16:cd:e7:a2:ed:f2:1d:6c:32:43:
                    fb:d9:be:b9:3e:75:17:5d:a9:2e:61:96:c1:c9:6d:
                    2b:f6:eb:fe:a4:b4:5b:71:c7:3a:ee:70:48:3b:93:
                    21:bf:b0:92:6a:6c:40:0d:9d:13:fa:43:58:93:d9:
                    cc:b4:6a:78:7b:8f:e6:c0:3b:5d:9f:0d:a2:e9:bd:
                    79:8d:0a:2e:9d:ab:5b:70:08:1e:14:f1:d4:5d:82:
                    94:5f:8b:e1:09:2f:c7:e5:d2:4d:27:3d:a1:57:2c:
                    d0:92:dc:73:7f:f8:34:b4:34:73:39:33:b2:8c:e8:
                    04:fe:68:c6:f6:77:9d:21:27:64:dd:d5:6a:11:5a:
                    7c:0d:54:ce:bd:80:ae:ee:2f:ca:08:4d:e6:ec:8c:
                    04:b3:4e:46:97:77:64:4e:68:50:dd:49:10:8c:4c:
                    37:c3:68:ed:4f:f0:68:18:88:ba:a8:57:1d:ce:58:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:34:42:C2:AB:00:06:CC:E9:76:E2:EC:CE:F4:5A:93:7E:5C:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/2037352b-8ef1-42c4-98c9-d4986a32093d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.184.0/21
                  104.153.244.0/22
                  203.55.71.0/24
                  209.236.128.0/18
                  216.169.150.0/24
                IPv6:
                  2606:5bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397836

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:b2:25:29:7c:03:b6:6a:00:84:b8:be:b3:2f:75:00:6f:
         8b:e2:cb:03:d4:8d:f6:9e:b3:eb:9f:8b:26:f5:fc:da:1f:d1:
         0a:4f:27:5d:6b:c2:df:68:80:00:f9:f0:4c:ad:5f:2e:de:16:
         99:78:b4:8b:d8:78:31:e8:3e:d7:cc:77:fc:33:58:ca:10:d1:
         b5:20:1f:65:7f:4d:13:3c:a2:4d:01:ef:3a:49:fc:12:a9:20:
         26:ab:af:dd:52:04:7b:e4:1c:ef:dd:a5:4d:37:42:c6:f5:53:
         5e:3b:51:a1:4e:27:d2:1b:4e:16:ca:2c:e5:b9:1e:a6:17:0e:
         5e:4f:a3:00:22:6e:1e:f3:1c:1f:34:8f:bd:c8:28:a1:97:4d:
         cd:60:93:f0:3e:0c:dd:10:78:a8:13:2b:c8:5f:a6:ba:0d:81:
         3a:2f:41:29:c3:34:70:d5:dc:bd:fa:72:02:bf:dd:c3:0e:20:
         8c:68:64:a8:ad:1a:95:1c:e6:a9:e1:1f:b6:c5:c2:ba:0a:4e:
         91:ed:a6:a5:62:9e:a3:26:86:83:4e:40:66:9a:57:0a:df:c4:
         95:04:66:01:1b:2c:c5:e7:45:5b:83:57:23:2f:df:9b:b2:fe:
         2c:d5:64:a1:aa:65:22:5f:4d:ab:d3:d0:78:90:ec:52:1d:65:
         41:3e:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:31 2025 by rpki-client