Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/76a61541-ef54-4a9d-96a5-2bc69e53deaf.cer
File:                     76a61541-ef54-4a9d-96a5-2bc69e53deaf.cer (raw, json)
Hash identifier:          dERUUki1sBASG40f3Onmu0QmGY76oUPLYPfnCrPbD1g=
Subject key identifier:   2D:BD:7B:CC:C6:8D:67:73:67:BF:80:56:3C:D9:43:73:67:F2:15:98
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584A7A6E1A6D7D73E213997B2200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/76a61541-ef54-4a9d-96a5-2bc69e53deaf/76a61541-ef54-4a9d-96a5-2bc69e53deaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/76a61541-ef54-4a9d-96a5-2bc69e53deaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Jul 2025 02:11:14 +0000
Certificate not after:    Thu 14 Oct 2027 02:11:14 +0000
Subordinate resources:    AS: 401807
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:6e:1a:6d:7d:73:e2:13:99:7b:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Jul 11 02:11:14 2025 GMT
            Not After : Oct 14 02:11:14 2027 GMT
        Subject: CN=76a61541-ef54-4a9d-96a5-2bc69e53deaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:27:85:11:db:79:61:30:38:7b:15:96:89:2e:
                    fd:9f:94:98:cb:3b:ca:6d:f4:75:a7:6b:d2:62:b5:
                    bd:59:dd:1d:a2:9c:62:84:8a:e2:5c:d2:85:40:88:
                    f4:f8:8f:0b:83:94:54:2c:5a:ed:e5:35:38:63:4f:
                    03:7a:46:31:34:98:96:90:36:e0:d3:31:33:d4:44:
                    94:dc:1a:a6:fc:27:05:45:a1:a1:cf:ea:e6:2e:79:
                    31:b9:1c:8d:3e:27:1f:38:11:26:61:2c:b7:b5:b2:
                    c8:47:68:16:f6:42:18:ee:34:cb:55:d3:de:a5:db:
                    79:d5:e8:b5:75:32:f0:7b:cc:77:6f:6d:a1:b3:de:
                    57:5d:9c:1a:b0:fa:bc:bb:cd:28:34:50:e9:8b:e2:
                    26:78:16:02:d2:3f:13:63:d9:ec:29:9c:a0:29:d6:
                    4b:02:eb:66:5d:3f:6f:33:98:76:f5:7f:66:cd:b2:
                    9d:c9:9a:29:f3:8c:bf:08:d3:06:b6:77:31:5b:2c:
                    58:c9:8c:fe:f2:ad:a8:87:cc:be:7a:49:75:6d:bd:
                    8e:c9:9b:fb:ec:58:da:80:c5:6e:cb:de:22:b7:55:
                    aa:33:f7:8d:ee:81:6a:b1:48:6c:b1:2b:c5:a1:78:
                    de:a9:d9:fd:ca:26:a4:42:1e:15:91:56:c7:be:7a:
                    a6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:7B:CC:C6:8D:67:73:67:BF:80:56:3C:D9:43:73:67:F2:15:98
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/76a61541-ef54-4a9d-96a5-2bc69e53deaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/76a61541-ef54-4a9d-96a5-2bc69e53deaf/76a61541-ef54-4a9d-96a5-2bc69e53deaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401807

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:61:4e:f3:da:bf:e0:0d:fd:f4:98:b8:e5:f0:78:f3:42:22:
         7d:47:cc:ec:78:2a:99:b8:be:c9:73:2b:50:2e:af:7d:d3:d7:
         87:51:9b:78:bc:b8:ea:de:5a:9b:cf:26:54:0a:19:6a:fc:d5:
         4d:0e:2b:62:d9:cf:9d:b0:df:67:f0:f4:c9:da:d0:4f:2e:49:
         8b:7b:3a:17:56:a5:26:d5:8e:68:c8:d5:4b:e4:96:88:4d:67:
         1e:bb:87:58:48:68:ed:f1:bf:b0:60:93:ed:01:39:e5:4f:4d:
         31:24:ae:96:e2:10:18:cd:49:33:15:84:dc:f9:23:ac:d1:f6:
         6f:75:7d:76:03:e9:d3:e7:22:49:7e:ed:27:a3:1c:69:f4:8e:
         3a:36:90:85:2d:b4:6e:ac:91:92:00:2a:cb:43:8c:70:13:c3:
         b2:21:79:93:72:9c:1e:d5:6e:39:37:65:06:2d:53:9d:10:2c:
         d8:fd:f7:94:c9:36:17:ae:7f:89:e2:b7:05:01:f8:a9:e6:c2:
         26:96:bd:8b:4c:23:41:71:c4:3d:f2:99:55:d2:a0:80:e9:10:
         09:cd:2e:d0:32:1c:8b:9d:06:dd:e4:d2:73:9f:18:2b:1d:ef:
         31:b1:16:74:de:90:ff:8d:7a:a9:dc:7c:a3:a7:2b:37:bc:17:
         81:98:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:05 2025 by rpki-client