Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
File:                     7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer (raw, json)
Hash identifier:          dzIU/XuZdeyhRnoWgeCHSGuJ/buPjvfaVSdnAUZ8I00=
Subject key identifier:   2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584AB7142B54CAEC4263A7629500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Aug 2025 19:34:20 +0000
Certificate not after:    Thu 04 Nov 2027 19:34:20 +0000
Subordinate resources:    AS: 7925
                          IP: 129.71.0.0/16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:14:2b:54:ca:ec:42:63:a7:62:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Aug  1 19:34:20 2025 GMT
            Not After : Nov  4 19:34:20 2027 GMT
        Subject: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:e4:85:8d:8f:9c:44:fc:ea:ce:e8:99:a7:
                    f7:31:25:da:be:34:83:1d:b7:19:02:ca:41:f4:80:
                    5b:c6:91:9f:1d:e4:45:a5:eb:77:df:a0:16:12:28:
                    0e:43:85:b8:2d:da:de:50:40:cb:cf:9d:c2:84:cb:
                    33:c7:c5:b4:9d:ed:cd:ae:d0:0e:fb:b5:4e:32:a7:
                    86:0b:54:de:b8:3b:df:9a:0d:9c:26:1d:a4:33:94:
                    04:89:32:1f:01:08:f3:85:87:6b:3d:a1:99:12:6e:
                    f5:09:6c:21:30:bf:df:75:ec:ca:b4:ad:68:69:5d:
                    c9:d8:18:5d:d3:fc:70:fc:f4:79:23:c0:d8:e2:48:
                    d9:72:5d:96:88:3c:36:4e:ad:80:f8:65:dc:0e:12:
                    3c:65:98:e0:05:de:cb:83:9e:dd:9e:fb:40:ff:9a:
                    17:1e:37:16:c4:23:70:b7:28:11:f0:ce:75:2f:59:
                    e9:13:f7:6a:ec:d4:18:43:13:89:fc:7b:78:86:d8:
                    e5:8f:5d:16:df:71:04:20:5d:6b:23:15:c0:4f:1a:
                    e2:8e:be:9a:2f:a9:b6:a7:21:35:65:08:76:fa:e8:
                    ee:91:3a:ef:51:56:8f:c6:cd:e3:07:66:7c:81:8b:
                    0f:ee:a4:3b:42:87:5e:5e:10:1a:50:44:a7:70:7f:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.71.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7925

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:8e:df:65:ce:91:25:c7:01:d4:99:f1:62:67:f2:3d:bb:
         a1:33:b9:0c:a2:0e:9d:cd:aa:ef:9c:89:b2:53:c1:7e:a4:90:
         40:c7:ac:dd:04:25:71:ba:b8:e6:fc:35:57:f7:8a:73:b7:c3:
         f2:d9:fa:ea:6b:97:22:6a:8c:d5:67:e3:55:21:9d:78:b6:1d:
         6a:03:d8:e7:e1:34:1c:3f:51:8f:1c:ee:df:93:b4:20:3a:3a:
         e8:70:93:7b:8e:77:ea:a7:60:19:d6:e0:f5:29:12:43:03:58:
         de:52:c0:7e:da:c6:1f:72:af:f9:3c:5c:eb:b7:9b:ac:8d:a3:
         21:6f:6e:a4:77:3d:83:03:f2:98:79:2f:3c:38:de:4b:ca:16:
         22:7b:7b:0f:38:cc:30:19:33:df:31:35:de:c5:85:64:b2:18:
         53:0e:9c:ad:c2:58:cb:bd:b3:b8:ce:1c:c1:b1:18:0c:f8:0a:
         4f:f8:34:c2:00:ed:ce:72:df:cf:56:ce:23:d0:c2:20:28:4c:
         76:dd:71:64:e0:9b:d7:49:70:d8:50:7e:4d:02:a4:07:74:98:
         0d:5c:87:a3:76:3f:bb:4d:1e:5c:fc:60:f0:92:38:a9:0e:37:
         0d:a8:e9:75:fa:87:40:db:a2:32:7f:66:61:0c:9e:b9:ed:d4:
         7e:33:a2:3b
-----BEGIN CERTIFICATE-----
MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEq3FCtUyuxCY6dilQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI1MDgwMTE5MzQyMFoXDTI3MTEwNDE5MzQyMFowLzEtMCsGA1UEAxMk
N2JkZDNjMTEtNjU4My00ZGM0LWEwNWItYmJkY2RmZGNkMjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcHkhY2PnET86s7omaf3MSXavjSDHbcZAspB
9IBbxpGfHeRFpet336AWEigOQ4W4LdreUEDLz53ChMszx8W0ne3NrtAO+7VOMqeG
C1TeuDvfmg2cJh2kM5QEiTIfAQjzhYdrPaGZEm71CWwhML/fdezKtK1oaV3J2Bhd
0/xw/PR5I8DY4kjZcl2WiDw2Tq2A+GXcDhI8ZZjgBd7Lg57dnvtA/5oXHjcWxCNw
tygR8M51L1npE/dq7NQYQxOJ/Ht4htjlj10W33EEIF1rIxXATxrijr6aL6m2pyE1
ZQh2+ujukTrvUVaPxs3jB2Z8gYsP7qQ7QodeXhAaUESncH/KzQIDAQABo4IEGTCC
BBUwHQYDVR0OBBYEFCoDtAGlUSy/wxsugM+EQ19KgDsgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83
YmRkM2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRjZGZkY2QyNzIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzdiZGQzYzExLTY1ODMtNGRjNC1h
MDViLWJiZGNkZmRjZDI3Mi83YmRkM2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRjZGZk
Y2QyNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCBRzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIe
9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCOr47fZc6RJccB1JnxYmfyPbuhM7kMog6dzarvnImyU8F+pJBA
x6zdBCVxurjm/DVX94pzt8Py2frqa5ciaozVZ+NVIZ14th1qA9jn4TQcP1GPHO7f
k7QgOjrocJN7jnfqp2AZ1uD1KRJDA1jeUsB+2sYfcq/5PFzrt5usjaMhb26kdz2D
A/KYeS88ON5LyhYie3sPOMwwGTPfMTXexYVkshhTDpytwljLvbO4zhzBsRgM+ApP
+DTCAO3Oct/PVs4j0MIgKEx23XFk4JvXSXDYUH5NAqQHdJgNXIejdj+7TR5c/GDw
kjipDjcNqOl1+odA26Iyf2ZhDJ657dR+M6I7
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:15 2025 by rpki-client