Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
File:                     bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer (raw, json)
Hash identifier:          B4SQjfi5lZjiFISyDMo1ohq3KHBU4nhecWq4RHVqr6s=
Subject key identifier:   2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584AB3738DD9D79E8F51A4D56680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Jul 2025 12:23:17 +0000
Certificate not after:    Wed 03 Nov 2027 12:23:17 +0000
Subordinate resources:    IP: 162.82.0.0/16
                          IP: 192.111.211.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:73:8d:d9:d7:9e:8f:51:a4:d5:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Jul 31 12:23:17 2025 GMT
            Not After : Nov  3 12:23:17 2027 GMT
        Subject: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:fb:98:54:d5:5c:b0:76:f6:cd:43:a4:27:
                    c0:ba:f0:68:52:e2:09:8d:a7:5a:d6:b1:47:86:da:
                    2b:f9:4a:d5:d9:fc:42:ea:f5:07:9e:0f:a6:56:5c:
                    0d:6c:2e:56:98:75:9f:49:20:d7:a9:8e:2a:92:d0:
                    db:74:f7:bb:4b:67:52:13:c1:9d:4c:67:6f:59:be:
                    7a:e0:f3:bd:d6:c9:27:6d:4d:cf:ae:a4:6f:ff:6f:
                    9b:d2:5f:71:ea:b2:ad:85:62:9e:ea:1a:72:d1:92:
                    fd:66:30:9d:a8:10:4b:95:1b:17:0f:02:10:e8:36:
                    7d:d0:a8:ff:e8:36:ec:9a:15:49:4a:72:7f:27:20:
                    06:be:b9:74:03:3a:58:13:0a:7d:88:26:9f:28:8d:
                    23:d0:eb:2f:17:bd:8b:31:20:e8:f0:b4:85:75:60:
                    37:80:57:5b:8e:0f:f9:92:f4:8a:13:22:db:3a:c1:
                    50:6b:0a:73:4a:06:37:71:e1:d2:13:7b:1b:7c:56:
                    0c:46:7d:a6:a3:74:16:4a:1e:09:fe:c7:a9:69:6a:
                    96:a1:ec:80:49:79:05:20:59:bd:d2:71:b2:3a:e8:
                    dd:80:67:5d:66:13:9d:d5:b8:90:1a:37:8e:96:32:
                    3b:be:7f:f8:e2:00:96:b5:f1:0a:28:68:cd:76:b7:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.82.0.0/16
                  192.111.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:b2:d3:d4:9b:c3:f4:a4:92:9c:41:54:b2:31:b6:47:d0:
         72:5b:ea:be:3b:28:67:35:bf:46:53:b2:5c:8e:15:9f:b8:80:
         90:f6:c7:c1:08:32:51:fd:d0:52:da:16:36:67:f5:24:95:b7:
         48:0b:88:bb:4b:a3:8a:0e:2e:f1:b4:f7:35:4d:f9:f3:f9:06:
         cb:b6:83:4c:f3:b4:80:ad:29:93:7b:5e:45:41:9f:ad:4a:31:
         44:18:66:a2:c3:8b:bd:fb:2f:25:7b:1b:92:3b:55:b9:19:e9:
         59:49:c3:a7:b4:8a:52:8d:5b:c1:de:d7:30:48:30:85:af:7a:
         a0:02:1c:87:06:9a:68:77:84:64:8d:76:ed:3e:43:68:ad:a1:
         29:cb:d9:fe:b0:58:cb:e3:61:4e:5e:c4:3b:17:5a:23:49:60:
         0e:76:f3:52:26:95:8e:7f:ba:bd:35:db:91:b8:74:b7:62:ad:
         4d:91:4a:d2:49:8e:8e:dc:21:63:78:56:2d:a9:de:2f:d5:db:
         e7:3b:73:85:60:a1:2f:83:3a:27:c2:44:bf:35:c6:1f:48:7a:
         fb:e5:34:2d:b3:b7:80:ad:18:fe:0b:2f:14:00:74:4d:cc:fd:
         96:29:3d:86:ad:3c:b8:7a:a5:af:e0:e5:02:80:e8:b0:f1:b5:
         4c:ed:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:11 2025 by rpki-client