Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
File:                     c705fdf0-e483-49d9-8713-1cc6aa85db55.cer (raw, json)
Hash identifier:          /my8rjZ+CYaV4p0jt8szMm3uX/lq13DnUNydupRjSYQ=
Subject key identifier:   6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584AAF122DB02D6295258216D600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Jul 2025 22:43:51 +0000
Certificate not after:    Mon 01 Nov 2027 22:43:51 +0000
Subordinate resources:    IP: 148.59.96.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:12:2d:b0:2d:62:95:25:82:16:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Jul 29 22:43:51 2025 GMT
            Not After : Nov  1 22:43:51 2027 GMT
        Subject: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:0a:00:2a:21:c7:98:26:87:a6:28:7a:59:
                    13:48:a1:1b:fe:87:9d:c3:21:92:30:e3:bc:5f:db:
                    3e:2b:ec:5a:31:f5:41:d4:d2:5f:4f:10:4e:f7:57:
                    f2:11:b4:40:a6:a3:43:77:bb:b6:00:1b:0c:c1:3f:
                    fb:bd:1e:8a:85:ba:7c:ef:4a:69:ba:ae:a7:94:72:
                    71:c5:31:7c:50:07:07:2d:b8:3a:69:cd:36:3f:c8:
                    36:a5:56:3b:42:48:56:03:7e:19:d9:05:da:69:67:
                    57:2c:97:21:c9:84:85:3f:d8:c7:9e:f9:e2:6e:df:
                    05:ba:d6:06:b7:7c:a0:67:dc:f5:ed:ab:c1:6c:fb:
                    d8:12:31:a9:7f:11:1d:6f:4c:21:86:a7:e1:08:d1:
                    14:74:c7:39:19:b7:8e:45:6c:6f:6d:48:d5:a9:34:
                    10:c2:15:11:cf:52:eb:59:f7:bf:bb:cb:7c:87:de:
                    6b:29:41:d6:d4:c6:62:f1:a3:25:54:df:28:0e:e4:
                    42:3f:15:22:a5:3b:2f:c5:f1:b3:e8:44:47:75:f8:
                    ed:64:1e:20:a0:04:1e:13:34:cf:b2:dd:87:f8:b8:
                    a4:91:eb:76:95:1f:d7:5e:6e:4a:66:b6:33:1e:37:
                    fc:d8:96:eb:7c:d9:46:c7:ad:a9:9a:2e:f4:9f:4c:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:41:53:9f:5e:98:4e:38:7d:35:89:a0:c1:d5:dd:73:bc:
         84:6b:84:43:45:d3:d4:97:a8:45:71:36:91:f9:d6:79:f3:1b:
         3d:90:4d:61:8f:ec:38:50:58:22:ca:36:c8:af:8b:60:3f:63:
         bc:10:56:2c:0a:23:c2:87:05:10:4e:9b:34:f3:f3:26:5c:5e:
         e5:09:62:a7:cf:d8:4d:1f:c2:2c:c5:20:2d:b9:0d:d1:bd:9d:
         21:bd:14:50:5a:0d:af:d7:97:dc:f6:4a:c5:2a:83:99:4a:5b:
         14:8c:cf:5a:78:b6:7b:bb:37:fe:0a:e7:10:2c:99:c9:d6:0d:
         45:b8:da:23:5c:21:e0:63:bd:8a:ca:d3:dd:77:d1:9e:71:5d:
         bf:8f:7b:a0:17:0a:4b:b2:7a:bb:0d:36:6e:60:6f:35:ac:67:
         17:f1:39:23:a0:48:0b:8a:a3:c4:8b:49:48:10:8b:fb:27:2d:
         d4:54:9b:96:ec:55:7b:5c:4c:e8:3e:d4:c3:e6:d6:8c:7d:e7:
         48:fc:fe:fe:b1:f6:7e:6d:f7:2f:69:65:c9:60:bb:ab:c9:7f:
         2f:3a:19:29:27:5a:59:9e:48:87:7f:0f:09:b6:5a:23:67:48:
         06:b3:93:99:37:63:96:14:a4:24:cf:11:35:87:fb:15:b0:8a:
         ee:9f:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:31 2025 by rpki-client