Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer
File:                     89ABDCD8A98A23AF2521330777C439C50B83C0E3.cer (raw, json)
Hash identifier:          G4Ey1FSIv0KRIPB/4TGTFanypWiWrSrEvlbTuw5wuEY=
Subject key identifier:   89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       15645156571618093F20FF1231161A5597651A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.mft
caRepository:             rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 16 Jul 2025 22:36:59 +0000
Certificate not after:    Wed 15 Jul 2026 22:41:59 +0000
Subordinate resources:    IP: 2a05:dfc6::/32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:51:56:57:16:18:09:3f:20:ff:12:31:16:1a:55:97:65:1a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 16 22:36:59 2025 GMT
            Not After : Jul 15 22:41:59 2026 GMT
        Subject: CN=89ABDCD8A98A23AF2521330777C439C50B83C0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cf:d1:9b:f9:8f:2d:da:ca:9f:a5:cd:bd:ee:
                    fe:a6:f7:56:58:bc:c8:ab:94:88:c4:72:c6:b6:65:
                    a0:3d:0b:19:1a:20:45:0d:4d:f6:92:81:68:84:44:
                    bc:e6:d4:fe:46:2c:f9:b4:48:fb:d0:2f:b3:b0:58:
                    43:31:d0:69:96:b4:ed:3b:3c:c3:5e:11:71:a1:04:
                    47:c7:7c:98:3d:d6:87:3f:16:52:98:b5:e6:45:64:
                    57:f2:6b:56:05:55:91:f1:c8:e1:32:b1:9f:94:22:
                    73:21:98:37:ec:39:f2:77:0a:b0:2a:02:ee:39:47:
                    f0:53:22:37:3e:8d:a5:ef:cf:f9:aa:ab:d0:56:f0:
                    9c:48:25:d5:84:d7:96:21:7d:bc:c5:d0:82:30:dd:
                    8f:26:8b:83:8e:81:12:9f:f3:3b:6a:76:df:14:5e:
                    92:8d:01:fe:3f:22:4d:6e:c0:2a:b5:ec:a2:72:4b:
                    58:40:64:cb:1a:bf:d8:63:a4:49:9b:d9:8d:64:81:
                    84:a6:e2:0f:22:0b:70:04:76:3d:c6:19:f7:f2:ad:
                    74:80:5a:f3:a3:11:e7:4e:7c:b8:9c:30:0e:ac:cf:
                    ad:a6:df:25:85:89:3e:2f:c5:91:0e:e6:ca:68:48:
                    9d:4b:24:12:da:13:60:51:d7:1d:4c:c8:87:f9:88:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:AB:DC:D8:A9:8A:23:AF:25:21:33:07:77:C4:39:C5:0B:83:C0:E3
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/12/89ABDCD8A98A23AF2521330777C439C50B83C0E3.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:f4:23:1e:82:3a:70:3e:b8:ea:0a:b8:92:b9:f4:ad:e5:
         e6:f1:22:af:c9:13:56:71:67:48:2f:c2:a2:c7:dd:b5:96:f2:
         15:5f:c2:3c:90:08:d7:2a:ea:c4:b1:76:5c:65:0c:8a:e0:a0:
         a5:92:2c:a2:74:4c:d5:46:87:0c:2d:87:1f:bf:63:19:fd:3b:
         26:46:d5:6c:73:0c:3e:e8:d2:7e:e2:99:29:ab:89:b4:64:08:
         54:8d:37:f1:ff:fb:28:6f:ee:5a:d4:05:7b:38:2f:c4:94:f5:
         df:0f:44:99:41:f3:b9:3a:f9:ec:4e:07:72:79:28:94:35:1c:
         7e:08:03:e7:d8:16:93:3b:60:67:10:47:1f:3c:f5:e4:b3:c6:
         75:6c:bd:b8:2c:14:43:d0:34:43:64:24:66:2d:99:1b:e7:36:
         97:25:5c:29:68:3e:8c:88:47:00:aa:44:d1:40:df:75:c5:3a:
         c7:0d:f3:32:fe:a6:b2:a7:bb:d4:5f:78:c7:a5:ad:48:52:19:
         ea:4a:ea:e9:a8:6c:b1:9e:cf:c3:c8:1d:0e:6b:7f:6d:48:d3:
         0b:d3:0f:7d:73:29:79:f2:25:92:3a:e1:c9:e0:8d:34:3a:48:
         cb:74:9c:b3:2e:f3:2b:09:84:81:ef:77:82:7a:51:4b:cd:41:
         23:4a:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:38 2025 by rpki-client