Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
File:                     37d983de-280d-4374-a056-b21eb13451dd.cer (raw, json)
Hash identifier:          SZ2CwrZ3D8w20zVAgKTRByYexIqKKy0xQ7GelJt80Z0=
Subject key identifier:   A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584B6D25074A69164831E5753BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 Oct 2025 00:45:25 +0000
Certificate not after:    Sun 09 Jan 2028 01:45:25 +0000
Subordinate resources:    AS: 33604
                          IP: 65.183.128.0/19
                          IP: 69.5.112.0/20
                          IP: 162.247.88.0/22
                          IP: 204.13.40.0/21
                          IP: 2606:8600::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:25:07:4a:69:16:48:31:e5:75:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct  6 00:45:25 2025 GMT
            Not After : Jan  9 01:45:25 2028 GMT
        Subject: CN=37d983de-280d-4374-a056-b21eb13451dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:46:25:a4:a7:f2:fa:7f:ff:bd:98:1f:82:
                    07:58:c4:d0:2d:16:ac:70:42:30:a5:c3:ac:c4:d7:
                    07:20:d0:c1:3f:60:42:87:c8:37:53:7e:76:3c:3f:
                    cc:a0:50:5f:89:43:be:7f:d1:4a:aa:47:38:fe:0a:
                    2a:db:ee:44:ab:6b:49:ed:b2:cb:46:72:fc:1c:47:
                    35:1f:c0:d4:1f:cf:dc:53:63:0e:10:00:22:ec:94:
                    8b:6c:97:f6:81:85:b1:58:9a:6a:64:3c:88:1a:09:
                    02:d7:54:ad:34:c0:d0:85:7b:1e:7c:85:14:98:5e:
                    94:52:89:15:fc:52:34:f4:9e:78:c5:46:a8:d5:6a:
                    e0:ed:ab:df:03:8c:29:1a:65:a7:c8:6f:c0:3e:7b:
                    e3:4b:da:c6:6d:2d:9e:9a:f0:1b:f2:23:ee:58:9f:
                    16:36:75:38:cf:e5:08:e6:2b:5d:c9:ef:9a:1b:29:
                    02:28:91:bf:e1:da:07:40:9b:c9:bf:5f:85:a8:f7:
                    76:ca:3d:87:e9:6e:46:ae:19:a3:ef:9b:cc:f0:4c:
                    3d:7a:58:bb:90:57:2d:10:f4:97:e3:7f:3c:0e:5a:
                    ea:77:49:c2:c9:47:e2:58:ca:23:28:d1:1d:79:ad:
                    89:e4:ba:46:00:46:1d:cc:47:16:a1:77:0e:21:67:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.128.0/19
                  69.5.112.0/20
                  162.247.88.0/22
                  204.13.40.0/21
                IPv6:
                  2606:8600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33604

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f1:fc:2b:11:32:86:b5:e3:bb:bd:91:22:76:61:a9:c4:00:
         be:08:e6:a2:6a:70:d1:43:36:08:73:47:5d:c3:78:a3:01:4a:
         66:10:87:49:09:23:99:02:af:31:1d:cb:48:0e:2a:4b:36:10:
         eb:0b:44:f0:a7:f8:42:d3:7f:14:69:09:59:21:e6:7d:eb:cd:
         81:80:83:22:a4:cb:7c:b2:be:02:db:63:f2:dc:4f:19:d8:fe:
         dc:a8:e0:2f:62:3a:7b:0b:eb:eb:c5:d4:fc:45:62:8c:a1:0a:
         07:cc:35:90:b3:cd:f3:d6:e0:05:03:59:a7:2c:a5:b3:b8:6c:
         77:fa:eb:01:52:7a:18:f0:c8:ed:3c:77:99:83:29:a8:90:52:
         1a:80:3f:86:05:0f:72:07:eb:0f:b5:9b:fb:57:64:21:1c:f5:
         c2:83:fb:7f:23:e5:c1:57:1a:c2:b5:7c:73:8a:a5:c4:ea:22:
         69:ff:c0:2a:fb:c4:25:f7:e7:68:29:d5:eb:87:fa:d2:8a:a8:
         34:cc:3b:41:ba:23:47:44:5f:9c:cb:26:0e:c7:a1:bf:41:d2:
         cc:d2:4d:d6:bd:91:90:9f:68:a2:f3:b0:ab:99:23:bd:6f:2a:
         37:6e:63:73:af:c1:22:ef:b0:46:c5:4a:f7:d5:37:b3:69:ca:
         43:f4:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:47:07 2025 by rpki-client