Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3.cer
File:                     e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3.cer (raw, json)
Hash identifier:          7EFBj/tDOgwewdH/hDThR8TrMeaqDMN6qiKHzQVhzLE=
Subject key identifier:   38:98:74:29:1F:32:B7:53:C5:21:79:67:3A:DD:5A:D1:0F:CB:86:3D
Authority key identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39
Certificate issuer:       /CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea
Certificate serial:       010D0C9F4328584A86D8F5FE950768BB73F31120
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 15 Jul 2025 12:56:14 +0000
Certificate not after:    Mon 18 Oct 2027 12:56:14 +0000
Subordinate resources:    AS: 27498
                          IP: 23.128.44.0/24
                          IP: 2602:f865::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:d8:f5:fe:95:07:68:bb:73:f3:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea
        Validity
            Not Before: Jul 15 12:56:14 2025 GMT
            Not After : Oct 18 12:56:14 2027 GMT
        Subject: CN=e8238ea0d595c4c58cf97789c411a74fd9298a5c634d6c01d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:0c:c7:2b:30:08:6b:d1:c6:47:a7:ce:5a:
                    f0:93:ab:a0:da:49:bc:3d:b0:00:c9:ce:45:92:2d:
                    a3:72:eb:be:e9:ca:3e:ec:d1:a6:64:b1:ef:e7:95:
                    68:8f:b2:8b:60:62:13:0a:81:c7:7a:22:e6:aa:41:
                    a2:fe:69:99:b8:a7:c4:8c:ed:f7:eb:a3:e4:78:2d:
                    ce:32:41:97:96:d3:35:78:2b:d9:d7:9e:b0:c5:32:
                    c7:3e:fe:e8:6a:30:df:75:d8:50:20:8d:70:be:ec:
                    a8:ee:95:17:70:fb:95:96:35:f5:59:60:cc:01:fd:
                    61:50:83:68:92:95:a9:31:48:84:f6:cd:8e:eb:3f:
                    d1:be:6c:12:67:1b:15:8b:fd:12:8a:b4:92:4d:55:
                    5b:ba:06:e4:df:3b:ad:28:e2:8b:c1:f7:49:0e:91:
                    99:de:e7:0a:53:6e:f9:bd:08:b5:d1:71:39:4d:fb:
                    4e:3a:f7:57:1e:92:87:6f:93:62:43:70:82:10:62:
                    8e:99:35:d1:ef:93:c3:9b:c6:ec:2a:48:31:44:89:
                    4e:1d:78:1a:24:9c:15:f3:a5:80:89:ff:7f:fc:1c:
                    b2:77:d4:20:a1:39:f1:ee:7c:77:a3:fb:f4:20:b6:
                    d3:35:aa:eb:47:e0:83:98:12:e4:f2:bf:60:82:c6:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:98:74:29:1F:32:B7:53:C5:21:79:67:3A:DD:5A:D1:0F:CB:86:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/389874291F32B753C52179673ADD5AD10FCB863D.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl

            X509v3 Authority Key Identifier:
                keyid:5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.44.0/24
                IPv6:
                  2602:f865::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27498

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:8b:0f:37:c8:52:11:ca:ea:b3:4b:f5:ca:0e:c2:1e:c1:
         85:fc:97:18:4e:57:7f:06:8a:1e:0f:6c:a7:10:79:b0:16:44:
         a0:0f:f9:17:6b:3b:64:d3:e7:8b:43:e7:f7:1b:ad:13:c0:f9:
         fc:4a:c9:8f:3a:37:a5:34:f0:7a:21:63:06:69:53:8f:c4:e3:
         8e:49:67:7d:2a:5c:c3:66:48:34:ee:9e:dd:5b:45:95:0f:92:
         f1:b0:65:a6:7e:99:69:91:11:57:5c:f9:35:b7:ad:3e:d8:1f:
         9d:e9:b1:d4:63:4a:5c:92:bd:18:f6:23:8e:1c:db:ca:fd:d1:
         fa:2a:9b:01:15:c4:20:cf:59:0b:4d:9c:00:7c:d2:84:11:96:
         f6:f7:25:70:a8:b9:40:f0:2f:39:3c:8f:2d:c2:1c:ef:0e:04:
         80:69:a4:de:25:e0:0c:3e:02:c6:29:1d:b0:8d:f7:e3:00:7e:
         bf:8f:34:5f:ec:0a:4d:4f:7d:1a:1e:9e:48:5c:b9:c3:35:6d:
         83:9f:ad:e1:31:4c:3a:ae:0f:40:3e:72:7e:84:6d:43:0f:69:
         e6:37:99:d7:2d:1f:73:17:cc:43:42:d3:db:cd:48:b1:d5:49:
         c8:ea:af:d1:d2:f0:66:0b:af:86:84:4a:ae:51:e1:76:a3:6e:
         3e:ac:f2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:55:47 2025 by rpki-client