Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
File:                     e2213668-8973-4471-a19a-d7e8374ada63.cer (raw, json)
Hash identifier:          1Hyd+pDZrTM/HVlubOxRuklHAcfI+qEVWJ60rhyUamY=
Subject key identifier:   C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B5DCA42EE835DAA6052BAC480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Sep 2025 12:45:24 +0000
Certificate not after:    Mon 03 Jan 2028 13:45:24 +0000
Subordinate resources:    AS: 21775
                          AS: 22557
                          IP: 69.64.144.0/20
                          IP: 104.244.184.0/22
                          IP: 198.147.208.0/22
                          IP: 199.15.80.0 -- 199.15.88.255
                          IP: 2001:500:100:: -- 2001:500:109:ffff:ffff:ffff:ffff:ffff
                          IP: 2620:115:3000::/44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:ca:42:ee:83:5d:aa:60:52:ba:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Sep 30 12:45:24 2025 GMT
            Not After : Jan  3 13:45:24 2028 GMT
        Subject: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:b5:75:b5:a9:38:75:e2:3a:c1:1d:f4:89:
                    db:c0:f1:18:72:14:75:a6:d3:18:4b:d7:95:40:a3:
                    8c:17:04:fb:af:60:eb:ce:3d:f2:2e:02:47:e8:af:
                    6e:2a:12:0e:e5:6d:e4:ba:51:cf:25:79:3b:70:81:
                    55:94:ae:3f:75:78:43:5f:7a:c7:60:0a:1d:51:e0:
                    52:6f:6b:82:cd:86:ad:04:1a:28:39:6a:5e:81:ac:
                    4d:77:c8:18:9d:d7:1f:74:99:1c:b3:c3:87:cf:93:
                    42:1b:05:48:8b:9a:25:cd:f3:e5:8e:ca:ee:5a:76:
                    4c:c2:94:17:e1:ad:26:3f:8c:c4:22:d4:4c:d4:50:
                    9d:75:84:94:74:ec:12:73:eb:bb:0b:dd:31:2c:29:
                    5a:9a:aa:f8:78:64:41:4f:b8:c6:a3:47:3d:88:dd:
                    56:2d:12:8f:e6:5d:47:37:08:0a:25:82:b4:09:9c:
                    b7:5d:79:bb:e3:8b:f3:bb:ac:fe:df:47:c4:6a:2f:
                    4a:de:2c:c8:1c:a7:d4:2e:3b:85:b1:cf:7e:23:47:
                    52:2b:d8:85:fb:68:77:48:11:2c:6f:a1:8f:48:20:
                    29:01:5f:a8:15:9e:4a:80:5c:ab:01:d7:9d:47:f5:
                    47:8e:54:aa:e4:75:74:df:bf:83:43:1d:89:ef:95:
                    7c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.144.0/20
                  104.244.184.0/22
                  198.147.208.0/22
                  199.15.80.0-199.15.88.255
                IPv6:
                  2001:500:100::-2001:500:109:ffff:ffff:ffff:ffff:ffff
                  2620:115:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21775
                  22557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:6a:35:4e:48:19:3b:18:97:7d:e2:37:63:f5:ad:34:58:
         6d:08:bd:3c:94:bd:06:4c:e9:73:24:30:ff:df:50:d5:95:de:
         b0:00:ea:6f:61:a4:67:5a:9b:95:ed:25:8f:27:3a:8a:11:1d:
         e4:a0:21:d2:f4:68:86:81:79:e1:cc:ff:93:16:32:c2:10:35:
         0d:57:4f:96:36:da:88:07:14:2d:11:29:d7:55:2f:17:17:58:
         89:3c:80:a3:66:18:96:b3:fe:d8:7e:5d:2e:fe:c4:ca:d1:0a:
         54:2c:59:ce:b8:dc:af:6e:f4:53:1d:87:12:5e:63:4f:b7:1b:
         f1:e3:5e:a1:25:a4:ce:2a:c9:a2:9d:dc:bb:04:78:5e:b7:41:
         45:53:dd:c2:d2:13:35:19:4a:d8:12:d0:5d:4a:3f:8e:b8:93:
         8e:d9:77:55:9e:82:aa:b5:da:77:b7:28:12:be:1c:8e:56:e9:
         be:41:67:35:c9:17:38:7e:63:d6:d5:32:1f:a3:72:ec:a5:70:
         86:f1:89:da:f8:e5:c5:bd:fa:c7:74:19:25:8a:c1:d7:66:75:
         52:fc:9b:50:9c:c9:6b:12:ed:a6:c3:27:ec:12:08:d2:b0:c3:
         ca:de:69:5c:52:65:46:1d:e0:80:01:0e:4d:4b:b9:98:b7:ce:
         3c:d6:30:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 10 15:22:46 2025 by rpki-client