Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f171473b-616f-4d07-8200-1b9910d8bcb0.cer
File:                     f171473b-616f-4d07-8200-1b9910d8bcb0.cer (raw, json)
Hash identifier:          F3U6G2AaeJA8RICIq6lUnLI/2G8cuG2I2TfAbyFtHmE=
Subject key identifier:   E7:2D:61:D2:74:0C:60:1F:BC:DC:E9:6A:90:B9:16:C6:BB:E0:04:37
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B6FEFB07609C418197A53FA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f171473b-616f-4d07-8200-1b9910d8bcb0/f171473b-616f-4d07-8200-1b9910d8bcb0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f171473b-616f-4d07-8200-1b9910d8bcb0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Oct 2025 00:45:22 +0000
Certificate not after:    Mon 10 Jan 2028 01:45:22 +0000
Subordinate resources:    AS: 32208
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:ef:b0:76:09:c4:18:19:7a:53:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Oct  7 00:45:22 2025 GMT
            Not After : Jan 10 01:45:22 2028 GMT
        Subject: CN=f171473b-616f-4d07-8200-1b9910d8bcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:87:3d:9a:0a:73:d8:b7:d5:7b:a0:81:e4:
                    22:6d:be:d5:59:7c:21:db:9d:68:eb:30:aa:61:14:
                    2d:b1:9e:32:03:a5:1e:0f:e2:2c:9c:4d:db:1b:c4:
                    71:2a:cf:48:19:18:d8:4b:0d:78:9c:04:95:30:14:
                    b9:c8:d5:bd:77:79:7f:a2:91:75:1e:f9:dd:07:fc:
                    8b:fe:b1:d5:de:ae:6d:8a:ed:bc:18:07:01:7b:f5:
                    ba:b9:9b:5b:b9:91:c6:1f:a6:31:a7:85:58:9a:68:
                    6d:b4:b4:fc:a5:43:23:00:90:aa:4a:49:d4:84:05:
                    f3:24:16:76:d4:32:84:af:46:28:5d:80:2b:1c:d3:
                    b5:64:0f:c2:01:e7:f8:fd:45:fe:b3:1c:42:62:4b:
                    e6:53:35:fe:b3:72:26:f1:fe:cf:15:4c:7a:e6:59:
                    2f:c7:40:1a:95:07:f1:de:9d:46:c5:a4:7e:c4:49:
                    39:06:00:33:c8:de:ee:72:c8:e1:ed:31:37:42:87:
                    09:a9:97:e4:e8:55:17:1c:d1:02:c0:00:9d:1d:b9:
                    8c:2f:e5:ab:05:50:0a:5b:e8:cb:6b:0e:d4:35:20:
                    6d:1e:d7:5d:56:e2:eb:2f:5a:cd:cb:e7:c6:2e:5f:
                    e7:56:10:c6:1d:86:b7:a0:08:ba:26:64:b1:73:54:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:61:D2:74:0C:60:1F:BC:DC:E9:6A:90:B9:16:C6:BB:E0:04:37
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f171473b-616f-4d07-8200-1b9910d8bcb0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f171473b-616f-4d07-8200-1b9910d8bcb0/f171473b-616f-4d07-8200-1b9910d8bcb0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32208

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:65:66:09:f5:56:2e:ac:dc:1c:9a:6e:7a:a0:26:bc:6e:3f:
         a1:8a:d3:92:6c:96:f3:ad:6f:05:5d:5d:59:01:ad:d4:b7:fd:
         c3:ce:60:1a:d4:2b:90:e0:e4:89:7c:98:1f:50:31:96:cd:ea:
         52:01:d0:03:09:52:22:a0:d3:f6:0e:75:ab:60:94:30:15:8b:
         88:57:fe:3d:3c:69:c0:c2:94:63:a8:3f:0a:dd:7e:23:49:17:
         87:d1:c4:53:24:89:cb:c2:0f:e9:8f:34:8b:0c:b2:34:11:59:
         75:75:66:af:96:d8:92:9f:e0:3d:7d:7b:fb:a6:19:9c:fb:96:
         cd:5a:27:ec:5d:14:95:d9:4b:ad:76:3a:30:c8:28:27:52:6a:
         7b:be:8c:23:d7:bb:9e:20:4d:a8:fc:cc:83:b5:fb:ee:ae:30:
         05:69:ea:68:48:23:47:e4:9d:bf:9c:15:a1:0d:e3:08:07:ce:
         b0:70:a7:26:ba:cf:b4:e0:9d:65:78:7d:79:7d:11:dd:cc:08:
         f5:e8:fe:33:59:2f:c0:69:06:ba:bc:a0:b0:86:42:76:db:53:
         b1:2e:94:86:ee:9c:c4:64:76:79:2e:44:35:37:3b:15:23:31:
         41:3f:e3:af:fa:36:65:98:47:00:12:01:32:50:f5:1f:b6:4b:
         5f:de:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 15:19:40 2025 by rpki-client