Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
File:                     f9832b96-bd4c-421c-9299-d5f2c689d463.cer (raw, json)
Hash identifier:          H8ToO0VSC/8P5COP2AQg0XOfFQGIJH6e/oTa5ZTHr5Y=
Subject key identifier:   20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B0E39C4E2B3E8C5CCEF846A20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Sep 2025 00:45:25 +0000
Certificate not after:    Mon 06 Dec 2027 01:45:25 +0000
Subordinate resources:    AS: 21565
                          AS: 401099
                          IP: 64.138.192.0/18
                          IP: 64.150.128.0/19
                          IP: 66.153.128.0/17
                          IP: 66.220.64.0/20
                          IP: 67.212.32.0/19
                          IP: 107.190.144.0/20
                          IP: 108.175.176.0/20
                          IP: 152.44.112.0/20
                          IP: 159.117.160.0/19
                          IP: 162.221.104.0/21
                          IP: 162.252.0.0/21
                          IP: 198.29.48.0/20
                          IP: 198.52.224.0/20
                          IP: 198.232.104.0/21
                          IP: 199.87.100.0/22
                          IP: 206.195.64.0/19
                          IP: 216.16.160.0/19
                          IP: 216.223.192.0/19
                          IP: 2606:8400::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:39:c4:e2:b3:e8:c5:cc:ef:84:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Sep  2 00:45:25 2025 GMT
            Not After : Dec  6 01:45:25 2027 GMT
        Subject: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:8f:c8:4a:4d:f9:d9:89:90:d9:b8:8d:8b:
                    f6:4f:23:7a:41:2e:b7:75:7d:81:24:1b:bb:9b:84:
                    67:c1:cf:b6:c6:ca:8a:dc:fb:84:e4:d2:e8:cf:b0:
                    d8:3d:9f:59:69:62:39:90:d6:43:b2:85:26:bb:3e:
                    68:2f:37:38:62:b7:35:49:0f:32:43:57:24:10:dc:
                    cf:91:1a:bc:7f:be:52:4d:2a:6d:0b:c9:f6:4a:f1:
                    7a:86:79:ab:78:51:8b:9f:f1:e4:23:d8:85:be:b5:
                    0c:ab:8c:ce:63:b5:6a:fd:fe:2b:d8:58:ef:c9:68:
                    79:20:77:06:c7:8b:58:05:04:02:2d:1a:1d:09:fb:
                    61:cb:bf:c4:c2:ef:3e:7c:9b:f4:1e:d5:25:c5:11:
                    b9:b4:e9:6e:17:73:a0:a8:df:fb:fa:67:fb:c7:82:
                    fc:ea:ca:bf:c5:cf:6b:f5:e2:74:f2:90:a9:0d:f1:
                    ad:69:fb:e3:2f:ec:79:a3:13:b7:33:b2:22:fa:39:
                    cc:4c:8e:b7:56:5b:d3:dc:15:1e:f8:48:99:76:e5:
                    84:31:22:1c:87:2f:1a:01:4a:c4:19:83:09:54:0b:
                    b3:c1:d2:0c:9d:b7:41:ae:1e:03:2c:c2:19:fd:52:
                    20:09:a3:73:47:81:3a:ef:2c:96:df:63:bc:dd:b8:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  199.87.100.0/22
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21565
                  401099

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:54:02:4e:f2:c9:4a:08:0a:fc:18:9a:c1:d9:b0:3c:fd:f8:
         ea:32:1f:65:70:43:1f:5b:a6:9d:2f:65:6a:60:17:d0:33:19:
         44:7c:1a:61:f3:16:ca:fe:16:3a:87:03:bb:f5:6c:c7:98:0d:
         b4:b9:2d:3a:24:ff:f8:12:d3:70:ca:34:e3:ab:e6:74:63:02:
         ed:2f:32:26:b2:48:61:a4:a7:af:bd:3a:e9:0c:9e:f2:fc:6c:
         16:56:db:1e:d0:87:49:8e:5e:f5:a2:19:33:a5:c7:5d:9d:73:
         98:9b:dc:a5:73:12:52:7a:22:ef:95:a1:24:b1:43:20:9a:53:
         94:25:27:f4:7d:3d:13:6a:d1:5c:7f:8c:61:e3:80:3f:84:5a:
         81:63:a4:08:84:1c:fd:db:bd:3d:32:12:2a:8a:46:1e:c2:a6:
         6f:d1:6b:67:83:de:f4:3e:3b:cf:5e:a8:86:03:1f:fd:6d:a8:
         52:24:ab:57:55:4f:cd:33:8b:38:05:7c:20:db:b8:6f:20:f2:
         c5:93:5f:4a:bb:f7:b5:ad:b6:51:b6:17:2f:3c:2f:61:f2:95:
         55:59:d2:a4:7e:58:a7:0c:16:b7:82:07:9c:3a:39:86:91:5c:
         86:b7:92:78:12:91:c3:48:69:d7:a9:88:88:ae:18:bb:e8:bf:
         ca:59:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 15:26:23 2025 by rpki-client