Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/72ba6900-1219-43ff-8511-7b66a09d1ed4.cer
File:                     72ba6900-1219-43ff-8511-7b66a09d1ed4.cer (raw, json)
Hash identifier:          ZPFtYRWIKOCugLOpUXVblBZdP7r64dRa9gR3Mjk0HIc=
Subject key identifier:   9A:AD:4A:2D:7A:AB:06:F5:A7:45:E2:59:FE:1A:09:82:55:89:6D:67
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B451EA60D080A663560118D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/72ba6900-1219-43ff-8511-7b66a09d1ed4/72ba6900-1219-43ff-8511-7b66a09d1ed4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/72ba6900-1219-43ff-8511-7b66a09d1ed4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Sep 2025 16:40:14 +0000
Certificate not after:    Sat 25 Dec 2027 17:40:14 +0000
Subordinate resources:    AS: 399089
                          IP: 155.254.212.0/24
                          IP: 2607:e240::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:45:1e:a6:0d:08:0a:66:35:60:11:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 21 16:40:14 2025 GMT
            Not After : Dec 25 17:40:14 2027 GMT
        Subject: CN=72ba6900-1219-43ff-8511-7b66a09d1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b9:e4:68:85:14:4c:8c:32:7b:27:25:90:6f:
                    f8:76:c5:7d:b2:63:04:6a:1f:1e:f9:8d:f3:f2:0f:
                    fa:1b:6c:06:82:69:68:b8:c1:95:43:d3:e7:4d:ca:
                    b9:66:5e:0f:7a:d2:3f:f3:6a:e1:31:bb:76:3c:75:
                    76:23:e0:b4:2a:b0:a3:ad:70:0f:9a:c2:ae:8c:dd:
                    50:cd:3d:ec:11:dc:2d:65:81:d1:59:26:11:27:85:
                    4b:e1:e2:fe:5d:3f:37:b9:14:24:b1:03:31:7a:32:
                    6b:aa:aa:9f:db:98:8a:dd:59:23:3d:a0:48:7d:c4:
                    4c:24:90:f2:15:95:81:08:60:c8:8e:f2:07:1a:c7:
                    51:b3:ac:f8:b1:d0:f4:6a:60:4a:21:db:e6:df:6b:
                    64:aa:50:5c:3d:fa:d9:3a:b3:54:53:b4:8d:7d:1a:
                    86:15:9f:41:29:99:50:8a:8e:25:39:27:70:d5:28:
                    de:55:be:2e:53:0e:cc:f9:99:d8:fc:eb:21:6e:5b:
                    f8:91:c9:fe:4f:05:0b:2d:0f:7c:62:00:5b:45:b7:
                    86:ec:1d:9a:57:07:d1:d4:d3:02:3b:5f:b3:a8:83:
                    1c:13:91:0e:d6:ba:43:c4:e4:80:ae:c1:3e:ba:b3:
                    b5:e6:3d:25:07:ed:5b:3f:b9:48:06:0d:14:af:4f:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AD:4A:2D:7A:AB:06:F5:A7:45:E2:59:FE:1A:09:82:55:89:6D:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/72ba6900-1219-43ff-8511-7b66a09d1ed4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/72ba6900-1219-43ff-8511-7b66a09d1ed4/72ba6900-1219-43ff-8511-7b66a09d1ed4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.212.0/24
                IPv6:
                  2607:e240::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399089

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:19:a3:91:dd:d5:87:da:e4:76:89:b6:86:51:c2:e7:64:b0:
         6a:f9:4d:24:62:42:23:35:c1:33:7d:d5:87:82:4f:13:25:d0:
         d1:73:84:09:44:2a:02:cc:bc:2c:0e:07:b3:f3:90:69:fc:a0:
         d6:30:0d:d6:6e:62:88:02:f3:44:d3:4d:10:3d:c7:b3:57:21:
         d9:71:23:23:76:d3:c3:f0:59:d6:7d:49:7f:83:fd:a7:bd:79:
         b9:0e:4a:4c:ea:78:5c:cc:1f:b8:79:22:2e:ea:70:31:e8:07:
         49:52:cc:01:79:df:3e:f4:75:48:d1:c4:db:f4:e7:54:d9:68:
         8b:ce:9e:fd:d3:e6:88:13:7a:a0:51:1e:0f:55:ef:63:e9:55:
         1e:b3:44:50:f0:64:b5:1c:33:24:2b:95:45:c5:35:79:e3:e6:
         8d:21:8c:bb:a8:27:93:fe:b6:7d:be:61:ce:fe:f6:5c:5e:dd:
         7a:af:8f:14:94:38:96:ae:e0:74:16:46:33:59:da:7d:2b:ef:
         89:04:3f:e8:c1:9f:98:f2:15:de:7b:be:7c:18:74:9b:b5:7d:
         ff:25:9e:30:32:bf:ef:af:01:65:69:d8:e8:cf:85:0b:e2:9c:
         1d:3e:c6:9b:79:10:8c:7b:58:a9:61:5b:91:ad:87:ee:fb:8a:
         aa:17:45:9e
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtFHqYNCApmNWARjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0
M2Y4MB4XDTI1MDkyMTE2NDAxNFoXDTI3MTIyNTE3NDAxNFowLzEtMCsGA1UEAxMk
NzJiYTY5MDAtMTIxOS00M2ZmLTg1MTEtN2I2NmEwOWQxZWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bnkaIUUTIwyeyclkG/4dsV9smMEah8e+Y3z
8g/6G2wGgmlouMGVQ9PnTcq5Zl4PetI/82rhMbt2PHV2I+C0KrCjrXAPmsKujN1Q
zT3sEdwtZYHRWSYRJ4VL4eL+XT83uRQksQMxejJrqqqf25iK3VkjPaBIfcRMJJDy
FZWBCGDIjvIHGsdRs6z4sdD0amBKIdvm32tkqlBcPfrZOrNUU7SNfRqGFZ9BKZlQ
io4lOSdw1SjeVb4uUw7M+ZnY/Oshblv4kcn+TwULLQ98YgBbRbeG7B2aVwfR1NMC
O1+zqIMcE5EO1rpDxOSArsE+urO15j0lB+1bP7lIBg0Ur09/7wIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFJqtSi16qwb1p0XiWf4aCYJViW1nMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83
MmJhNjkwMC0xMjE5LTQzZmYtODUxMS03YjY2YTA5ZDFlZDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQt
ZDBkMi00MTY1LTgzMDgtZGYyNTk3ZTM0M2Y4LzcyYmE2OTAwLTEyMTktNDNmZi04
NTExLTdiNjZhMDlkMWVkNC83MmJhNjkwMC0xMjE5LTQzZmYtODUxMS03YjY2YTA5
ZDFlZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2
OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mZGUxNjllZC1kMGQyLTQx
NjUtODMwOC1kZjI1OTdlMzQzZjguY3JsMB8GA1UdIwQYMBaAFP4xVG51GexDMh+a
7yv05XoHI43SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Zk
ZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBACb/tQwDgQCAAIwCAMGACYH4kAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYW8TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEGaOR3dWH2uR2ibaGUcLnZLBq
+U0kYkIjNcEzfdWHgk8TJdDRc4QJRCoCzLwsDgez85Bp/KDWMA3WbmKIAvNE000Q
PcezVyHZcSMjdtPD8FnWfUl/g/2nvXm5DkpM6nhczB+4eSIu6nAx6AdJUswBed8+
9HVI0cTb9OdU2WiLzp790+aIE3qgUR4PVe9j6VUes0RQ8GS1HDMkK5VFxTV54+aN
IYy7qCeT/rZ9vmHO/vZcXt16r48UlDiWruB0FkYzWdp9K++JBD/owZ+Y8hXee758
GHSbtX3/JZ4wMr/vrwFladjoz4UL4pwdPsabeRCMe1ipYVuRrYfu+4qqF0We
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:39 2025 by rpki-client