Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322.cer
File:                     8d2096b9-bddf-46e5-ad6d-227e3464c322.cer (raw, json)
Hash identifier:          cdduTaqKc7p3wcXMO7pE3VtJM/bj8uIwWsJKReduQw4=
Subject key identifier:   54:BB:E6:29:07:83:F0:52:D8:3D:8D:E2:27:AA:38:B8:2B:F6:DD:FE
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B60EF69E6074CF3898521FB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/8d2096b9-bddf-46e5-ad6d-227e3464c322.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 Oct 2025 15:47:41 +0000
Certificate not after:    Tue 04 Jan 2028 16:47:41 +0000
Subordinate resources:    AS: 7346
                          IP: 23.133.20.0/24
                          IP: 2602:f717::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:ef:69:e6:07:4c:f3:89:85:21:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Oct  1 15:47:41 2025 GMT
            Not After : Jan  4 16:47:41 2028 GMT
        Subject: CN=8d2096b9-bddf-46e5-ad6d-227e3464c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:9e:47:a1:2a:e0:f5:71:da:4c:57:53:94:
                    37:c2:ce:c9:b1:b2:57:d7:ad:1d:4e:b9:21:58:37:
                    54:0a:91:a4:be:b5:52:bb:9b:29:03:77:24:20:42:
                    2b:60:c6:68:f1:15:2f:d4:39:3e:8d:c5:a5:c5:6d:
                    56:0e:d0:de:db:f8:e8:66:ca:56:0f:e9:f5:40:79:
                    30:8d:18:63:4e:ac:93:e2:1e:35:62:a7:42:2c:b9:
                    5d:18:44:51:3c:0e:3b:00:6b:b1:2e:e4:35:9f:27:
                    5d:df:64:32:f1:1e:35:b4:73:1d:ef:2b:d9:17:23:
                    9c:97:62:7d:d3:53:29:88:87:7e:fa:d9:46:ca:9b:
                    3d:ab:11:7e:c5:1b:40:f1:b2:0d:5a:7a:6d:1b:ae:
                    d5:0b:3b:82:50:b4:ee:3d:55:0f:01:dc:11:46:be:
                    03:8c:f8:c4:4b:5f:c8:87:55:87:5d:ed:ce:ca:dd:
                    08:a6:17:fd:2d:18:56:7d:00:08:8c:28:2a:a1:ef:
                    98:d9:10:44:13:1a:4a:b5:83:9b:fc:32:71:5e:72:
                    09:7c:16:39:43:39:43:18:d2:14:22:65:14:0b:ab:
                    c5:bf:3f:f9:b5:45:62:4b:a5:e0:3c:a5:fa:c1:74:
                    a0:73:97:fb:43:8f:8a:45:4b:01:e7:a1:ba:99:05:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BB:E6:29:07:83:F0:52:D8:3D:8D:E2:27:AA:38:B8:2B:F6:DD:FE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/8d2096b9-bddf-46e5-ad6d-227e3464c322.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.20.0/24
                IPv6:
                  2602:f717::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7346

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:00:66:a6:b6:ba:d0:ea:25:89:90:a3:21:e4:22:d1:c8:
         33:a6:71:39:ae:06:8f:08:86:c0:97:24:a6:de:26:21:9b:fa:
         a2:7f:dc:06:22:65:80:2f:f9:d3:d3:2b:d1:5c:ce:22:e7:de:
         b4:7c:5a:c9:4f:9d:a7:e2:35:79:f8:cf:7d:5d:c6:02:03:03:
         43:42:ca:85:fc:ea:69:20:68:e7:52:df:2e:f6:d2:10:c5:82:
         56:31:59:b6:f3:d4:5f:2d:09:47:42:bb:e1:ce:07:23:44:f7:
         1b:b1:ec:a8:4f:37:5d:e7:f5:a5:c3:04:61:f0:d5:b4:54:f0:
         14:9a:7e:6f:5f:da:41:8b:b7:a3:fa:6e:62:45:52:84:3f:28:
         8c:6e:6e:ac:07:2a:29:60:28:c2:af:f3:54:42:8c:72:10:5b:
         08:01:23:d0:69:19:31:78:b3:d6:b0:c6:cc:8f:11:b1:a3:09:
         aa:de:7a:41:ab:a0:9e:07:04:05:8d:8a:b4:6b:e1:f0:3c:ba:
         30:7f:da:ac:d5:09:71:e7:2f:fe:f7:52:25:69:51:18:54:1e:
         f7:65:d4:30:8d:4e:84:2a:77:6e:7e:f3:ff:31:c1:58:4d:59:
         27:fc:a8:55:6b:d8:a5:e3:e1:1a:88:0d:43:64:61:ab:df:70:
         fa:6f:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:00 2025 by rpki-client