Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer
File:                     9b4862b0-8a7d-4d69-bc18-38b430a8c232.cer (raw, json)
Hash identifier:          zJoKN+wu3SVjRdveBllx/hcgLsOVcZV8lOoas0jqT68=
Subject key identifier:   30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B6F47FD329697868361CFF800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 Oct 2025 19:07:29 +0000
Certificate not after:    Sun 09 Jan 2028 20:07:29 +0000
Subordinate resources:    AS: 32220
                          IP: 24.233.64.0/19
                          IP: 2605:9b00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:47:fd:32:96:97:86:83:61:cf:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Oct  6 19:07:29 2025 GMT
            Not After : Jan  9 20:07:29 2028 GMT
        Subject: CN=9b4862b0-8a7d-4d69-bc18-38b430a8c232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ab:c2:87:6a:27:58:6c:6e:63:be:e3:08:07:
                    0e:57:20:85:6e:de:59:64:ee:28:0f:7e:48:e1:5e:
                    6a:33:62:95:ad:fd:cc:4a:71:95:4f:aa:f6:67:41:
                    35:63:c4:53:d3:13:cb:2a:33:60:9d:f3:0e:04:c0:
                    36:48:ba:99:d4:fa:c4:17:99:d8:fe:5a:73:86:2d:
                    b3:84:65:28:24:97:ea:70:23:44:c0:83:5f:28:ba:
                    91:42:64:0b:f5:79:37:de:82:42:84:19:c9:9b:14:
                    9e:1e:2f:6e:c1:f4:15:35:76:70:61:44:74:73:ef:
                    6f:d5:3c:a5:df:0b:7d:2b:ae:01:dc:15:96:2f:ad:
                    a4:d5:4e:9d:00:d0:24:84:3b:9d:11:21:7b:7d:96:
                    4c:05:69:58:16:07:34:ca:a6:9a:16:b8:0d:e8:1f:
                    49:52:9f:7f:a4:27:d9:8f:2c:3a:30:76:62:fd:6f:
                    b0:a7:a8:be:33:e8:b6:c2:6a:86:e3:fb:7f:f9:68:
                    b3:76:53:af:7b:f5:30:8d:ee:d5:d1:e4:6b:77:6c:
                    70:c7:22:60:98:79:9a:af:1b:f5:78:84:68:16:97:
                    5c:07:8f:63:e0:24:10:8c:ae:43:5a:a5:fc:8d:9d:
                    de:f9:3d:e7:f6:04:90:c3:94:6b:9a:66:63:76:a6:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:EC:74:BB:9F:46:DC:2C:85:0C:72:B8:78:D5:FE:A1:22:2C:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9b4862b0-8a7d-4d69-bc18-38b430a8c232/9b4862b0-8a7d-4d69-bc18-38b430a8c232.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.233.64.0/19
                IPv6:
                  2605:9b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32220

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:d5:15:9c:96:2d:0d:8a:02:b6:25:a3:e0:ae:66:6d:19:
         04:b2:54:24:61:91:77:4d:4f:9d:92:36:78:1c:4f:64:6c:05:
         3c:e1:0b:0b:de:cd:53:8f:f0:a8:d8:60:0f:b2:8e:5d:f2:28:
         80:53:30:1c:8e:d2:2a:72:2f:24:45:73:e2:db:15:f7:24:4b:
         b1:08:aa:ef:9d:2f:bc:23:6b:33:de:65:5d:77:bf:f6:b3:4b:
         a7:71:5a:90:ca:65:44:b4:5a:1b:2a:dc:2f:02:4a:bd:c4:61:
         ab:56:f1:e9:6e:52:19:e5:70:eb:ba:44:5d:59:4c:ce:ba:04:
         70:8f:0a:db:76:b3:3d:7c:57:a5:f2:27:cb:bd:16:e4:ba:99:
         3d:14:54:c4:f9:22:3d:5b:92:db:83:64:b6:9e:b4:20:61:a2:
         7c:41:2f:e1:97:d6:e0:59:13:67:3b:63:a2:05:48:4b:84:30:
         88:35:20:4f:8f:a4:97:50:77:b6:ce:44:d2:62:38:21:85:2f:
         02:e0:c1:5e:02:20:bb:8b:ff:c8:03:ef:f1:7c:d8:31:64:e5:
         57:cf:50:f3:26:57:90:39:fa:db:d7:76:08:51:81:7a:2a:95:
         97:44:37:d7:ef:92:b9:eb:f7:89:3f:06:46:57:db:c6:3d:9e:
         90:f1:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:16:43 2025 by rpki-client