Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae16b165-3823-4baa-9bc8-c321081e651f.cer
File:                     ae16b165-3823-4baa-9bc8-c321081e651f.cer (raw, json)
Hash identifier:          RVBRjK0r65mI91mOD4wdT89a5lABkoBGOX4QBiBChHY=
Subject key identifier:   99:86:6C:45:21:E6:50:C2:05:2E:1B:77:2E:87:91:79:E2:8F:90:7A
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B1850BA49E971F19FBCA37860
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae16b165-3823-4baa-9bc8-c321081e651f/ae16b165-3823-4baa-9bc8-c321081e651f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae16b165-3823-4baa-9bc8-c321081e651f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Sep 2025 15:29:45 +0000
Certificate not after:    Thu 09 Dec 2027 16:29:45 +0000
Subordinate resources:    AS: 919
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:50:ba:49:e9:71:f1:9f:bc:a3:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep  5 15:29:45 2025 GMT
            Not After : Dec  9 16:29:45 2027 GMT
        Subject: CN=ae16b165-3823-4baa-9bc8-c321081e651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4b:ce:ef:6b:33:32:e4:53:b3:67:b1:6e:3d:
                    56:b3:5d:a1:c7:6a:ca:fe:b6:fd:fd:24:60:b4:4d:
                    02:9c:eb:9e:d3:46:ae:33:bf:51:56:95:97:da:11:
                    7e:c9:29:19:fb:9e:e0:ab:db:1c:dc:b6:e4:e9:8d:
                    52:cc:f4:08:c9:f0:7c:f6:16:a9:b9:4d:5a:7d:97:
                    b5:dd:e6:09:9b:7b:df:b9:ca:a6:c1:1c:58:de:01:
                    3b:8a:86:7f:7a:b7:90:59:5c:85:9b:64:6d:a0:7a:
                    05:6e:ac:41:8e:4c:83:49:54:88:17:04:34:bb:4e:
                    4d:50:db:de:4d:bc:5f:48:2f:55:60:78:b8:79:86:
                    bf:05:72:c2:b5:87:8f:b3:c7:07:82:3a:7f:bb:dd:
                    9d:dd:95:1d:c6:e6:87:80:89:a1:a4:88:f6:7d:13:
                    65:5b:d9:6d:ef:be:f5:51:15:c5:64:14:53:28:26:
                    98:b1:72:e0:fe:8f:c4:05:c1:f2:65:10:cd:9f:42:
                    02:fc:a4:39:0f:82:e2:7a:cc:2a:d1:69:2c:11:58:
                    b9:9f:27:82:c3:80:9e:c6:57:47:75:38:c9:6b:ec:
                    22:a7:43:db:26:78:3c:b1:22:a8:cd:9f:c6:86:58:
                    1e:95:6d:45:75:26:ac:80:56:f4:d7:e1:6f:09:8a:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:86:6C:45:21:E6:50:C2:05:2E:1B:77:2E:87:91:79:E2:8F:90:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae16b165-3823-4baa-9bc8-c321081e651f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ae16b165-3823-4baa-9bc8-c321081e651f/ae16b165-3823-4baa-9bc8-c321081e651f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  919

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:b7:f7:2a:be:21:5b:2a:52:24:a1:51:51:81:00:10:66:
         fd:88:d5:5b:94:64:c4:16:aa:16:8e:b1:7e:23:0b:59:2c:d9:
         da:f5:12:91:40:4b:08:db:cb:38:aa:6c:4c:7b:7d:e3:32:06:
         a8:e0:7f:0d:d7:68:60:e4:56:64:14:4e:19:45:96:b6:52:cb:
         98:77:02:9c:a1:6f:6b:74:96:f1:de:73:8b:d5:04:c5:fe:70:
         82:70:65:37:94:37:07:48:df:73:d1:56:76:09:ee:5b:3b:e4:
         37:ab:04:80:8c:e5:a7:54:be:7b:a9:54:04:5a:d1:66:04:ef:
         75:d6:a4:39:e5:06:c0:55:86:4b:ea:64:1a:8c:c5:56:5b:48:
         8c:6c:5e:6b:ff:95:90:a7:b9:b1:42:ea:e8:95:6e:34:1c:69:
         fe:b6:db:87:92:e0:2b:e7:3f:90:5f:d5:b2:a6:8b:5f:95:06:
         78:e7:a7:e8:f3:5b:8d:50:ea:34:2f:1c:25:a4:63:29:18:59:
         1d:c0:0d:23:30:fc:9a:dc:fa:d7:a9:a1:ee:37:77:8b:cb:ec:
         16:bf:e8:38:df:a2:d0:47:d1:ff:a3:11:f9:69:79:08:77:23:
         83:72:41:b9:55:18:66:00:b9:a1:dd:5c:06:aa:e9:17:1e:bb:
         2c:e1:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:41 2025 by rpki-client