Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
File:                     b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer (raw, json)
Hash identifier:          5Ekxbtp2ajB0lxrEYJndIWT6whM1Gfrapc+NttL4zD4=
Subject key identifier:   BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B3FB0E32496AE90580AA1AEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Sep 2025 18:00:02 +0000
Certificate not after:    Thu 23 Dec 2027 19:00:02 +0000
Subordinate resources:    AS: 16608
                          IP: 64.187.64.0/19
                          IP: 2604:5f80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:b0:e3:24:96:ae:90:58:0a:a1:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 19 18:00:02 2025 GMT
            Not After : Dec 23 19:00:02 2027 GMT
        Subject: CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:b2:98:bb:8d:21:fc:77:c2:89:4c:41:e4:
                    1e:9b:e5:15:27:82:7b:60:35:09:5e:22:e9:0c:c4:
                    c5:3b:4e:c7:fd:eb:e4:82:2a:e4:0b:3e:33:1c:68:
                    51:c9:97:04:8e:b7:74:4f:b6:0a:ba:15:75:a2:6c:
                    62:5d:2c:a3:06:a2:b7:0a:61:0e:d6:45:07:78:ba:
                    1b:ff:68:25:69:e5:9e:40:d9:05:0b:e5:eb:d2:4b:
                    62:85:c0:75:26:71:bd:82:93:29:61:7d:46:39:df:
                    1a:5d:1c:c5:4f:f9:cf:8c:19:dc:f1:f3:f8:ad:01:
                    ed:7a:e2:41:9c:98:2c:30:36:2b:9b:f7:89:83:ce:
                    b7:a1:f7:ed:84:83:ce:97:74:37:e2:a3:2a:67:f0:
                    20:30:74:9d:1f:aa:d9:02:cd:05:8f:2a:5c:a3:c1:
                    20:7c:b0:a7:c6:b6:09:54:9e:03:ed:ec:f9:29:72:
                    20:a7:ca:29:75:c2:48:b9:7c:5e:60:4c:72:8c:fc:
                    36:8b:9d:ba:7d:a6:f8:25:b5:99:2c:a7:ee:9a:4f:
                    c6:41:fd:44:8c:d7:0f:1c:51:08:81:a5:2d:af:6f:
                    b3:ba:d1:65:6e:b2:fd:31:7b:46:84:cd:bc:b4:40:
                    7a:ab:3e:d4:38:20:23:bd:0a:f8:79:ad:4b:4c:14:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.64.0/19
                IPv6:
                  2604:5f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16608

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:d3:cc:87:89:c9:85:a1:b7:b2:c6:7d:77:73:6c:95:29:
         a6:10:7f:67:e6:98:29:83:51:bd:1f:94:da:a0:ac:68:3c:4e:
         74:15:18:a2:d1:39:ec:1a:80:0b:fd:8f:c8:36:26:cb:1b:e1:
         d9:06:a8:ce:51:70:99:5b:02:66:a9:fc:64:90:76:24:a3:06:
         f3:ec:25:7a:39:29:23:5b:41:f5:99:65:f3:33:9d:4b:88:de:
         5d:e9:4d:00:7d:59:db:36:73:8d:42:9b:c5:da:7f:e8:48:83:
         3e:e4:5e:98:08:33:1f:ef:3e:7d:04:7c:45:8a:98:19:e9:d9:
         9d:d4:2a:cd:66:49:65:f9:5d:cd:75:e1:a9:fb:4a:6a:6e:36:
         a7:fe:71:50:c3:7f:f6:28:13:ca:d2:1a:69:3f:e8:d0:b7:75:
         b2:5e:ca:6d:e2:50:9f:5e:9c:05:b9:93:20:4d:6c:61:51:43:
         15:d2:c4:33:75:1c:24:aa:8f:e5:36:e2:9a:b0:87:96:57:4f:
         42:d4:44:65:fc:d6:f9:85:33:a1:8d:02:d5:d7:a0:5f:4d:af:
         34:29:bc:91:19:b0:bc:8c:a5:8c:42:65:e0:01:96:88:79:85:
         14:73:05:7b:2d:49:36:8c:df:a6:8e:78:49:ec:b4:be:4d:96:
         f2:27:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:42 2025 by rpki-client