Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e80c3890-4bdd-4e3b-bbd0-51e9521734e3.cer
File:                     e80c3890-4bdd-4e3b-bbd0-51e9521734e3.cer (raw, json)
Hash identifier:          c9ylhrM2v/ZpFpkwqaAxqb7Xima8+a11uv3O7Uzir34=
Subject key identifier:   9A:2B:94:87:3C:D4:E7:1B:07:03:AF:7A:E2:3E:3E:48:48:9F:10:91
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B567EF40D06C7A721082E9E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e80c3890-4bdd-4e3b-bbd0-51e9521734e3/e80c3890-4bdd-4e3b-bbd0-51e9521734e3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e80c3890-4bdd-4e3b-bbd0-51e9521734e3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 Sep 2025 22:03:01 +0000
Certificate not after:    Fri 31 Dec 2027 23:03:01 +0000
Subordinate resources:    AS: 395019
                          IP: 206.168.144.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:7e:f4:0d:06:c7:a7:21:08:2e:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 27 22:03:01 2025 GMT
            Not After : Dec 31 23:03:01 2027 GMT
        Subject: CN=e80c3890-4bdd-4e3b-bbd0-51e9521734e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:43:3a:c2:a9:af:29:05:76:2d:05:a2:52:
                    1f:03:7a:de:06:a5:02:8b:b2:c2:71:13:79:8f:d3:
                    c2:6e:fc:42:1f:14:53:1f:eb:4b:af:18:1d:eb:8f:
                    cb:03:d9:5b:ab:21:c7:65:6f:36:f9:d3:74:ea:44:
                    58:32:13:19:60:69:43:19:1f:c2:34:cf:f6:8f:c8:
                    63:59:16:8f:d9:1d:97:bf:ce:6b:c9:11:e9:55:15:
                    e6:ea:cd:f7:07:2f:dc:06:07:d5:e9:37:95:b6:f8:
                    6d:a5:1b:e2:06:10:6c:20:1d:46:3c:f9:b2:7b:92:
                    07:eb:f7:dc:9f:d1:4e:79:c6:71:d0:31:76:68:34:
                    f7:43:d5:e5:6d:e7:58:b2:6a:c8:d4:25:c7:f8:9b:
                    69:15:58:ce:5f:fa:e7:bc:7b:da:d3:ce:4e:b3:40:
                    1d:65:cd:98:7b:f1:88:13:73:91:79:71:e6:71:96:
                    52:3e:34:6f:6c:54:8d:c7:a1:9d:c2:59:82:3d:b9:
                    08:9e:1f:d7:25:e3:e9:ca:d2:d2:9f:77:7b:41:f2:
                    19:96:aa:e1:d0:c9:9c:11:47:f5:82:b2:7f:ae:8b:
                    9c:29:eb:84:f0:72:ce:6b:bd:e4:c5:7e:f8:5e:5a:
                    50:5c:97:f0:ce:c9:36:8b:c2:68:0a:e8:0c:e5:19:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2B:94:87:3C:D4:E7:1B:07:03:AF:7A:E2:3E:3E:48:48:9F:10:91
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e80c3890-4bdd-4e3b-bbd0-51e9521734e3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e80c3890-4bdd-4e3b-bbd0-51e9521734e3/e80c3890-4bdd-4e3b-bbd0-51e9521734e3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395019

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:1f:42:28:dc:a9:d3:38:ab:2a:d8:0d:88:b9:60:0e:2e:ce:
         83:20:05:54:eb:23:ea:14:cf:93:5b:83:f3:22:a5:e0:53:dc:
         e5:c2:32:68:a5:54:27:e3:38:52:36:f4:05:32:e6:9a:dd:3d:
         0e:63:d1:2e:f3:62:86:36:1c:f4:19:3f:5d:01:fe:47:3f:28:
         15:23:4b:f7:b5:64:63:99:46:67:d4:b9:2e:67:55:e2:81:44:
         3b:20:23:7f:8c:46:2c:66:42:f1:28:20:0a:48:20:bb:69:f3:
         57:05:c8:ed:11:e0:d8:8b:54:a5:0a:47:40:d9:be:fd:41:f6:
         86:2e:a6:43:b5:70:61:71:b8:2b:33:18:2e:c3:12:d3:19:44:
         3d:48:9a:32:3c:ae:ed:ef:5d:ea:39:0f:a8:d4:e1:6c:6c:c5:
         14:c4:50:61:42:d5:39:e8:bb:93:88:a4:a4:ce:e8:82:b6:20:
         38:55:a9:8d:3a:d2:40:54:e2:c7:21:00:2a:91:a9:a2:cb:05:
         fc:63:b7:3c:85:d0:90:95:73:69:a2:fd:56:ca:33:e6:f1:54:
         6a:35:3f:c2:e6:db:e9:00:5a:3b:ab:0b:f2:da:fe:5e:12:bd:
         8f:31:7d:38:0d:77:da:25:b4:15:73:d8:11:c4:7d:26:1c:6a:
         f0:d0:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:16:45 2025 by rpki-client