Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e3321b-768a-4bc7-bfbb-8a039bafc723.cer
File:                     f6e3321b-768a-4bc7-bfbb-8a039bafc723.cer (raw, json)
Hash identifier:          xk6nN5px/kRqg75/fPdXTQb3eZHMdUgPTnx3s8TVWEg=
Subject key identifier:   3F:8F:19:93:9F:40:53:68:5E:9A:3E:5F:9B:2E:12:51:39:B2:65:B3
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B2CEA158091687EA1989FA9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e3321b-768a-4bc7-bfbb-8a039bafc723/f6e3321b-768a-4bc7-bfbb-8a039bafc723.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e3321b-768a-4bc7-bfbb-8a039bafc723/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Sep 2025 00:34:55 +0000
Certificate not after:    Fri 17 Dec 2027 01:34:55 +0000
Subordinate resources:    AS: 401972
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:ea:15:80:91:68:7e:a1:98:9f:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 13 00:34:55 2025 GMT
            Not After : Dec 17 01:34:55 2027 GMT
        Subject: CN=f6e3321b-768a-4bc7-bfbb-8a039bafc723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:72:10:6b:e8:d6:db:05:bd:c6:00:72:c3:5e:
                    24:0f:07:a3:81:a3:71:d0:32:9f:23:df:da:43:04:
                    44:4f:3c:c1:45:7d:01:0c:52:58:d2:b0:a2:ef:64:
                    f5:f6:b4:44:28:ee:07:81:68:28:51:64:45:0c:ce:
                    5d:15:8f:80:39:78:be:b3:df:55:34:82:8c:e0:5f:
                    5b:4e:89:6b:ae:3b:62:91:82:30:1c:74:64:21:f5:
                    49:ce:e6:5c:4d:cc:bc:a8:f0:2e:74:ae:79:02:5b:
                    b9:2d:75:74:68:67:51:dd:32:b5:dd:90:85:bf:dd:
                    eb:67:68:79:ac:9b:e1:3d:4d:02:17:63:3a:49:19:
                    95:d4:2b:c7:7c:a2:b7:57:1d:97:99:56:41:13:18:
                    e1:f1:d5:47:d8:d1:a5:59:2d:dc:c7:56:0f:f7:8b:
                    4b:c4:18:51:29:1c:a8:99:2a:48:85:7e:50:69:ba:
                    b4:5c:51:93:63:f9:22:78:f6:7b:20:f9:e8:d8:10:
                    f9:a8:a1:4b:99:cf:70:23:75:31:81:cc:4e:c7:e7:
                    d6:2b:0e:5e:00:35:c2:e3:54:0e:5a:f0:dc:62:4f:
                    bb:64:a2:99:f4:d2:85:31:3b:6e:47:f4:dd:8c:08:
                    33:31:1e:e0:cc:7d:fa:40:43:1c:78:5f:13:6c:df:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:19:93:9F:40:53:68:5E:9A:3E:5F:9B:2E:12:51:39:B2:65:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e3321b-768a-4bc7-bfbb-8a039bafc723/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e3321b-768a-4bc7-bfbb-8a039bafc723/f6e3321b-768a-4bc7-bfbb-8a039bafc723.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401972

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:bf:65:e8:29:26:b0:45:80:4a:5e:a6:f5:9e:28:ea:2a:5a:
         5e:c7:25:c3:78:80:ef:5f:05:8c:b7:a5:db:0a:26:b2:5d:01:
         3b:ee:7b:bd:04:1f:9f:1c:f3:9f:10:78:4f:07:b9:73:f5:d4:
         74:b7:8e:b5:2c:4a:93:c2:9e:5a:b4:eb:1b:18:15:fd:87:4b:
         de:4a:03:56:b9:01:cc:02:be:87:ce:6b:df:41:c2:05:fb:d7:
         19:d9:e6:b8:0f:3c:54:d2:85:33:83:fc:52:e5:c9:92:e0:e8:
         16:97:1f:37:8d:cb:3c:2e:ae:c9:c2:5d:8e:49:25:d1:5f:a2:
         ba:f0:a7:db:73:78:ef:a9:de:d5:e9:39:94:79:7a:9e:14:2a:
         b5:d3:a6:98:be:2b:0a:f0:5c:e3:19:d4:0a:a1:bb:03:ef:2c:
         d4:52:70:c0:43:1b:81:6a:cb:60:96:4d:15:ea:97:7e:22:2c:
         8a:90:ec:99:3a:2b:aa:7c:d7:87:84:c4:6f:66:a4:c1:db:f5:
         0f:05:b3:f0:02:ca:44:70:92:f5:a4:c2:ed:36:38:78:ab:7c:
         f3:cd:3c:15:44:aa:41:0b:c3:a3:a0:e1:b9:e6:1d:09:32:8f:
         3b:eb:64:b2:59:e1:44:46:81:96:eb:f3:5a:b2:45:43:0e:0d:
         6d:57:67:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:36:05 2025 by rpki-client