Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
File:                     f70c9613-7def-4bc4-b860-f4e5374d76a7.cer (raw, json)
Hash identifier:          sB45OJ3CF25GYwWA6JhB9kCwFSoq6QnSdFielZpyuF4=
Subject key identifier:   5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B5AC87916D578034F7D20A500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Sep 2025 10:54:23 +0000
Certificate not after:    Wed 17 Nov 2027 16:42:51 +0000
Subordinate resources:    AS: 398991
                          IP: 130.250.188.0/23
                          IP: 198.13.16.0/23
                          IP: 199.245.233.0 -- 199.245.234.255
                          IP: 206.109.56.0/22
                          IP: 208.122.16.0/22
                          IP: 209.131.120.0/22
                          IP: 2607:a540::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5a:c8:79:16:d5:78:03:4f:7d:20:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 29 10:54:23 2025 GMT
            Not After : Nov 17 16:42:51 2027 GMT
        Subject: CN=f70c9613-7def-4bc4-b860-f4e5374d76a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:f5:e0:6b:15:4a:96:ab:4b:30:10:9a:91:
                    a0:7c:93:35:c9:c0:55:76:7d:42:bc:3c:17:e5:95:
                    19:2a:d7:3a:de:93:f3:a1:de:1e:fd:2a:e3:9b:cd:
                    bd:a1:74:4b:5c:41:1f:2f:63:b2:15:7c:66:eb:fb:
                    bc:36:2c:30:b4:21:46:18:cc:e7:c9:1f:2c:13:73:
                    6a:27:10:53:2b:be:90:c9:78:1d:c3:3a:a1:e1:73:
                    6b:a4:45:fd:b7:45:5f:49:fe:4a:36:17:09:27:3d:
                    e0:de:c7:6f:dd:df:d3:df:7e:58:eb:bb:72:a0:80:
                    71:c1:5c:fc:ac:ef:16:93:fd:7c:a5:89:6a:a0:9a:
                    ce:d8:bb:df:58:22:15:3f:69:f0:f8:69:8f:00:65:
                    af:a0:4e:bb:67:b1:21:88:da:25:f6:c8:02:55:fe:
                    98:82:ae:76:e7:54:b9:85:70:a3:42:f3:e0:9d:11:
                    bc:f9:4f:7f:7a:36:20:15:67:a1:a4:22:a0:63:8a:
                    e2:73:f5:e8:e4:2a:52:10:8e:e7:92:df:16:49:b1:
                    ee:38:da:5e:27:5f:a1:49:17:47:37:10:0d:10:a5:
                    45:5d:20:00:cb:8b:8e:7a:dc:dc:d6:89:3a:ea:70:
                    c1:1a:73:39:e4:6f:a5:13:21:48:db:5d:4f:42:7e:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.188.0/23
                  198.13.16.0/23
                  199.245.233.0-199.245.234.255
                  206.109.56.0/22
                  208.122.16.0/22
                  209.131.120.0/22
                IPv6:
                  2607:a540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398991

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:0b:ec:61:ad:e7:6b:f6:6e:fa:6a:aa:5e:bd:8c:b2:7c:22:
         de:73:13:b0:d4:dd:e2:53:d4:25:f8:1c:62:83:f4:2f:ba:ae:
         1b:08:13:3e:d3:18:19:94:db:c5:d7:46:b5:a0:35:71:59:50:
         ee:d6:09:0e:25:83:ee:c7:45:28:50:67:92:5f:88:4b:d1:a2:
         d7:0d:0b:ad:14:82:ed:8a:e6:22:fe:85:2d:7c:00:25:82:7d:
         80:1e:60:d4:53:4a:f8:b4:2e:cb:26:d7:8c:23:96:63:5f:32:
         b2:5c:50:1f:01:8f:f6:9c:cd:32:ec:83:3c:35:4f:78:0e:ec:
         2a:08:82:3d:1e:ed:9d:0d:fd:81:10:02:cf:1c:6b:b1:ef:c0:
         6b:cf:01:bd:be:32:d0:de:3b:9b:a5:12:0e:50:49:4e:03:8d:
         ce:e1:7c:c4:70:37:8d:67:31:bf:f8:b7:e6:f0:ff:ab:ca:7f:
         7d:9e:fb:90:3f:be:e6:32:e2:4a:a2:1d:a3:99:64:7a:15:2c:
         ed:4e:ac:f6:6c:50:7c:5e:73:85:34:a9:f5:4e:81:5d:ae:59:
         f7:c8:69:bd:69:43:5e:ab:93:74:3b:16:fb:d9:3a:8a:3f:52:
         14:9f:7d:c6:60:99:05:36:b6:da:5c:e9:7e:7a:36:b2:0b:5c:
         ad:98:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:38:05 2025 by rpki-client