Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f82efd05-d40b-475e-a4f5-457abb5ffa63.cer
File:                     f82efd05-d40b-475e-a4f5-457abb5ffa63.cer (raw, json)
Hash identifier:          ucGKVWu9PqoUFxSKf+GFupKVsOAva9eTsIUG7UM0djA=
Subject key identifier:   63:4D:C7:C1:90:6E:83:82:87:91:13:50:1C:23:9D:FE:FB:46:73:FA
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B366A8CD340D38F4C42EFEC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f82efd05-d40b-475e-a4f5-457abb5ffa63/f82efd05-d40b-475e-a4f5-457abb5ffa63.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f82efd05-d40b-475e-a4f5-457abb5ffa63/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Sep 2025 10:16:02 +0000
Certificate not after:    Mon 20 Dec 2027 11:16:02 +0000
Subordinate resources:    AS: 11792
                          AS: 13944
                          AS: 23251
                          IP: 192.234.28.0/24
                          IP: 198.184.227.0/24
                          IP: 199.48.16.0/20
                          IP: 199.244.0.0 -- 199.244.13.255
                          IP: 205.207.246.0/23
                          IP: 207.45.128.0/19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:6a:8c:d3:40:d3:8f:4c:42:ef:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Sep 16 10:16:02 2025 GMT
            Not After : Dec 20 11:16:02 2027 GMT
        Subject: CN=f82efd05-d40b-475e-a4f5-457abb5ffa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0c:50:05:67:bc:a7:3d:d7:eb:b0:2d:fc:34:
                    2e:fb:ce:4e:23:73:a4:f3:d2:b5:4c:cc:e0:e8:92:
                    b0:13:2a:cc:03:cd:f9:45:3c:b3:da:55:c8:e0:68:
                    bd:a8:7d:2f:1b:18:8c:ed:e2:a4:7f:d7:25:d1:cb:
                    53:2d:67:c6:e8:40:07:91:e4:b0:8e:7d:eb:6e:4c:
                    10:82:85:f9:1f:c7:f2:43:3e:19:86:bc:65:ae:4b:
                    bd:86:a4:90:ca:ea:06:41:21:2a:f2:12:09:53:70:
                    bc:ed:74:b5:7c:b9:08:1e:8b:98:07:43:1b:33:00:
                    50:00:f7:cf:21:07:5d:4a:48:b5:71:ce:49:eb:64:
                    e9:7f:6e:05:65:be:8f:7f:ef:03:ab:77:fa:6b:f4:
                    e4:d5:b9:c1:77:32:cf:9f:22:24:05:a8:06:9a:55:
                    6b:18:6f:d0:3d:4b:f8:b1:13:f3:36:39:57:b0:09:
                    4a:02:74:92:e5:00:b8:4b:c7:fd:e8:19:2f:b2:8b:
                    5a:36:3d:e3:12:2d:3f:a4:fd:d9:ea:5e:2c:76:b8:
                    2c:d4:7d:73:ea:13:a6:87:65:b4:ed:2b:39:0d:88:
                    3a:54:03:de:f6:fd:2d:26:5a:8c:c0:6b:3f:52:50:
                    2c:78:be:51:ca:9f:79:b9:c2:f2:e4:31:17:03:b4:
                    c2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4D:C7:C1:90:6E:83:82:87:91:13:50:1C:23:9D:FE:FB:46:73:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f82efd05-d40b-475e-a4f5-457abb5ffa63/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f82efd05-d40b-475e-a4f5-457abb5ffa63/f82efd05-d40b-475e-a4f5-457abb5ffa63.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.28.0/24
                  198.184.227.0/24
                  199.48.16.0/20
                  199.244.0.0-199.244.13.255
                  205.207.246.0/23
                  207.45.128.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11792
                  13944
                  23251

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:03:32:20:15:33:e5:1e:bc:22:96:62:ae:68:16:68:9d:99:
         84:40:88:2f:61:19:4c:77:8b:fa:16:c6:98:a9:14:64:20:60:
         1b:9d:1a:24:92:f9:da:85:75:1e:18:fa:50:f6:02:d3:1c:2c:
         80:3a:b6:6a:8e:5d:ea:b8:a7:31:91:5c:87:0a:0b:bc:fd:3b:
         01:b1:0c:b3:d0:42:25:f7:5c:d2:43:6d:69:34:1c:77:7a:19:
         25:e9:6c:db:df:79:4e:fe:72:2c:b3:19:b9:f3:42:29:9b:8b:
         64:d1:b8:fb:54:66:d2:18:cc:d1:9c:fe:ac:d3:bd:d1:14:60:
         ab:33:ac:88:51:65:ed:6c:3e:72:a1:c4:2a:a1:81:e6:df:79:
         61:d3:82:dd:4c:13:f0:b0:37:87:86:92:31:4a:03:8c:29:0b:
         2f:4e:1a:e5:39:ed:c8:fc:a8:f6:68:5f:a5:78:1f:38:5a:a6:
         aa:1c:b3:b2:73:d1:2c:27:6b:4b:de:53:89:44:40:f2:b5:1b:
         d9:a9:87:bb:4e:f4:11:19:24:c9:80:6a:38:0f:60:41:52:ee:
         57:9e:3f:c8:44:a9:40:e2:a9:fd:37:c3:fc:1b:a2:dc:51:21:
         f6:ce:2e:0b:22:59:a0:a6:b1:96:15:35:5a:43:d0:58:51:40:
         d1:09:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:21:22 2025 by rpki-client