Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE.cer
File:                     DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE.cer (raw, json)
Hash identifier:          Iy3P6SmzdfNgBhDFM7ijV3OlMUkRlFXeHIc9V00v6WU=
Subject key identifier:   DA:9D:3E:0D:86:B4:A6:BE:3E:E5:7F:E8:31:01:3A:35:40:95:DC:DE
Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4
Certificate issuer:       /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
Certificate serial:       126FD0C6B61A70A2F32FD7804F9F1C7156C9C716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/13/DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE.mft
caRepository:             rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/13/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 16 Jul 2025 22:37:03 +0000
Certificate not after:    Wed 15 Jul 2026 22:42:03 +0000
Subordinate resources:    AS: 7719
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 07:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6f:d0:c6:b6:1a:70:a2:f3:2f:d7:80:4f:9f:1c:71:56:c9:c7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4
        Validity
            Not Before: Jul 16 22:37:03 2025 GMT
            Not After : Jul 15 22:42:03 2026 GMT
        Subject: CN=DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:c9:28:23:d3:52:d2:e8:29:5c:9e:8f:7a:
                    2d:68:f5:22:3b:6a:bb:95:80:5c:c9:7c:5e:04:8a:
                    8d:91:de:66:fa:85:7c:8a:0e:3a:a5:f1:f7:0e:13:
                    6a:71:87:1b:a6:ec:a0:5f:56:f3:49:ec:3a:ee:02:
                    1c:9d:24:b9:12:f5:ce:ca:38:55:18:c8:64:3d:ac:
                    15:30:6e:12:db:ef:d5:ea:4e:9a:d7:c1:fc:2e:d7:
                    a4:2b:ca:c8:b3:6b:79:d3:c6:40:1b:d9:6c:0d:f8:
                    18:57:6c:3d:3f:a0:26:1b:4f:ae:1f:21:9e:1c:47:
                    b4:cf:bf:fc:f2:6d:c9:b1:4e:a0:4d:95:f7:bb:80:
                    1a:4e:65:6b:b9:b4:90:78:0a:e0:95:9c:f7:ed:b4:
                    49:f6:c7:c6:a2:ec:39:0d:ed:b8:ee:ad:49:91:c9:
                    7a:a3:02:95:31:66:29:6a:f6:16:26:e4:bb:68:20:
                    68:e5:7c:e3:c8:56:b9:25:c0:b8:69:d3:2f:72:00:
                    85:55:fd:f6:39:ff:ae:1f:bf:20:1a:17:0e:fc:b1:
                    f1:41:3f:69:15:ca:3d:bf:38:eb:04:3e:d0:b6:a5:
                    a7:6d:91:a4:aa:d7:59:76:5b:8f:07:78:0c:68:aa:
                    de:37:b7:78:9e:65:f4:3a:fa:ff:ba:fe:ca:4c:79:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:9D:3E:0D:86:B4:A6:BE:3E:E5:7F:E8:31:01:3A:35:40:95:DC:DE
            X509v3 Authority Key Identifier:
                keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/13/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/13/DA9D3E0D86B4A6BE3EE57FE831013A354095DCDE.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7719

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:78:d1:35:3c:2f:22:71:de:b0:04:17:f5:73:b9:9f:f2:
         8a:ae:b0:f4:31:24:14:f3:09:74:dd:43:79:84:66:f1:c2:f2:
         1f:db:53:a2:85:24:3d:7e:91:c1:9b:2d:27:58:31:44:92:0a:
         79:49:60:eb:8c:aa:1f:74:13:02:ac:f0:4d:3c:56:0e:98:67:
         69:32:7b:d7:d7:fa:ca:65:6a:af:03:c9:95:15:ec:42:ca:a6:
         b0:37:85:fb:84:02:a7:c9:60:c5:29:4a:43:37:f5:dd:5f:26:
         d4:9d:99:a7:6d:2a:92:f4:d0:6e:ec:4c:25:b8:45:d5:30:71:
         fe:ef:a6:3b:69:4b:6b:26:fa:c2:15:01:78:bc:64:38:ed:8d:
         bf:ba:30:9f:8b:13:a9:aa:33:75:46:5d:78:dd:cd:7d:a8:88:
         ad:2a:a5:02:4b:14:8e:ec:cd:16:c5:ab:26:24:6d:0d:e5:3d:
         35:db:55:06:79:5c:e6:e4:55:0e:cb:c7:73:3d:66:e0:0e:4b:
         a5:91:42:b2:88:cf:4c:17:fd:06:c0:44:7d:6d:e8:58:89:28:
         f8:54:38:67:b3:a3:46:2f:7f:83:f5:59:48:46:95:dd:6f:b5:
         11:4c:34:b1:fc:79:90:06:de:38:08:e9:74:78:60:30:18:dd:
         8d:ed:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:21 2025 by rpki-client