Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
File:                     590b174f-a815-4e24-9512-3236e7727928.cer (raw, json)
Hash identifier:          U6ShEK4keWLfEczegDGp9B4FTK/rKzcsMKSL2JCiTEQ=
Subject key identifier:   D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285849EEAD6B5091B80CF2AA451D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 May 2025 00:45:37 +0000
Certificate not after:    Wed 25 Aug 2027 00:45:37 +0000
Subordinate resources:    AS: 396479
                          IP: 69.72.32.0/20
                          IP: 141.193.32.0/23
                          IP: 143.55.224.0/20
                          IP: 159.112.240.0/20
                          IP: 159.135.224.0/20
                          IP: 161.38.192.0/20
                          IP: 198.244.48.0/20
                          IP: 216.71.96.0/22
                          IP: 2620:23:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:ad:6b:50:91:b8:0c:f2:aa:45:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 22 00:45:37 2025 GMT
            Not After : Aug 25 00:45:37 2027 GMT
        Subject: CN=590b174f-a815-4e24-9512-3236e7727928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:69:81:f5:24:3f:52:29:ea:23:d5:69:4e:
                    38:d3:88:e5:95:69:3e:0d:b8:31:84:82:82:43:7f:
                    c1:ed:f5:0c:a2:70:e4:67:3c:0d:b3:6e:97:ae:bd:
                    7f:89:8d:47:16:18:66:f5:82:2b:d1:f8:6d:95:3a:
                    03:78:9f:bb:24:16:44:bb:15:43:bc:23:39:10:28:
                    ff:91:e2:5b:12:48:3b:84:8f:84:b1:74:6b:ca:7a:
                    28:6d:53:40:87:29:2c:5d:4c:c1:ae:5a:19:95:f5:
                    7e:db:8a:c5:8a:ef:4b:d8:fc:73:2c:26:51:26:d3:
                    ad:ef:c6:cd:af:a0:b1:d7:07:12:5c:e7:90:80:10:
                    88:74:fe:f9:1d:f5:d0:30:38:64:8d:bb:cc:12:cd:
                    42:66:a7:de:39:48:b0:b2:8b:d3:9a:96:39:f9:ca:
                    44:dc:ea:df:cd:7b:e2:ab:d5:b2:d3:21:d2:9b:7b:
                    be:13:13:ad:e5:2a:a5:1e:f6:5f:ee:67:88:c8:38:
                    29:81:bb:98:7c:e7:6a:f7:2b:0a:cb:68:84:1b:b9:
                    6d:5b:13:d6:1a:f1:ff:3d:00:03:1b:73:22:a7:6a:
                    9d:aa:de:2e:f4:93:ab:f3:bc:04:bd:de:45:33:58:
                    cb:fb:f6:f2:f2:68:46:54:cc:21:a1:ca:a6:fb:38:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.32.0/20
                  141.193.32.0/23
                  143.55.224.0/20
                  159.112.240.0/20
                  159.135.224.0/20
                  161.38.192.0/20
                  198.244.48.0/20
                  216.71.96.0/22
                IPv6:
                  2620:23:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396479

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:c5:2d:36:ad:70:42:52:96:33:80:72:35:c8:f4:77:f7:
         bc:fc:5d:db:dc:9e:9d:60:42:e9:a9:fa:41:22:43:51:93:e5:
         75:86:93:00:73:7f:4f:6f:74:b2:68:40:af:56:f4:7c:43:28:
         3d:66:40:f1:29:ea:ee:47:67:3c:44:b8:74:3e:fc:06:09:4b:
         e0:f9:fc:43:9c:e1:f9:88:e6:fd:33:e6:ee:b1:b7:08:a3:58:
         bd:fa:2a:55:e9:59:84:e3:1c:19:e7:4a:bc:45:5f:5f:b3:07:
         cb:be:1a:59:56:c4:c3:f1:75:d0:ff:b6:8a:2d:35:a3:09:d3:
         d8:ae:7c:28:d3:86:07:bf:3f:d4:64:a6:79:ad:da:4f:51:9e:
         92:78:72:34:de:17:65:14:c4:c2:ce:87:51:28:ea:aa:6d:ec:
         9d:a2:44:90:bc:ce:09:3b:3a:50:8f:14:77:08:34:b7:43:82:
         23:33:8e:20:98:ca:7a:5e:fc:ed:88:b9:7c:0a:22:86:cc:63:
         a8:ea:3b:da:e7:d5:79:9c:b0:77:d4:73:85:e8:64:6a:3d:87:
         18:36:e9:66:b7:bb:4e:e9:9d:46:aa:a8:7c:41:c2:a8:3e:80:
         5b:a7:b7:da:e8:d8:63:65:5e:9d:63:5e:85:35:a1:e8:ba:ca:
         55:9b:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 16:48:52 2025 by rpki-client