Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer
File:                     76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer (raw, json)
Hash identifier:          Tvnf9LVm8r1FjFjL02zJkdxlPDyTAY7l1INeBgZF21w=
Subject key identifier:   F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584B72BA5EB5A54A1EBD631FD680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Oct 2025 00:45:22 +0000
Certificate not after:    Tue 11 Jan 2028 01:45:22 +0000
Subordinate resources:    IP: 136.22.6.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:ba:5e:b5:a5:4a:1e:bd:63:1f:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct  8 00:45:22 2025 GMT
            Not After : Jan 11 01:45:22 2028 GMT
        Subject: CN=76025b2c-a5d0-4f94-a97d-21d8b8245b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:d4:61:48:09:ee:a5:2d:62:43:90:4f:e8:
                    65:c3:8e:65:66:dc:d3:f6:f8:29:6f:b4:52:97:ca:
                    d4:27:59:d0:00:f6:59:f2:64:bf:c4:a2:af:8d:c0:
                    a2:43:8a:e3:5c:b8:6b:42:4e:77:c1:45:17:4b:7c:
                    83:1d:d5:bc:19:c8:13:bb:7e:ef:59:68:51:d1:bc:
                    9b:01:bc:07:64:53:3b:44:22:ef:c6:62:b1:eb:32:
                    d2:c5:4d:fb:8e:3f:5b:35:9f:d7:9e:51:60:f8:70:
                    b3:e3:17:ff:ea:70:f4:49:ad:0a:e9:5d:ce:a4:a6:
                    d9:0f:7d:15:85:1c:7a:ee:38:32:c7:f3:25:b8:ec:
                    09:d3:55:45:9e:32:da:08:47:8c:dc:77:01:cd:b8:
                    33:31:26:bc:f7:fc:ff:02:80:f4:d2:28:43:ac:6f:
                    c5:ef:73:13:8a:e0:0d:c9:75:fb:ca:bf:b8:c1:a6:
                    bd:9b:86:f7:70:ab:03:83:2c:67:4c:6b:f2:16:3d:
                    86:79:d5:57:5b:51:95:e6:38:52:48:7a:02:4d:d8:
                    b8:08:e8:f5:58:00:eb:dd:a1:c7:33:64:a0:2f:94:
                    05:c5:d3:45:08:cf:89:84:ec:92:3f:66:fb:b4:71:
                    cf:30:84:c6:61:e0:11:74:3f:82:c3:ac:4e:72:30:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:eb:47:0a:fc:21:7c:1d:e9:8d:1c:46:c2:9a:5c:60:1f:
         cf:b4:72:9d:c0:81:c6:53:26:31:64:7b:93:d8:43:65:c2:71:
         c1:54:32:8b:ad:ae:c0:29:9f:14:45:16:a8:9d:07:8f:24:fd:
         7b:ab:37:6a:e3:f6:7f:34:c5:2d:01:0a:1f:d0:1b:ab:1e:1c:
         ea:aa:ed:cc:32:a9:c1:52:a3:15:25:85:b6:04:a3:cc:df:8b:
         cf:e4:5d:61:b6:a0:83:1c:ff:59:5c:df:6f:b6:0c:0f:37:16:
         71:76:0b:35:f1:45:00:56:8c:60:0f:5b:d7:aa:54:61:fd:82:
         1c:b8:74:3f:f2:a0:f6:7a:91:54:f5:b0:ba:4b:a0:40:2a:17:
         55:30:06:26:4b:91:18:e7:3d:20:f4:39:02:b9:bb:8d:b2:41:
         75:57:ea:3c:b0:90:09:f0:cc:3e:c8:de:15:29:7f:0a:26:0c:
         d1:71:13:2b:9c:b9:a0:8a:94:80:5a:a0:81:29:86:8f:95:b9:
         fa:f9:b3:7f:81:ab:ae:c7:4c:3a:d1:32:41:7a:7a:6c:57:59:
         34:b0:a4:83:40:be:2d:d9:2c:6d:a1:5f:56:5e:d7:98:67:c4:
         3a:e1:35:fa:30:6f:8d:91:2b:17:a2:70:87:43:9b:fc:2f:5c:
         b4:f0:48:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:49:40 2025 by rpki-client