
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/793ef116-8f53-448b-b18b-972e4f78eafe.cer
File:                     793ef116-8f53-448b-b18b-972e4f78eafe.cer (raw, json)
Hash identifier:          mdD6X+Cr7uGhVsGw9VJvZvWh2SjYeNOFpHvFEE+RXc0=
Subject key identifier:   1A:74:86:D8:B4:1B:1A:4B:9B:D0:98:D8:B7:08:28:BB:52:C7:1B:54
Authority key identifier: 6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
Certificate issuer:       /CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
Certificate serial:       010D0C9F4328584BBCBED8D416AE9F49900CA280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/793ef116-8f53-448b-b18b-972e4f78eafe/793ef116-8f53-448b-b18b-972e4f78eafe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/793ef116-8f53-448b-b18b-972e4f78eafe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Nov 2025 13:04:12 +0000
Certificate not after:    Sun 06 Feb 2028 13:04:12 +0000
Subordinate resources:    AS: 401087
                          IP: 23.179.8.0/24
                          IP: 2602:f8e4::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:be:d8:d4:16:ae:9f:49:90:0c:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85e06eaf-37a7-4588-abea-e4909ef1b4e2
        Validity
            Not Before: Nov  3 13:04:12 2025 GMT
            Not After : Feb  6 13:04:12 2028 GMT
        Subject: CN=793ef116-8f53-448b-b18b-972e4f78eafe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:61:96:3f:7b:3c:d2:d1:ab:5b:52:70:6d:
                    80:5b:c8:51:10:ae:e6:3f:67:f0:8b:8b:ef:44:14:
                    94:62:3b:32:dd:4e:e0:3a:8a:ca:a0:e3:cf:35:28:
                    7f:85:f0:01:ec:2c:9a:a0:7f:a9:c5:8b:7a:61:bf:
                    e3:55:d7:3b:b7:db:54:d9:d7:f5:86:f9:e7:9b:9d:
                    7c:ce:fa:00:2c:ba:f1:8d:2b:2d:ba:05:37:0d:87:
                    80:79:34:b8:16:6c:92:db:ee:99:52:da:21:fa:46:
                    ab:59:b9:7d:a7:b5:e4:04:ba:0d:73:c7:84:fc:72:
                    e0:46:a2:3f:89:c5:f3:07:ea:eb:7d:47:4b:3b:02:
                    17:1b:ab:11:2f:39:3e:10:1d:a7:f8:87:3a:25:e2:
                    e8:49:8b:f2:4c:08:8c:9c:51:44:2c:8a:5b:7b:be:
                    9a:64:cc:ad:9e:32:31:94:f9:3c:5c:1e:42:84:5c:
                    86:fd:28:ab:a1:a7:dd:08:7c:1c:86:8d:94:8f:8e:
                    65:a9:49:5e:97:59:e2:3c:ee:78:63:b2:ec:af:62:
                    2c:2d:3c:2e:1b:e3:0f:04:af:af:a0:0f:d5:9f:f2:
                    32:60:09:7d:ab:c8:34:7f:f1:c4:d9:27:4f:d6:4c:
                    9b:37:9c:e6:08:53:5f:ac:7a:11:8f:78:27:00:c1:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:86:D8:B4:1B:1A:4B:9B:D0:98:D8:B7:08:28:BB:52:C7:1B:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/793ef116-8f53-448b-b18b-972e4f78eafe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/793ef116-8f53-448b-b18b-972e4f78eafe/793ef116-8f53-448b-b18b-972e4f78eafe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
            X509v3 Authority Key Identifier:
                keyid:6F:96:FC:EE:35:87:06:16:A5:A0:F9:B8:F4:E5:E5:94:5D:8D:78:E4
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.8.0/24
                IPv6:
                  2602:f8e4::/40
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401087
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html
    Signature Algorithm: sha256WithRSAEncryption
         28:54:24:07:8c:05:68:71:d9:24:0e:77:8d:35:9a:2b:e9:61:
         7c:72:50:38:29:2f:d2:8b:04:8a:69:51:bb:2c:7f:59:8b:36:
         41:5f:fb:5d:69:26:33:d9:ef:c4:86:32:bf:3c:90:dc:0a:c6:
         72:bc:1f:97:9c:4f:f9:c7:a6:14:bd:8b:6d:d4:13:0d:f4:3c:
         07:a7:52:04:75:39:60:57:86:bc:74:be:af:7b:52:19:a6:be:
         d5:07:30:dc:4a:47:e6:8e:7b:10:84:5e:ab:e4:c7:fa:27:30:
         44:e2:9d:96:d3:b6:da:d1:ba:d7:ce:ff:50:4e:cc:9e:24:19:
         29:fa:44:db:5a:35:88:ba:76:fe:70:b6:1d:6b:79:be:00:a0:
         d0:e8:f8:07:02:fe:96:4d:bd:f2:1d:68:96:f8:8f:09:7a:38:
         01:12:d7:02:f3:22:6d:b9:23:5f:91:66:e8:38:dd:2e:15:2d:
         06:37:41:66:7c:54:f4:4c:28:bb:b4:7e:68:15:48:db:88:8c:
         33:d3:e3:fd:6a:9d:aa:23:1a:0e:c8:75:43:26:99:2b:59:4c:
         5c:4e:2d:34:10:ef:94:23:d9:de:e5:59:8d:78:ec:eb:44:f8:
         de:3c:36:29:96:38:02:7d:b6:d2:46:2b:3f:f0:a5:f6:dc:20:
         d6:5b:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 09:23:33 2025 by rpki-client