Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
File:                     e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer (raw, json)
Hash identifier:          mqqNnl2lZ/EG5n5ei//WUfR7jjwW5JbqndCMC4v1WOM=
Subject key identifier:   14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584AFD79AA2CECDA41B465A8DC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Aug 2025 00:45:25 +0000
Certificate not after:    Tue 30 Nov 2027 01:45:25 +0000
Subordinate resources:    AS: 10430
                          IP: 66.96.64.0/20
                          IP: 67.201.192.0/18
                          IP: 68.179.192.0/19
                          IP: 69.56.64.0/18
                          IP: 72.233.128.0/17
                          IP: 173.229.32.0/19
                          IP: 207.180.96.0/19
                          IP: 216.186.0.0/17
                          IP: 216.210.0.0/18
                          IP: 2607:fa78::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:79:aa:2c:ec:da:41:b4:65:a8:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 27 00:45:25 2025 GMT
            Not After : Nov 30 01:45:25 2027 GMT
        Subject: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:d6:e1:3a:52:01:8e:9a:0f:b2:ba:eb:e8:
                    90:81:8e:ec:41:8e:93:3f:1b:38:20:ad:09:ef:54:
                    39:59:7d:96:4f:57:73:66:a9:7d:93:a4:81:88:5b:
                    d0:65:1d:f1:0d:59:56:a2:b2:cf:4b:8c:cc:18:a0:
                    48:0a:41:ce:49:55:4b:d7:60:6f:bf:30:ef:f2:1b:
                    e8:a4:2f:3f:d8:bd:41:5d:79:9c:a0:6c:ed:f2:10:
                    ab:43:c7:b0:1e:c2:52:75:ad:32:55:4b:e1:d4:fa:
                    57:2a:c1:83:2c:d4:9e:83:22:9b:e5:3f:71:0d:02:
                    b6:02:92:48:d9:9d:ff:26:d3:58:32:d3:42:05:ed:
                    2c:7e:74:87:32:16:eb:49:01:3b:96:a3:7e:eb:ad:
                    55:c1:81:6f:f7:dd:53:79:17:f8:85:3d:57:b8:2a:
                    e3:53:07:0d:64:c3:3b:b1:98:36:99:c6:09:a8:e8:
                    dd:1c:4e:42:d1:d2:c1:10:68:e5:0b:2a:39:7c:e9:
                    45:95:f7:6f:56:a1:5e:d1:94:cc:11:24:36:5d:c3:
                    40:af:c6:47:0b:59:c3:f4:a3:56:43:70:d9:bd:b1:
                    95:d6:32:c5:2b:80:7e:cc:aa:6b:5f:e9:e2:06:d3:
                    ee:e3:80:21:b9:e8:f6:81:55:19:c5:96:c8:b0:23:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.64.0/20
                  67.201.192.0/18
                  68.179.192.0/19
                  69.56.64.0/18
                  72.233.128.0/17
                  173.229.32.0/19
                  207.180.96.0/19
                  216.186.0.0/17
                  216.210.0.0/18
                IPv6:
                  2607:fa78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10430

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:99:34:df:ad:d8:24:72:3b:ca:6a:96:1f:7a:d0:ae:01:19:
         7f:78:fa:48:0f:d2:de:01:3a:02:51:80:a4:3b:15:13:77:5d:
         cf:b7:f9:61:a9:6c:c1:73:01:f0:f6:0b:fd:81:97:86:e0:db:
         b8:5d:70:e6:bb:4a:86:98:be:11:c1:43:6b:8f:78:9c:9b:72:
         f2:46:30:89:80:69:04:c0:1f:17:9c:f4:6d:c7:57:34:73:e9:
         62:22:b1:db:60:71:2d:18:c7:9e:ae:da:a2:66:07:fd:f6:5a:
         b0:b6:79:b5:8e:b2:f6:d8:59:31:0e:e2:c2:95:f7:73:4b:fb:
         4f:95:1c:2f:65:98:66:a2:88:04:f5:c7:60:c2:9f:2d:e3:79:
         92:a4:49:6b:54:ff:dc:df:b9:b0:84:e0:0e:2d:b0:ff:55:31:
         f3:2d:ac:77:19:82:61:04:0e:d8:fd:ed:88:ea:69:2c:37:46:
         53:1f:a2:8f:a0:b6:5c:30:36:22:6d:9c:b9:ae:63:32:c5:2e:
         f6:c9:3b:5b:ef:fb:ff:d4:64:75:10:79:71:37:55:18:15:3b:
         52:8a:34:8b:86:7d:70:eb:22:c9:de:71:fa:43:ee:15:34:7b:
         e8:e3:f0:0c:71:4d:64:19:1b:b5:07:1a:3e:66:f1:1c:ce:7d:
         cd:11:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:41:41 2025 by rpki-client