Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
File:                     e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer (raw, json)
Hash identifier:          BAPVeLQ2ZY0y029Vst7WA98zUD2qypzE8g8htQfdwy8=
Subject key identifier:   40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority key identifier: FB:5E:73:71:70:93:86:89:F1:0E:F6:53:FD:1C:6D:D3:0F:5C:7C:3B
Certificate issuer:       /CN=edcfe8d3-6af9-4d60-8e96-f6dfb455361c
Certificate serial:       010D0C9F4328584A03E1AFF89C51D69D69FE1E68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
caRepository:             rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 29 May 2025 15:02:55 +0000
Certificate not after:    Wed 01 Sep 2027 15:02:55 +0000
Subordinate resources:    AS: 36747
                          IP: 104.145.208.0 -- 104.145.219.255
                          IP: 2605:b2c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:e1:af:f8:9c:51:d6:9d:69:fe:1e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edcfe8d3-6af9-4d60-8e96-f6dfb455361c
        Validity
            Not Before: May 29 15:02:55 2025 GMT
            Not After : Sep  1 15:02:55 2027 GMT
        Subject: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:18:ae:99:c8:da:92:b8:d1:57:78:2e:8d:
                    aa:c0:62:ee:57:12:de:da:67:28:8c:a3:fc:60:cf:
                    70:5f:62:6e:b1:fc:58:5b:72:89:c7:8c:30:8f:b4:
                    d2:77:16:55:24:84:f1:93:59:c8:e7:27:b0:ca:1f:
                    95:56:d1:99:20:ab:30:9d:d8:65:ad:31:18:c8:cd:
                    27:b6:34:07:32:6c:89:a4:61:34:eb:de:61:82:fa:
                    5e:6a:3a:11:a4:c0:98:ed:42:eb:17:d5:a6:4c:49:
                    8d:91:ec:2e:53:7b:52:14:25:0e:57:77:7f:9b:d3:
                    d4:69:5c:c0:ed:13:7b:99:62:18:11:b0:47:ce:b3:
                    3d:76:d5:1e:c1:8a:f3:a8:3c:d1:f0:7a:48:f5:fd:
                    d4:7a:1e:b7:b9:32:52:84:4a:74:de:59:b9:ea:78:
                    d1:ca:fe:02:57:f2:ac:bb:4f:74:1d:d7:4a:15:4c:
                    36:e0:af:f9:42:2a:c5:48:ca:47:37:f1:7c:a1:0a:
                    fc:4e:2a:9a:59:83:7b:0d:bd:2a:18:fb:2a:9f:a8:
                    9e:40:3d:83:73:6a:7d:50:09:48:3f:74:c6:3e:56:
                    84:d8:15:1c:29:6c:91:b6:fc:e7:d7:fe:d0:f9:d6:
                    21:49:d7:99:b3:35:cb:e5:f6:0f:aa:34:89:61:d2:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:5E:73:71:70:93:86:89:F1:0E:F6:53:FD:1C:6D:D3:0F:5C:7C:3B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0-104.145.219.255
                IPv6:
                  2605:b2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36747

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4b:ae:d4:be:03:3c:1c:b7:80:7c:da:c7:48:dc:07:d7:7b:
         e5:ce:39:95:f5:dc:e3:b3:41:a1:53:a0:2e:e4:8f:b1:65:6e:
         7e:b8:1b:a6:4d:06:d4:b5:e9:b6:a9:e9:1c:c0:39:e0:82:7a:
         6f:a2:e8:b0:96:45:fc:ac:34:6e:38:4d:3f:52:3f:f8:b9:c5:
         6c:bf:1a:a9:0f:13:ca:f1:57:c9:09:9e:22:7c:c9:19:88:2d:
         04:45:ab:22:14:33:4f:26:2b:98:c0:3e:7c:ea:56:4c:9a:d5:
         6e:5d:d4:bf:4d:df:f5:64:ed:7c:d0:52:62:07:48:e7:2b:77:
         eb:4a:bf:3f:8d:21:e6:5f:4b:0c:0b:c1:b5:8d:93:cb:10:5d:
         98:82:68:f8:bd:17:05:4b:70:1a:29:a3:9f:28:82:23:b2:70:
         61:86:dd:1e:ec:03:bc:aa:55:f3:e7:7e:9f:8c:7b:8e:ca:8f:
         71:1b:63:9a:22:08:f2:c9:07:b7:d7:ed:8a:8c:94:28:6e:8b:
         de:72:64:f2:bc:64:c3:a3:ad:58:5d:43:30:74:a0:03:08:82:
         0f:56:43:39:25:1e:cf:b1:f8:c0:fe:14:83:fd:ca:80:fd:e8:
         c0:de:d8:36:95:82:66:4a:3b:1d:2a:d2:c2:6b:48:10:67:06:
         45:d2:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:45 2025 by rpki-client