Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
File:                     0ab2447c-9735-4548-ac30-fc578e8e36ba.cer (raw, json)
Hash identifier:          WU4cig/EaHhTFWRFmSncLu7qr3yui5XJMr1yEaE3hjU=
Subject key identifier:   50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584B8BDA8A57000974E232318BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 Oct 2025 00:45:23 +0000
Certificate not after:    Thu 20 Jan 2028 01:45:23 +0000
Subordinate resources:    AS: 13926
                          AS: 22781
                          AS: 54203
                          AS: 62651
                          AS: 63128
                          IP: 68.68.32.0/20
                          IP: 98.158.112.0/20
                          IP: 104.36.176.0/21
                          IP: 108.171.96.0/19
                          IP: 173.195.0.0/20
                          IP: 173.255.160.0/19
                          IP: 192.200.144.0/20
                          IP: 199.127.248.0/21
                          IP: 207.204.224.0/19
                          IP: 216.131.64.0/18
                          IP: 216.169.128.0/20
                          IP: 2604:c980::/32
                          IP: 2604:ea80::/32
                          IP: 2604:fc80::/32
                          IP: 2606:b300::/32
                          IP: 2607:fb50::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:da:8a:57:00:09:74:e2:32:31:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 17 00:45:23 2025 GMT
            Not After : Jan 20 01:45:23 2028 GMT
        Subject: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:96:07:95:c3:48:fa:0c:df:7b:47:2b:ac:
                    da:9b:75:6c:3b:50:9c:ee:8a:12:dd:99:0a:e6:95:
                    5f:e2:e9:b7:c3:66:56:6f:5b:15:6b:97:2b:14:bb:
                    9c:24:ef:04:a9:5f:ba:58:91:db:c7:8b:c8:02:3e:
                    56:31:89:49:a4:b3:08:84:bd:b1:45:d1:18:c2:98:
                    3c:2f:86:88:96:d8:d4:68:2f:b4:f2:4c:8a:c5:7d:
                    34:bd:88:30:28:3f:e2:f4:25:80:cb:54:a1:df:df:
                    43:b7:10:a5:23:1f:8d:8f:75:52:91:db:84:93:26:
                    d3:be:37:43:cb:8b:dc:bf:ab:7a:71:a3:01:05:1e:
                    0b:8c:fb:f1:6d:5b:62:26:db:e7:7c:7c:b1:ee:09:
                    3f:1a:0a:d3:66:e0:21:09:9f:16:9a:1e:2d:ca:cc:
                    47:b7:0c:fe:98:f1:f1:86:54:98:0c:31:61:7b:42:
                    58:8a:d5:50:ea:1f:1a:49:33:d5:47:dc:11:45:ce:
                    9d:09:20:b9:ea:e4:dd:bb:74:96:83:9a:a1:7c:05:
                    8b:05:7a:d0:2d:27:75:e7:5d:7e:fb:24:57:85:3b:
                    34:58:2b:94:d8:96:f4:0b:29:fd:f7:10:90:66:e2:
                    ac:e8:60:2b:85:e0:4f:b5:6a:e6:83:0f:d2:52:23:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.32.0/20
                  98.158.112.0/20
                  104.36.176.0/21
                  108.171.96.0/19
                  173.195.0.0/20
                  173.255.160.0/19
                  192.200.144.0/20
                  199.127.248.0/21
                  207.204.224.0/19
                  216.131.64.0/18
                  216.169.128.0/20
                IPv6:
                  2604:c980::/32
                  2604:ea80::/32
                  2604:fc80::/32
                  2606:b300::/32
                  2607:fb50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13926
                  22781
                  54203
                  62651
                  63128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:52:8a:f7:fc:90:a0:63:a5:3a:47:dd:60:c8:d4:89:b9:34:
         f7:b2:06:8b:3c:53:48:7b:e1:c7:ce:d8:15:01:0f:0d:a7:ed:
         74:d9:48:9b:47:6d:19:7d:08:12:af:ae:31:ca:c5:1f:60:1e:
         cd:99:64:49:89:c2:b0:de:21:10:7b:91:bf:d0:d8:e5:2e:69:
         ad:25:3d:ea:11:f1:50:6d:c4:b4:28:da:85:db:32:c6:87:82:
         27:3f:97:19:d7:68:78:ca:3e:25:28:f0:c8:97:59:a7:cb:f8:
         11:2e:46:27:af:87:4b:3e:83:a6:6c:67:85:88:55:12:d1:42:
         30:81:99:ec:01:9e:8b:a2:46:bc:c1:9a:1d:ff:cb:d5:0f:67:
         a8:fb:78:96:65:b7:09:61:e3:9d:13:ee:d5:87:39:b0:e5:5f:
         ba:6d:53:66:3f:81:58:29:c3:48:30:6b:4e:73:5b:36:06:a2:
         36:70:97:0b:29:0a:31:bc:cd:43:c5:34:82:a1:e0:c3:54:2e:
         37:b1:7d:9a:33:aa:a2:83:ce:38:d4:79:8f:46:ee:e3:46:96:
         7f:6b:0d:2d:a1:df:d5:a4:86:9e:59:24:07:b5:cf:9c:0b:1f:
         82:37:e4:2c:d8:81:11:3d:21:a2:1e:c0:36:70:d4:bb:f0:87:
         42:65:dd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:40:45 2025 by rpki-client