Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
File:                     1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer (raw, json)
Hash identifier:          /sbiANt0ye1ATx7JCjNJbRCsybkxi4TUCuYgzJv1wfk=
Subject key identifier:   5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584B7740BA75D645680F991A4BA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 Oct 2025 15:39:19 +0000
Certificate not after:    Thu 24 Dec 2026 17:58:38 +0000
Subordinate resources:    AS: 17290
                          AS: 40064
                          AS: 40419
                          IP: 23.190.216.0/24
                          IP: 142.249.174.0/24
                          IP: 149.112.177.0/24
                          IP: 2602:fa86::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:40:ba:75:d6:45:68:0f:99:1a:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 15:39:19 2025 GMT
            Not After : Dec 24 17:58:38 2026 GMT
        Subject: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:79:36:e9:e7:44:bd:97:18:e1:6c:bd:23:
                    b4:75:7d:4e:73:84:2e:e2:f7:dc:f6:70:61:bc:bc:
                    2e:52:d9:b1:f0:ad:f2:d2:60:64:ae:66:e2:75:24:
                    7e:96:97:78:78:04:ce:1a:93:19:dc:66:5f:b3:ef:
                    0b:6a:c8:87:92:ab:e9:b7:95:46:c1:b7:7d:a4:e0:
                    9c:48:c1:13:67:72:48:41:0f:f1:b3:eb:71:d1:a7:
                    22:29:5a:3a:04:fe:1c:1f:9b:8f:e4:92:b4:7b:b9:
                    13:ef:f6:36:09:b4:de:1c:9b:b8:fb:8e:9a:2f:9c:
                    14:7f:b7:4f:83:cb:d0:f6:76:5c:7c:be:49:fd:be:
                    ea:aa:ac:9b:4f:9f:48:c9:d8:26:8a:1a:98:83:4d:
                    9c:41:78:b1:be:32:84:34:2e:7e:54:b9:55:f6:a9:
                    4c:7c:ab:0d:72:c5:3a:5f:7f:d0:52:16:93:94:0b:
                    ee:f4:59:de:ab:14:2b:5c:40:60:23:67:b6:b8:3e:
                    a8:ad:35:15:10:66:df:dd:48:b9:45:40:8a:44:11:
                    80:21:08:67:0d:f4:6c:71:82:6b:fb:e8:72:4f:21:
                    f9:41:de:79:34:27:06:89:48:b0:72:59:75:6b:14:
                    32:19:6e:63:92:bc:4c:61:41:22:cf:41:32:0b:1a:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.216.0/24
                  142.249.174.0/24
                  149.112.177.0/24
                IPv6:
                  2602:fa86::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17290
                  40064
                  40419

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:09:d3:b4:08:57:00:ef:18:dc:3b:7f:87:1f:a0:74:2c:60:
         37:d3:c9:29:5c:9c:6b:86:27:26:c1:4e:ae:e0:6d:88:ec:47:
         b1:82:c0:19:40:fe:a6:fc:93:50:2c:30:4f:04:fa:07:74:dc:
         2a:60:b0:6e:2c:e7:82:17:fb:a8:e8:2f:c5:c4:af:31:ba:a3:
         b4:51:f6:40:50:d8:0e:8b:3a:64:ab:1e:7e:35:c0:71:78:5e:
         e1:6a:b0:5f:b7:af:13:a1:94:be:60:81:08:ff:9c:8b:72:16:
         c7:7c:d5:5a:49:26:90:0c:59:2d:85:0f:64:ac:70:cc:58:72:
         1f:21:2b:8b:08:b9:ff:15:c0:83:a5:cf:e8:65:9b:6b:bd:02:
         ed:1b:fc:19:0e:e8:50:00:7a:20:2d:ac:30:97:01:8e:4e:ec:
         d5:17:92:88:40:3f:02:c0:b1:aa:08:e0:74:3e:03:f0:3a:a8:
         3d:ab:b7:da:20:6e:dc:7f:05:83:6c:5b:98:10:45:9d:b8:fe:
         09:9d:f4:a0:f4:6e:6a:92:b4:f8:b7:96:db:02:36:33:6d:e3:
         66:d9:7a:9f:f5:9b:65:80:40:18:70:b1:37:36:6f:05:eb:76:
         b1:ee:21:9d:f4:82:f6:df:aa:d9:64:b8:c9:7b:77:ce:6e:20:
         19:21:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:21 2025 by rpki-client