Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
File:                     6fd31e81-6599-4bac-8a74-7bbe9233374a.cer (raw, json)
Hash identifier:          mRGJRIE/xueSTIIjP5+IhDvOW8ZeuZFqcr1XTDor40k=
Subject key identifier:   0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584B5316A465117D7EF2CDA34800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Sep 2025 16:45:25 +0000
Certificate not after:    Sun 21 Feb 2027 17:02:28 +0000
Subordinate resources:    AS: 22727
                          AS: 46454
                          AS: 402025
                          IP: 65.254.32.0/20
                          IP: 66.218.0.0/19
                          IP: 68.64.64.0 -- 68.64.94.255
                          IP: 69.67.224.0/19
                          IP: 2607:f638::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:53:16:a4:65:11:7d:7e:f2:cd:a3:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 16:45:25 2025 GMT
            Not After : Feb 21 17:02:28 2027 GMT
        Subject: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:4d:eb:05:02:27:5b:c9:c1:5d:24:2c:14:
                    b1:e1:a4:b8:8a:23:1d:36:73:7c:7a:99:85:73:9b:
                    77:ee:38:54:a1:e9:6c:8b:73:5c:d6:ce:74:9d:ba:
                    28:7f:f7:de:f1:b9:36:6a:49:e0:e9:c0:09:1e:ea:
                    d8:05:f4:1e:b4:1e:9e:e3:bf:13:d5:a3:a9:29:f1:
                    3d:0e:12:0d:f5:de:90:47:87:c7:52:2c:c9:66:77:
                    01:d8:ea:88:24:ef:a9:70:54:e9:02:c5:1a:6d:41:
                    07:0c:65:b4:c5:f5:45:45:63:c6:c7:36:b4:16:7a:
                    fe:c9:e0:80:49:79:5c:f8:f9:3e:dc:b5:35:9e:6f:
                    63:bd:1d:4a:79:8d:72:7b:67:b5:dd:f6:af:8e:cc:
                    ec:2a:42:66:70:6e:ab:a9:3e:58:f8:99:b9:37:60:
                    20:2f:00:cf:99:16:52:c5:a2:f0:7a:cd:b5:19:60:
                    91:fa:0e:d4:03:60:e1:4f:9b:14:bd:01:52:6c:54:
                    59:4b:0a:ad:df:da:19:5c:48:0d:4e:51:d8:09:35:
                    7f:c0:d8:a9:c3:04:7e:0d:7a:af:71:2e:3f:21:e7:
                    81:69:31:9d:bf:0e:87:83:6d:e4:36:59:37:e4:7d:
                    80:52:df:bb:49:d7:af:3b:f8:6e:f0:0e:8c:d5:bb:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.32.0/20
                  66.218.0.0/19
                  68.64.64.0-68.64.94.255
                  69.67.224.0/19
                IPv6:
                  2607:f638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22727
                  46454
                  402025

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:e3:52:a9:47:46:d8:66:0e:02:b7:1e:46:b2:b4:be:c5:
         72:3a:38:c4:5d:a2:78:c7:d2:e4:e7:30:bf:53:f0:74:d6:59:
         1d:e6:d1:4a:da:a6:5f:79:4b:79:22:44:0d:ec:5a:3a:0c:6d:
         ca:3d:97:35:ff:d1:7e:5f:f1:b9:ca:1d:3c:2d:77:16:ab:6d:
         4f:45:3e:3b:f5:e7:54:91:c1:68:94:cb:40:f4:47:2c:c7:d8:
         3a:9b:76:7f:a5:a0:78:62:07:3d:ee:33:84:ff:7b:9c:bf:8d:
         80:87:14:a0:9f:e2:c7:32:94:75:5c:9e:db:95:08:f5:86:05:
         53:9b:3e:99:fa:68:0f:01:94:d9:33:cc:51:99:ea:8a:a1:e3:
         b3:2d:09:e7:cd:be:ea:c7:59:1e:69:05:9f:70:4e:05:31:18:
         82:20:55:ba:73:ef:56:5d:65:6f:d7:11:64:ca:9d:3f:50:b0:
         26:a8:ef:00:6a:7e:a7:22:2c:0f:a3:53:dd:7f:db:a9:d4:5d:
         ee:fa:b7:8b:f5:d0:e4:00:fe:75:22:f5:c8:38:c7:de:39:a6:
         96:d8:e9:3b:15:64:b1:eb:a4:9c:cb:0d:8b:f9:4a:85:76:45:
         45:3b:06:72:b4:23:a6:f9:1b:ad:39:d8:a1:41:cf:eb:12:86:
         97:bd:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:44 2025 by rpki-client