Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer
File:                     bcef91a5-9f6b-4911-9826-8aaa385bb35c.cer (raw, json)
Hash identifier:          8Gh9a6EMuUhLBEJh8eZXCEs1gBhZS/Zl4kzyF5zxwn8=
Subject key identifier:   2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584B77794EEBAEC4FD2C0286FF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 Oct 2025 17:33:19 +0000
Certificate not after:    Wed 10 Feb 2027 19:03:31 +0000
Subordinate resources:    AS: 401384
                          IP: 142.249.153.0/24
                          IP: 2602:f7e0::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:79:4e:eb:ae:c4:fd:2c:02:86:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 17:33:19 2025 GMT
            Not After : Feb 10 19:03:31 2027 GMT
        Subject: CN=bcef91a5-9f6b-4911-9826-8aaa385bb35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:09:01:44:0e:61:cf:c6:13:4e:81:e3:ed:
                    21:c2:40:a8:fa:5d:c5:77:a7:f3:3c:a2:09:35:60:
                    eb:5c:0b:88:92:f0:e7:57:ab:9e:4b:e6:b5:3b:dc:
                    8a:12:f4:5b:27:63:bb:a3:2b:90:47:76:0e:35:a7:
                    a8:47:3f:c1:5e:28:0e:f6:d6:42:93:de:d8:28:2a:
                    76:1f:81:a6:c1:a8:5c:ac:dc:80:cc:05:8e:53:c4:
                    1d:e8:0c:e3:50:ed:bd:6e:3e:42:79:40:ab:57:97:
                    9a:97:21:c7:fd:25:44:87:c7:d0:fa:95:0d:18:1d:
                    ea:6b:f3:36:6e:66:49:39:05:44:93:7a:50:4b:c8:
                    7e:df:3f:bd:cc:3e:c4:64:f1:03:8c:d0:c5:21:f7:
                    31:bf:c4:3d:42:62:c9:d8:44:30:cd:5c:c6:2c:13:
                    97:26:0e:b4:a5:be:ba:29:58:e4:7e:bc:95:32:24:
                    d8:80:75:de:67:cd:48:ed:20:cf:e6:b7:c5:4f:ad:
                    51:8d:1d:82:f7:50:da:de:f1:ff:91:4e:8a:c6:8f:
                    c6:38:3a:24:f3:81:87:4d:99:0c:81:07:78:eb:95:
                    b8:bc:7b:7f:01:ae:86:ac:77:75:d4:55:77:3f:4e:
                    ee:fe:6b:24:1f:2b:6c:09:cf:99:53:55:90:9d:f8:
                    6f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:EB:E9:C7:84:72:20:5B:44:D7:FD:68:CD:0F:4B:AB:C5:EA:31
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcef91a5-9f6b-4911-9826-8aaa385bb35c/bcef91a5-9f6b-4911-9826-8aaa385bb35c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.153.0/24
                IPv6:
                  2602:f7e0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401384

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:64:e3:f0:55:9b:7e:7c:fb:1c:e1:59:36:aa:be:73:82:5a:
         6a:e6:3a:e8:d6:cb:f6:d9:5f:b6:00:73:ae:cd:67:63:40:9e:
         2e:11:1e:48:97:5b:b1:de:50:5d:5d:71:ff:c7:49:33:9f:58:
         a3:da:09:3f:bd:ff:54:51:48:b3:2c:59:ca:c7:d7:f7:20:83:
         fb:fc:42:24:db:f7:c2:87:27:fd:1f:ac:61:74:cf:7b:d5:f4:
         ee:27:ac:3d:45:08:b4:c5:d7:f3:47:b2:60:80:77:57:dc:3b:
         13:fa:3b:b9:9e:e0:4b:c0:2b:0e:33:1f:1e:ef:eb:aa:a9:c3:
         4a:8a:2f:43:1c:46:45:fe:0e:ff:9e:f7:48:21:67:de:35:76:
         4b:d1:c2:0b:ea:e1:07:12:5c:0e:5d:7f:eb:35:c1:28:41:45:
         02:d4:a0:34:8f:5a:82:be:92:a4:9f:77:1f:64:10:2b:5f:07:
         df:f9:2c:9d:39:a4:6f:e6:8a:1f:c4:ee:99:8b:8e:8d:b3:33:
         e0:f2:01:c0:27:d2:7a:43:c6:db:e2:66:8a:1d:40:fc:fb:1e:
         00:8d:52:d6:06:9b:60:02:f0:0e:f1:4c:e8:30:ed:88:56:4c:
         be:c4:22:e3:08:34:3f:55:b4:f3:71:90:af:45:6c:15:65:b6:
         27:4d:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:36 2025 by rpki-client