Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
File:                     01fc1815-34ef-424d-8258-506f8b486e35.cer (raw, json)
Hash identifier:          0+OJnQ4yQmwQmlZcLpMDIMy1NH4+/Zv9EOQvEikYSaw=
Subject key identifier:   51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584AF1B58A4EC00E7D9D5C500840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Aug 2025 19:36:21 +0000
Certificate not after:    Sat 06 Nov 2027 00:45:23 +0000
Subordinate resources:    AS: 10835
                          AS: 12078
                          AS: 12111
                          AS: 20151
                          AS: 25757
                          AS: 33635
                          AS: 46193
                          AS: 63188
                          AS: 399869
                          IP: 64.35.128.0/20
                          IP: 64.184.224.0/19
                          IP: 65.38.128.0/19
                          IP: 66.36.112.0/20
                          IP: 66.117.64.0/19
                          IP: 66.198.192.0/19
                          IP: 66.201.128.0/19
                          IP: 66.225.0.0/19
                          IP: 68.170.32.0/19
                          IP: 69.71.160.0/19
                          IP: 72.55.192.0/19
                          IP: 74.118.88.0/22
                          IP: 162.212.224.0/22
                          IP: 162.255.156.0/22
                          IP: 165.140.184.0/22
                          IP: 184.164.96.0/19
                          IP: 199.7.96.0/21
                          IP: 199.114.228.0/22
                          IP: 199.180.88.0/21
                          IP: 204.10.248.0/21
                          IP: 208.38.192.0/19
                          IP: 209.193.64.0 -- 209.193.111.255
                          IP: 216.229.160.0/19
                          IP: 2001:5f0::/32
                          IP: 2601:c000::/24
                          IP: 2604:d000::/32
                          IP: 2607:f498::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f1:b5:8a:4e:c0:0e:7d:9d:5c:50:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug 22 19:36:21 2025 GMT
            Not After : Nov  6 00:45:23 2027 GMT
        Subject: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:d6:1e:ac:79:c7:68:2e:ab:8d:c2:41:ed:
                    19:00:71:ca:54:3a:64:23:9c:b0:d6:74:b9:19:ab:
                    e4:ba:78:e4:d1:a0:d8:5c:65:f6:9a:11:0f:9e:07:
                    b2:39:7e:e5:23:b9:3f:ed:69:c5:fb:c4:f7:ff:b4:
                    5a:fe:90:04:cb:d5:55:d8:ec:3f:4a:8e:72:9e:e7:
                    c8:c7:57:d8:40:90:22:fa:4a:85:77:ff:56:e9:0e:
                    35:ed:c0:71:bf:99:3f:7f:5e:20:05:f7:e4:b9:27:
                    10:18:9a:63:ac:ae:79:20:08:92:8f:8d:69:fc:4a:
                    d5:ff:eb:f8:ee:a1:0a:8a:c7:c6:14:e6:fb:5f:91:
                    ba:69:af:de:2c:d4:51:4a:17:61:da:38:28:ea:be:
                    bd:a5:d8:57:73:74:00:e9:d7:87:3e:c8:9a:25:b0:
                    ce:68:1a:59:03:a4:35:2a:c0:8f:34:15:b6:b9:cc:
                    81:a5:5b:1e:b7:6a:b8:f2:35:ff:c0:a3:a7:1f:4e:
                    bf:d2:39:3d:8e:8d:e7:04:7c:c6:15:d5:48:7b:79:
                    d4:f2:24:40:f2:de:0b:59:cc:ad:26:2a:ec:5c:62:
                    e5:ce:bb:e6:cf:ea:36:2a:68:c4:af:21:a9:00:bf:
                    eb:10:c3:57:23:b3:e2:b5:59:17:35:ae:6f:cd:a3:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.128.0/20
                  64.184.224.0/19
                  65.38.128.0/19
                  66.36.112.0/20
                  66.117.64.0/19
                  66.198.192.0/19
                  66.201.128.0/19
                  66.225.0.0/19
                  68.170.32.0/19
                  69.71.160.0/19
                  72.55.192.0/19
                  74.118.88.0/22
                  162.212.224.0/22
                  162.255.156.0/22
                  165.140.184.0/22
                  184.164.96.0/19
                  199.7.96.0/21
                  199.114.228.0/22
                  199.180.88.0/21
                  204.10.248.0/21
                  208.38.192.0/19
                  209.193.64.0-209.193.111.255
                  216.229.160.0/19
                IPv6:
                  2001:5f0::/32
                  2601:c000::/24
                  2604:d000::/32
                  2607:f498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10835
                  12078
                  12111
                  20151
                  25757
                  33635
                  46193
                  63188
                  399869

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ee:fe:d4:7c:ae:bd:50:6b:fd:15:50:5d:55:c1:e2:ea:16:
         45:90:53:6f:15:62:4d:98:a4:04:a0:e3:89:c6:b5:eb:11:fc:
         05:26:ff:ca:89:fa:d3:92:c6:ab:bf:bc:85:7f:78:1d:26:cb:
         90:b4:80:f6:d5:4a:47:95:8f:72:60:0f:0c:35:80:78:ed:21:
         00:86:fd:e9:fe:a6:7c:5b:32:63:0f:b0:bb:a7:c7:e5:cf:29:
         86:81:80:20:3e:79:9d:16:c6:9a:90:e7:ea:09:02:c3:21:a1:
         5b:c6:fa:01:17:60:e9:69:a6:b7:8e:18:82:66:b4:ab:b1:dd:
         2e:8d:21:19:17:c8:15:fc:e2:31:91:cf:1b:02:10:cb:f4:84:
         a6:3f:a7:48:d7:21:89:60:12:ce:57:a7:45:a7:42:af:cf:66:
         79:8a:c4:4b:75:ab:f1:a1:72:b0:62:a4:e2:36:03:78:6c:bc:
         ac:10:79:6a:06:6d:0f:a2:de:81:ea:f4:8d:98:b5:af:2a:78:
         85:9e:0e:e9:d6:6e:fd:ce:c2:da:22:7a:65:81:b8:1a:62:70:
         3b:63:7b:c5:ee:bc:48:09:26:c2:0f:6c:77:f8:2e:69:10:3e:
         5b:6d:85:95:dd:36:96:2d:59:73:9b:ac:c5:b2:10:38:fc:cd:
         d3:cc:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:13 2025 by rpki-client