Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a.cer
File:                     513f00e2-3c09-4356-b429-b9111b1f6e7a.cer (raw, json)
Hash identifier:          Elc7IC+7+RALHZbTDOAPmoYlWTMf1XQZQvQXRPJfC9g=
Subject key identifier:   7E:D7:39:45:14:6C:1C:36:A1:1A:6A:6D:F3:43:26:CE:86:50:67:69
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584AE18ED21F3F8E41FF35A5D980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/513f00e2-3c09-4356-b429-b9111b1f6e7a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Aug 2025 00:45:24 +0000
Certificate not after:    Sat 20 Nov 2027 01:45:24 +0000
Subordinate resources:    AS: 991
                          IP: 216.230.184.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:8e:d2:1f:3f:8e:41:ff:35:a5:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug 17 00:45:24 2025 GMT
            Not After : Nov 20 01:45:24 2027 GMT
        Subject: CN=513f00e2-3c09-4356-b429-b9111b1f6e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:8e:6e:ab:d9:34:3c:09:90:b7:16:84:a8:
                    5b:88:54:05:25:e7:12:44:7b:1a:63:a9:8d:7c:d1:
                    57:fc:6b:0b:6e:9f:27:c9:a3:f3:0e:fb:cc:39:e5:
                    19:e2:bd:f8:18:10:58:cc:54:5c:71:c7:b7:88:b4:
                    dc:2c:14:ff:57:9c:a3:05:da:c1:a2:13:5a:4b:28:
                    a9:e6:87:e1:c9:73:e2:5c:5d:9e:d9:4e:e8:e6:58:
                    91:00:9b:c8:bb:1b:41:98:32:a4:e2:61:da:9c:d1:
                    f1:0e:e7:6e:b1:77:fb:13:38:a4:8e:bc:c4:1e:aa:
                    4b:42:85:40:5a:93:23:43:9b:24:6d:f3:bf:74:30:
                    37:7e:0a:8e:e8:df:a0:00:9f:eb:b9:af:db:bf:a8:
                    67:cf:5b:b1:7f:16:d1:65:ef:ec:1f:6a:ab:26:25:
                    3f:3d:87:3b:a6:e0:03:e0:75:0f:ed:21:e4:0f:3b:
                    de:6a:3b:9d:b4:7e:a3:04:ae:1b:b7:bb:d5:37:0f:
                    ac:f5:6b:36:4b:21:62:a3:a2:51:63:67:30:7e:c2:
                    3a:e4:bf:74:2d:dc:69:28:08:fb:ff:08:c6:a9:5b:
                    31:2e:17:3b:a5:d3:50:11:2f:0b:95:9f:3d:74:d3:
                    64:dc:52:29:0c:12:08:8a:65:6b:06:46:4a:89:9b:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:39:45:14:6C:1C:36:A1:1A:6A:6D:F3:43:26:CE:86:50:67:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/513f00e2-3c09-4356-b429-b9111b1f6e7a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.184.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  991

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:df:b0:9f:09:fe:96:f5:61:34:e3:2b:e4:e7:d2:df:2c:79:
         56:04:57:ab:d7:12:d4:4b:37:83:19:00:0d:54:78:24:66:cd:
         96:be:08:95:7c:e9:d9:30:d4:db:50:6a:28:a7:17:e9:7a:31:
         be:1d:69:36:56:a2:a3:81:71:a2:5b:e9:fc:46:c9:88:f0:2c:
         ca:a8:ef:3c:fe:41:bd:a0:a2:64:02:42:42:e7:4e:90:cf:6d:
         82:01:69:37:3a:43:31:b7:4c:2d:32:0f:b6:aa:7e:2f:44:89:
         55:80:13:cd:06:03:36:d6:03:f3:d2:03:99:5e:94:28:d3:bf:
         b8:e4:5c:62:2e:7a:43:62:5d:02:55:af:6e:88:d8:9a:0f:70:
         0c:83:e1:9c:4d:85:2b:95:ce:ea:fb:93:f6:c0:d8:93:8c:d0:
         01:de:cb:2e:ed:37:2f:c8:dc:10:7a:da:71:a0:c4:29:5f:81:
         b1:c4:1b:f4:18:88:84:48:a3:83:f4:8c:8f:af:0b:4a:bc:75:
         34:41:fd:b5:ea:3b:d4:69:ed:6c:c2:cf:31:fa:b8:ef:7b:6b:
         6b:aa:14:d4:ca:fd:5e:a0:25:fd:5c:43:0c:ff:04:de:15:c9:
         5c:af:51:47:1e:49:b3:7d:bf:45:f5:6f:b3:37:3d:0c:9c:f6:
         b4:ea:43:cd
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWErhjtIfP45B/zWl2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk
NTEzZjAwZTItM2MwOS00MzU2LWI0MjktYjkxMTFiMWY2ZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQuObqvZNDwJkLcWhKhbiFQFJecSRHsaY6mN
fNFX/GsLbp8nyaPzDvvMOeUZ4r34GBBYzFRccce3iLTcLBT/V5yjBdrBohNaSyip
5ofhyXPiXF2e2U7o5liRAJvIuxtBmDKk4mHanNHxDudusXf7EzikjrzEHqpLQoVA
WpMjQ5skbfO/dDA3fgqO6N+gAJ/rua/bv6hnz1uxfxbRZe/sH2qrJiU/PYc7puAD
4HUP7SHkDzveajudtH6jBK4bt7vVNw+s9Ws2SyFio6JRY2cwfsI65L90LdxpKAj7
/wjGqVsxLhc7pdNQES8LlZ89dNNk3FIpDBIIimVrBkZKiZuoSwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFH7XOUUUbBw2oRpqbfNDJs6GUGdpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81
MTNmMDBlMi0zYzA5LTQzNTYtYjQyOS1iOTExMWIxZjZlN2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUxM2YwMGUyLTNjMDktNDM1Ni1i
NDI5LWI5MTExYjFmNmU3YS81MTNmMDBlMi0zYzA5LTQzNTYtYjQyOS1iOTExMWIx
ZjZlN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALY5rgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
A98wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEASd+wnwn+lvVhNOMr5OfS3yx5VgRXq9cS1Es3gxkADVR4JGbN
lr4IlXzp2TDU21BqKKcX6Xoxvh1pNlaio4Fxolvp/EbJiPAsyqjvPP5BvaCiZAJC
QudOkM9tggFpNzpDMbdMLTIPtqp+L0SJVYATzQYDNtYD89IDmV6UKNO/uORcYi56
Q2JdAlWvbojYmg9wDIPhnE2FK5XO6vuT9sDYk4zQAd7LLu03L8jcEHracaDEKV+B
scQb9BiIhEijg/SMj68LSrx1NEH9teo71GntbMLPMfq473tra6oU1Mr9XqAl/VxD
DP8E3hXJXK9RRx5Js32/RfVvszc9DJz2tOpDzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:10 2025 by rpki-client