Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
File:                     b5f49734-696b-4966-8db9-1388a58a153f.cer (raw, json)
Hash identifier:          MCxJoc6kMJgzCFIgSEbGOooftNpiZARvdxEm+wtNKxc=
Subject key identifier:   0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584B86452C8019F37273B14BC978
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Oct 2025 00:45:23 +0000
Certificate not after:    Tue 18 Jan 2028 01:45:23 +0000
Subordinate resources:    IP: 140.197.0.0/16
                          IP: 198.60.0.0 -- 198.60.9.255
                          IP: 198.60.17.0 -- 198.60.18.255
                          IP: 198.60.20.0/23
                          IP: 198.60.23.0 -- 198.60.40.255
                          IP: 198.60.43.0 -- 198.60.70.255
                          IP: 198.60.77.0 -- 198.60.79.255
                          IP: 198.60.85.0 -- 198.60.103.255
                          IP: 198.60.111.0 -- 198.60.112.255
                          IP: 198.60.115.0 -- 198.60.120.255
                          IP: 199.104.64.0 -- 199.104.69.255
                          IP: 199.104.71.0 -- 199.104.90.255
                          IP: 199.104.93.0 -- 199.104.94.255
                          IP: 199.104.96.0/21
                          IP: 199.104.106.0 -- 199.104.119.255
                          IP: 204.99.128.0/24
                          IP: 204.99.130.0/23
                          IP: 204.99.133.0 -- 204.99.139.255
                          IP: 204.99.141.0 -- 204.99.177.255
                          IP: 204.99.186.0 -- 204.99.191.255
                          IP: 204.113.0.0/16
                          IP: 204.228.160.0 -- 204.228.169.255
                          IP: 205.118.0.0 -- 205.127.255.255
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:45:2c:80:19:f3:72:73:b1:4b:c9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Oct 15 00:45:23 2025 GMT
            Not After : Jan 18 01:45:23 2028 GMT
        Subject: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:ee:fa:f6:c0:cc:79:c3:57:e9:d5:90:92:
                    ae:9f:86:2d:42:6d:b9:e8:5c:d2:cb:fb:38:b9:b2:
                    90:d3:e7:33:ba:38:fd:17:b8:24:6d:4d:8d:b1:4b:
                    5e:1a:cb:af:b7:b3:2c:ce:81:ed:07:b7:c0:28:d7:
                    55:d4:19:47:9e:ae:31:81:85:55:60:e7:73:e3:3b:
                    66:9b:5a:00:bf:30:82:e6:f9:a5:e0:a5:73:c1:1d:
                    07:de:16:b5:e3:ce:08:4a:9c:69:d4:93:72:23:88:
                    07:d9:bd:ed:cb:6a:71:ec:ce:c4:7c:9a:d9:82:4b:
                    66:dd:44:8d:60:2f:11:24:6f:94:be:80:71:78:7a:
                    30:f6:3d:ba:91:7f:fa:f8:96:cf:ee:07:9c:66:aa:
                    53:af:f7:58:9d:10:6b:3f:9d:71:e3:d2:99:bd:81:
                    85:f7:6d:e4:bf:37:43:d6:8a:88:72:c8:85:9f:92:
                    66:ff:48:6f:30:72:63:31:2f:6c:18:ab:c1:89:97:
                    ba:ab:2a:7c:a0:47:a8:f2:a5:d4:bd:c6:43:32:42:
                    31:0f:ba:a0:95:05:15:09:a4:33:ae:e2:99:10:1f:
                    2b:1b:2e:a6:fd:ee:94:d8:7e:83:46:f6:e7:d5:d9:
                    d8:b5:3d:52:6e:37:3a:4b:82:72:a7:6c:60:7e:c2:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.197.0.0/16
                  198.60.0.0-198.60.9.255
                  198.60.17.0-198.60.18.255
                  198.60.20.0/23
                  198.60.23.0-198.60.40.255
                  198.60.43.0-198.60.70.255
                  198.60.77.0-198.60.79.255
                  198.60.85.0-198.60.103.255
                  198.60.111.0-198.60.112.255
                  198.60.115.0-198.60.120.255
                  199.104.64.0-199.104.69.255
                  199.104.71.0-199.104.90.255
                  199.104.93.0-199.104.94.255
                  199.104.96.0/21
                  199.104.106.0-199.104.119.255
                  204.99.128.0/24
                  204.99.130.0/23
                  204.99.133.0-204.99.139.255
                  204.99.141.0-204.99.177.255
                  204.99.186.0-204.99.191.255
                  204.113.0.0/16
                  204.228.160.0-204.228.169.255
                  205.118.0.0-205.127.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:59:51:2b:2e:1c:82:ea:3f:b7:8c:36:77:8c:70:f0:ff:52:
         c4:4e:e9:1e:4c:59:2f:dc:04:71:ce:89:e0:ed:8f:e5:5f:fb:
         0e:14:4d:7c:da:ed:68:42:eb:1a:6f:bb:b4:63:2c:05:69:e2:
         a1:3e:89:2c:5b:72:d2:46:81:9e:59:be:f9:1d:f4:1e:3b:f8:
         cd:fb:b2:d5:ac:74:7d:b1:09:36:68:f4:74:39:4f:2a:1b:26:
         77:4f:28:b5:76:53:72:ef:45:25:57:c6:76:31:8a:ac:e7:56:
         a2:67:e7:8d:a5:89:05:e2:9f:47:b5:9e:91:17:5a:c4:26:f5:
         61:15:3e:a2:b0:c8:be:8a:fb:9a:89:73:58:67:1a:29:22:e5:
         af:99:a8:fe:2b:a7:f0:7a:2a:80:08:d0:fb:46:d4:0a:f2:e9:
         2f:6d:05:e8:5f:dd:d6:6f:8f:62:41:b5:95:e6:11:f2:ef:af:
         b9:47:94:dc:c3:30:ec:85:07:91:0c:17:21:d2:45:4a:fe:5f:
         25:ae:c6:6e:c5:82:d3:00:4d:dc:64:38:a1:73:ab:3a:02:5f:
         78:fe:35:a6:b1:86:5e:f4:e8:7a:24:8d:57:c9:fa:f1:b8:a5:
         36:0b:c8:5e:a4:1b:21:77:f5:e0:d1:07:ec:17:dc:9b:d6:bd:
         3f:dd:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:10 2025 by rpki-client