Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer
File:                     b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.cer (raw, json)
Hash identifier:          5eF95/fFHc8QidcROwkKoCV/EMvmMb+EGLZdCej8zDA=
Subject key identifier:   86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584B71D099C2C9028A78D6237B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Oct 2025 16:54:21 +0000
Certificate not after:    Tue 14 Sep 2027 19:03:23 +0000
Subordinate resources:    AS: 400779
                          IP: 66.132.212.0/22
                          IP: 131.143.104.0/22
                          IP: 2607:c440::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:d0:99:c2:c9:02:8a:78:d6:23:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct  7 16:54:21 2025 GMT
            Not After : Sep 14 19:03:23 2027 GMT
        Subject: CN=b5cf26ad-4d46-4540-80d9-8a26a8c8ac61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:cd:03:c6:17:d3:4a:a2:65:d4:05:09:e5:
                    68:90:9e:21:d7:a9:67:91:66:02:d3:98:48:26:9d:
                    ad:58:ee:ae:16:ec:7e:5d:5b:fe:2d:67:cf:05:15:
                    f4:e7:30:28:e2:d0:c9:ef:15:fa:41:78:da:53:a6:
                    ac:ac:44:26:0b:4d:50:00:ad:c3:06:64:13:f5:da:
                    ea:da:b9:cd:48:fc:99:c3:f8:6b:18:58:2f:57:b6:
                    57:e3:0d:5c:1d:f4:22:ce:5d:4d:13:67:fe:e7:6a:
                    dc:98:96:7e:4e:b6:ca:f4:4f:0c:51:35:3f:14:03:
                    9d:f5:ce:4a:b1:20:9e:e9:e2:69:cd:72:b3:f1:22:
                    78:29:b9:42:e1:1e:74:65:47:eb:2e:4b:2a:64:bd:
                    38:8d:c7:89:f0:ee:43:f9:0d:e7:2b:ad:07:fe:21:
                    94:6c:3c:d8:bb:ee:6a:25:36:15:ea:f5:dc:88:99:
                    a8:f7:73:b7:3c:b7:20:67:d6:5b:a5:43:bb:d6:ba:
                    07:d6:76:1a:75:18:50:b6:4b:fe:65:53:40:0d:68:
                    77:2a:da:d8:f4:29:56:d4:16:7b:30:36:20:f1:93:
                    e2:76:eb:6d:5b:29:ef:63:f8:16:93:8d:db:ef:6a:
                    44:d3:75:69:28:0c:c7:f7:f4:07:d5:01:96:92:29:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:DE:4E:1D:54:B9:35:97:B8:7A:8C:82:85:22:33:47:CD:B0:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61/b5cf26ad-4d46-4540-80d9-8a26a8c8ac61.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.132.212.0/22
                  131.143.104.0/22
                IPv6:
                  2607:c440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400779

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:71:b9:2a:70:73:0b:6c:18:06:69:95:2b:5c:77:fb:7e:00:
         c2:49:d4:0c:2a:56:f8:dd:8e:55:8d:da:2c:df:96:6c:bb:ae:
         24:c2:68:41:d4:e2:44:03:85:d8:cf:14:63:62:7d:45:09:7e:
         bd:85:94:48:e1:88:4c:72:e9:32:df:46:21:6f:5d:64:7b:de:
         e3:c9:94:ec:36:76:51:91:64:cc:c2:ad:5a:e2:ef:3f:4c:64:
         36:5f:7e:4c:eb:76:91:f0:b0:6e:84:b7:ac:ff:19:6d:24:14:
         76:d4:33:1c:4b:80:b1:3b:9f:9d:63:b7:24:93:21:54:d9:cc:
         44:6d:02:7b:d5:26:10:85:15:6a:e8:48:42:e7:2d:f7:3f:48:
         46:70:b2:ac:8f:3e:02:76:8e:ff:46:f9:37:98:2f:d1:bf:06:
         d1:a6:c8:d9:7b:0c:dd:7c:1d:13:de:01:35:96:54:2b:bb:35:
         55:0b:52:20:c2:12:d7:7c:c5:54:5d:08:63:92:e4:08:c2:c5:
         bb:6c:fa:68:5b:fe:95:39:9c:e9:29:ac:12:b6:cb:ba:4c:ca:
         30:3b:dc:a2:d7:32:97:02:de:d0:d8:e4:e6:08:7a:81:f0:67:
         9f:ab:75:a3:17:73:bd:d8:d5:56:00:3b:bf:b0:97:ba:08:e4:
         6a:3a:d1:64
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEtx0JnCyQKKeNYjewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI1MTAwNzE2NTQyMVoXDTI3MDkxNDE5MDMyM1owLzEtMCsGA1UEAxMk
YjVjZjI2YWQtNGQ0Ni00NTQwLTgwZDktOGEyNmE4YzhhYzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rvNA8YX00qiZdQFCeVokJ4h16lnkWYC05hI
Jp2tWO6uFux+XVv+LWfPBRX05zAo4tDJ7xX6QXjaU6asrEQmC01QAK3DBmQT9drq
2rnNSPyZw/hrGFgvV7ZX4w1cHfQizl1NE2f+52rcmJZ+TrbK9E8MUTU/FAOd9c5K
sSCe6eJpzXKz8SJ4KblC4R50ZUfrLksqZL04jceJ8O5D+Q3nK60H/iGUbDzYu+5q
JTYV6vXciJmo93O3PLcgZ9ZbpUO71roH1nYadRhQtkv+ZVNADWh3KtrY9ClW1BZ7
MDYg8ZPiduttWynvY/gWk43b72pE03VpKAzH9/QH1QGWkilRJQIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFIai3k4dVLk1l7h6jIKFIjNHzbC3MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i
NWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThjOGFjNjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I1Y2YyNmFkLTRkNDYtNDU0MC04
MGQ5LThhMjZhOGM4YWM2MS9iNWNmMjZhZC00ZDQ2LTQ1NDAtODBkOS04YTI2YThj
OGFjNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJChNQDBAKDj2gwDQQCAAIwBwMFACYHxEAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBh2LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAlxuSpwcwtsGAZplStc
d/t+AMJJ1AwqVvjdjlWN2izflmy7riTCaEHU4kQDhdjPFGNifUUJfr2FlEjhiExy
6TLfRiFvXWR73uPJlOw2dlGRZMzCrVri7z9MZDZffkzrdpHwsG6Et6z/GW0kFHbU
MxxLgLE7n51jtySTIVTZzERtAnvVJhCFFWroSELnLfc/SEZwsqyPPgJ2jv9G+TeY
L9G/BtGmyNl7DN18HRPeATWWVCu7NVULUiDCEtd8xVRdCGOS5AjCxbts+mhb/pU5
nOkprBK2y7pMyjA73KLXMpcC3tDY5OYIeoHwZ5+rdaMXc73Y1VYAO7+wl7oI5Go6
0WQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:02 2025 by rpki-client