Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
File:                     b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer (raw, json)
Hash identifier:          go5YdwuAfcsYLbjjhxdkg45TeDnjdXGAmTXMyQ+xzQY=
Subject key identifier:   E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285849B9A26691F9BD20E63AFB4EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 03 May 2025 00:45:35 +0000
Certificate not after:    Fri 06 Aug 2027 00:45:35 +0000
Subordinate resources:    AS: 40244
                          IP: 66.206.32.0/20
                          IP: 67.231.240.0/20
                          IP: 94.26.27.0/24
                          IP: 94.26.31.0/24
                          IP: 94.26.44.0/24
                          IP: 94.26.46.0/23
                          IP: 94.26.67.0/24
                          IP: 94.26.73.0/24
                          IP: 94.26.84.0/23
                          IP: 104.129.168.0/22
                          IP: 162.213.120.0/22
                          IP: 162.250.200.0/22
                          IP: 163.182.168.0/21
                          IP: 173.198.192.0/18
                          IP: 173.233.64.0/19
                          IP: 192.111.37.0/24
                          IP: 198.48.48.0/20
                          IP: 199.223.252.0/22
                          IP: 208.85.0.0/21
                          IP: 209.240.96.0/20
                          IP: 2604:7c00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:a2:66:91:f9:bd:20:e6:3a:fb:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May  3 00:45:35 2025 GMT
            Not After : Aug  6 00:45:35 2027 GMT
        Subject: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:65:8d:69:c5:1b:46:2b:a9:58:9c:49:29:
                    1a:84:69:84:d9:a0:10:28:4a:a3:ee:09:0f:92:9e:
                    fb:a2:0e:b5:7b:84:bd:5a:50:41:8c:bd:e7:16:17:
                    f6:ef:a8:31:6d:12:e1:64:f2:aa:0d:f7:75:60:af:
                    3c:40:7a:e5:d2:1c:31:7f:1b:6f:ca:6b:ab:fc:e7:
                    41:ba:13:fe:2c:f1:cc:d0:d5:f4:58:b3:2b:cd:69:
                    06:5e:52:60:00:74:61:17:ce:31:b0:98:73:b6:b3:
                    ba:96:51:a5:70:be:63:d5:3e:d4:61:a5:25:66:cf:
                    73:01:13:7d:ba:10:f9:0e:bd:b4:a8:17:8b:5b:cf:
                    9f:5f:26:35:df:f3:88:07:1b:6b:28:16:ac:80:15:
                    f8:51:55:a6:05:21:17:e8:09:20:6e:80:60:b6:95:
                    d5:07:ff:cd:89:81:9c:51:1b:d9:bc:ec:91:86:e5:
                    e5:bf:95:1b:aa:33:00:24:bc:4c:94:3a:a9:9d:47:
                    dd:fa:15:d2:9e:11:93:d7:df:16:ee:39:cb:40:04:
                    00:de:08:9c:47:c9:87:31:dd:9a:82:4e:fb:8a:8e:
                    82:82:45:03:ec:35:f9:32:ac:01:bc:80:af:c6:21:
                    9b:48:06:89:b0:89:9b:36:c6:cd:e6:04:bc:98:e0:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.32.0/20
                  67.231.240.0/20
                  94.26.27.0/24
                  94.26.31.0/24
                  94.26.44.0/24
                  94.26.46.0/23
                  94.26.67.0/24
                  94.26.73.0/24
                  94.26.84.0/23
                  104.129.168.0/22
                  162.213.120.0/22
                  162.250.200.0/22
                  163.182.168.0/21
                  173.198.192.0/18
                  173.233.64.0/19
                  192.111.37.0/24
                  198.48.48.0/20
                  199.223.252.0/22
                  208.85.0.0/21
                  209.240.96.0/20
                IPv6:
                  2604:7c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40244

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:04:c0:7e:02:e7:ed:8e:c0:74:3d:cb:b4:8f:f7:d1:35:
         0c:8a:fe:b8:dc:20:35:83:56:81:f0:a3:52:34:49:21:14:98:
         d6:ec:ef:a8:41:d1:fa:e9:bf:9e:31:11:65:15:cc:8a:37:5b:
         3c:49:f6:1a:98:6a:44:71:ce:92:d1:59:e4:06:a8:08:fa:2e:
         bb:65:9b:3b:9a:40:81:d7:02:ed:de:39:1c:33:b9:73:ae:0b:
         ad:b7:38:dc:de:1a:f1:83:42:13:c2:d9:ae:7b:4c:96:f7:ec:
         ea:47:31:d4:35:88:09:c4:b8:35:8b:51:67:04:3b:33:cb:cd:
         59:a7:bd:f9:f0:f3:c8:13:28:31:28:29:d2:00:cf:e7:2b:2d:
         44:d7:c5:90:30:ce:53:1d:7e:0c:c1:44:65:fa:b2:55:6f:7b:
         03:01:70:70:c6:06:5b:de:d4:1e:5b:e7:45:19:58:34:7f:86:
         12:94:d5:e7:13:f2:92:0b:cd:4a:72:d6:d2:a1:97:a5:29:5d:
         11:be:fb:4b:5c:68:cd:c8:d7:39:f9:7a:da:1f:65:e9:07:d3:
         6e:90:2d:13:ff:91:e5:71:b1:8b:5a:58:56:af:e2:29:d0:f0:
         72:a0:9e:de:2a:f0:43:49:b4:35:b2:ba:34:07:10:e9:ca:74:
         ac:c6:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:36:48 2025 by rpki-client