Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
File:                     820e56e8-763b-4037-929e-b01c8d786e75.cer (raw, json)
Hash identifier:          elUt0Qrsaq2nQllISJz+MylZJS1sg4rVZIXTKSWZWC4=
Subject key identifier:   3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584B74B01FC1F55560BF915AAF35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Oct 2025 17:36:20 +0000
Certificate not after:    Tue 08 Jun 2027 00:45:34 +0000
Subordinate resources:    AS: 399275
                          IP: 130.12.168.0/22
                          IP: 165.140.116.0/22
                          IP: 167.253.64.0/22
                          IP: 172.81.56.0/22
                          IP: 2602:fcc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:b0:1f:c1:f5:55:60:bf:91:5a:af:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct  8 17:36:20 2025 GMT
            Not After : Jun  8 00:45:34 2027 GMT
        Subject: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:99:33:8f:74:79:27:13:e9:84:c0:e5:36:
                    ce:6d:ec:1b:8a:90:67:56:9a:76:c3:38:e9:56:58:
                    0a:09:b9:47:71:80:89:55:0b:b4:9f:37:af:e2:23:
                    cd:6f:7f:7d:88:30:aa:a4:3b:aa:89:b9:09:0f:38:
                    c5:63:3c:8f:ad:62:01:b7:aa:84:bc:bd:2e:e3:72:
                    cc:76:ec:63:b7:a2:85:6c:df:28:c3:a0:fe:b1:66:
                    c3:13:0a:0c:8a:ce:94:be:46:db:a6:3d:26:ab:c4:
                    c2:d0:f1:03:8c:12:3e:9b:e2:ea:91:62:e3:73:2d:
                    b0:fe:4f:81:e3:21:9b:48:64:2e:3c:a8:33:da:d2:
                    a1:36:72:a7:39:3f:44:97:b0:97:37:aa:53:a1:5c:
                    84:00:38:92:ab:b9:82:2e:e2:bd:35:ee:90:5e:0b:
                    a5:5e:0d:b7:3a:01:fb:99:e7:4c:8a:6c:ef:33:21:
                    e6:45:ef:14:1a:e9:01:38:c6:39:ea:ee:87:a4:8c:
                    d9:e1:e8:78:b2:39:ea:9a:15:40:38:70:9e:75:24:
                    4e:d1:47:40:09:49:2e:d3:15:a2:6a:5d:3f:c4:2e:
                    76:37:f2:2d:d4:82:81:69:b1:b0:7b:4c:2a:b6:f6:
                    75:d6:f0:dc:02:2b:f2:d8:77:67:5c:49:cd:ac:ea:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.168.0/22
                  165.140.116.0/22
                  167.253.64.0/22
                  172.81.56.0/22
                IPv6:
                  2602:fcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399275

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:b9:0e:70:c1:46:d9:3f:82:d6:f0:c3:3a:30:41:6a:cc:
         f8:a3:c4:af:a5:6d:05:bf:07:c6:bb:b8:b3:d2:69:fa:c7:9e:
         18:cf:c1:66:1d:f0:47:14:94:77:37:59:33:71:9b:7e:6a:36:
         df:e6:95:9b:f4:44:09:fc:f2:2e:d5:b0:81:cd:41:6e:d7:bd:
         8a:b8:97:00:f8:7c:12:77:bb:4d:7e:26:fb:21:01:0c:e5:16:
         3d:2f:4c:8b:8f:34:49:e5:f6:88:55:41:98:26:a4:70:4a:61:
         e5:de:3a:5f:02:c5:a7:87:76:b8:f6:3c:32:12:cb:8c:6d:ee:
         a7:a2:5f:6f:ed:4f:94:db:c1:15:7f:25:61:41:44:63:7c:ac:
         72:a6:4f:7b:98:45:7e:2f:5b:22:1f:db:06:95:e0:da:db:44:
         95:fb:85:b8:82:07:f5:58:9b:20:a4:3c:80:30:e6:cb:36:a1:
         61:3a:fb:56:c9:95:51:30:a9:34:26:e9:d3:80:81:2a:84:9b:
         c9:11:1f:03:be:62:95:1f:e3:29:40:e4:ad:02:d2:d1:a2:9b:
         22:65:47:90:7c:17:eb:88:f7:2a:9a:3a:cc:a2:06:67:33:4d:
         8c:e8:35:2b:62:11:8d:3c:17:a0:a3:84:a1:27:39:c3:70:21:
         14:49:77:bf
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEt0sB/B9VVgv5FarzUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI1MTAwODE3MzYyMFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk
ODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2ZTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAiZM490eScT6YTA5TbObewbipBnVpp2wzjp
VlgKCblHcYCJVQu0nzev4iPNb399iDCqpDuqibkJDzjFYzyPrWIBt6qEvL0u43LM
duxjt6KFbN8ow6D+sWbDEwoMis6Uvkbbpj0mq8TC0PEDjBI+m+LqkWLjcy2w/k+B
4yGbSGQuPKgz2tKhNnKnOT9El7CXN6pToVyEADiSq7mCLuK9Ne6QXgulXg23OgH7
medMimzvMyHmRe8UGukBOMY56u6HpIzZ4eh4sjnqmhVAOHCedSRO0UdACUku0xWi
al0/xC52N/It1IKBabGwe0wqtvZ11vDcAivy2HdnXEnNrOrqfwIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFD99Nd6lbNoO7G8YbhEDvGyH1tMtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84
MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzgyMGU1NmU4LTc2M2ItNDAzNy05
MjllLWIwMWM4ZDc4NmU3NS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3
ODZlNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAKCDKgDBAKljHQDBAKn/UADBAKsUTgwDQQCAAIw
BwMFACYC/MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBherMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC9b
uQ5wwUbZP4LW8MM6MEFqzPijxK+lbQW/B8a7uLPSafrHnhjPwWYd8EcUlHc3WTNx
m35qNt/mlZv0RAn88i7VsIHNQW7XvYq4lwD4fBJ3u01+JvshAQzlFj0vTIuPNEnl
9ohVQZgmpHBKYeXeOl8CxaeHdrj2PDISy4xt7qeiX2/tT5TbwRV/JWFBRGN8rHKm
T3uYRX4vWyIf2waV4NrbRJX7hbiCB/VYmyCkPIAw5ss2oWE6+1bJlVEwqTQm6dOA
gSqEm8kRHwO+YpUf4ylA5K0C0tGimyJlR5B8F+uI9yqaOsyiBmczTYzoNStiEY08
F6CjhKEnOcNwIRRJd78=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:29 2025 by rpki-client