Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
File:                     3b9b8028-72e5-488e-971c-54bd1e51f064.cer (raw, json)
Hash identifier:          cYeXC1u1o8OWAxyB+xEiqUnxZ+nFzgdfC6i0BkTIyOY=
Subject key identifier:   5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A5289D7EDDC4B4652C4132B10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Jun 2025 19:14:47 +0000
Certificate not after:    Wed 29 Sep 2027 19:14:47 +0000
Subordinate resources:    IP: 65.98.128.0 -- 65.98.147.255
                          IP: 65.98.150.0/24
                          IP: 65.98.152.0 -- 65.98.154.255
                          IP: 65.98.156.0 -- 65.98.176.255
                          IP: 65.98.180.0 -- 65.98.231.255
                          IP: 65.98.241.0 -- 65.98.252.255
                          IP: 66.81.2.0 -- 66.81.6.255
                          IP: 66.81.9.0 -- 66.81.13.255
                          IP: 66.81.15.0 -- 66.81.27.255
                          IP: 66.81.30.0/23
                          IP: 66.81.38.0/23
                          IP: 66.81.48.0/23
                          IP: 66.81.56.0 -- 66.81.80.255
                          IP: 66.81.82.0/23
                          IP: 66.81.88.0 -- 66.81.94.255
                          IP: 66.81.96.0 -- 66.81.102.255
                          IP: 66.81.106.0 -- 66.81.119.255
                          IP: 66.81.124.0 -- 66.81.131.255
                          IP: 66.81.133.0 -- 66.81.158.255
                          IP: 66.81.208.0/22
                          IP: 66.81.224.0 -- 66.81.226.255
                          IP: 66.81.228.0 -- 66.81.239.255
                          IP: 66.249.160.0 -- 66.249.171.255
                          IP: 66.249.176.0/20
                          IP: 67.203.65.0 -- 67.203.91.255
                          IP: 67.203.93.0 -- 67.203.96.255
                          IP: 67.203.98.0 -- 67.203.100.255
                          IP: 67.203.103.0 -- 67.203.108.255
                          IP: 67.203.110.0 -- 67.203.120.255
                          IP: 67.203.122.0/24
                          IP: 67.203.124.0 -- 67.203.126.255
                          IP: 69.19.128.0 -- 69.19.134.255
                          IP: 69.19.136.0 -- 69.19.160.255
                          IP: 69.19.186.0 -- 69.19.189.255
                          IP: 69.19.191.0 -- 69.19.216.255
                          IP: 69.19.224.0 -- 69.19.228.255
                          IP: 69.19.230.0 -- 69.19.234.255
                          IP: 69.19.236.0/23
                          IP: 69.19.241.0 -- 69.19.245.255
                          IP: 69.19.249.0 -- 69.19.251.255
                          IP: 69.19.253.0/24
                          IP: 69.85.128.0/21
                          IP: 69.85.137.0 -- 69.85.142.255
                          IP: 69.85.152.0/23
                          IP: 69.85.158.0/23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:52:89:d7:ed:dc:4b:46:52:c4:13:2b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Jun 26 19:14:47 2025 GMT
            Not After : Sep 29 19:14:47 2027 GMT
        Subject: CN=3b9b8028-72e5-488e-971c-54bd1e51f064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:fe:85:13:49:8a:b7:2b:cf:e6:7a:7e:76:
                    79:07:2d:e4:f2:63:58:4b:e6:20:6c:a5:99:54:3b:
                    e0:f1:a9:9c:48:b4:9a:85:4e:88:19:ec:95:ea:b8:
                    db:be:03:35:5d:22:9f:2b:1d:6b:d2:42:ed:be:b9:
                    0f:bf:e8:0f:fc:ec:07:42:ae:cf:e9:fb:74:a0:01:
                    0e:4b:1d:de:ad:66:45:b4:0f:06:a3:34:a3:74:a0:
                    b0:39:36:56:dc:ca:93:07:c3:cf:08:2b:6f:24:54:
                    4c:f6:6a:5b:51:40:a0:0a:82:2f:0b:62:99:81:a0:
                    9f:7f:5b:eb:60:3b:bf:83:ad:44:31:9e:ad:d5:67:
                    72:0e:e7:1e:19:82:eb:23:2e:bf:25:48:8e:64:c9:
                    e1:6a:fa:f1:07:5e:24:90:37:cc:ce:42:51:0d:f9:
                    d3:6e:55:34:9d:fb:71:69:0f:a3:38:aa:39:26:63:
                    1b:64:d6:40:15:8f:a9:87:ef:2c:61:8d:8f:11:76:
                    10:2a:7a:78:77:a2:0c:90:4f:2c:bd:58:e8:2d:74:
                    7c:d9:29:4f:07:a2:5e:01:23:46:d2:24:68:c6:8d:
                    48:22:1e:2a:cd:0b:22:b0:50:f0:67:f5:3e:45:3c:
                    65:13:5d:5d:c3:c4:4f:9e:d0:fd:8f:ee:07:62:a6:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.98.128.0-65.98.147.255
                  65.98.150.0/24
                  65.98.152.0-65.98.154.255
                  65.98.156.0-65.98.176.255
                  65.98.180.0-65.98.231.255
                  65.98.241.0-65.98.252.255
                  66.81.2.0-66.81.6.255
                  66.81.9.0-66.81.13.255
                  66.81.15.0-66.81.27.255
                  66.81.30.0/23
                  66.81.38.0/23
                  66.81.48.0/23
                  66.81.56.0-66.81.80.255
                  66.81.82.0/23
                  66.81.88.0-66.81.94.255
                  66.81.96.0-66.81.102.255
                  66.81.106.0-66.81.119.255
                  66.81.124.0-66.81.131.255
                  66.81.133.0-66.81.158.255
                  66.81.208.0/22
                  66.81.224.0-66.81.226.255
                  66.81.228.0-66.81.239.255
                  66.249.160.0-66.249.171.255
                  66.249.176.0/20
                  67.203.65.0-67.203.91.255
                  67.203.93.0-67.203.96.255
                  67.203.98.0-67.203.100.255
                  67.203.103.0-67.203.108.255
                  67.203.110.0-67.203.120.255
                  67.203.122.0/24
                  67.203.124.0-67.203.126.255
                  69.19.128.0-69.19.134.255
                  69.19.136.0-69.19.160.255
                  69.19.186.0-69.19.189.255
                  69.19.191.0-69.19.216.255
                  69.19.224.0-69.19.228.255
                  69.19.230.0-69.19.234.255
                  69.19.236.0/23
                  69.19.241.0-69.19.245.255
                  69.19.249.0-69.19.251.255
                  69.19.253.0/24
                  69.85.128.0/21
                  69.85.137.0-69.85.142.255
                  69.85.152.0/23
                  69.85.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:2f:d0:df:5e:7d:48:28:c5:a8:dc:0f:ea:10:b8:24:7a:
         1f:62:00:cc:46:28:24:a7:9c:4c:d9:3f:83:26:ef:84:61:62:
         82:cd:34:4a:de:9c:70:f6:16:46:24:19:c9:f2:d6:84:6b:1f:
         f9:8a:dc:fe:59:fc:bd:f2:22:51:46:21:26:6b:c6:7c:a7:25:
         0b:79:c3:13:b8:4b:f6:86:23:79:90:57:d2:d3:5b:cc:9b:ce:
         55:0a:97:f9:a2:f2:d3:af:81:0d:0f:7a:72:b3:f3:9a:52:5b:
         63:7a:f8:a5:88:6d:f2:0c:7a:5b:91:0f:8f:c3:a4:54:71:93:
         66:0c:eb:f8:aa:48:f0:68:d8:a2:c2:0c:00:e9:89:32:20:36:
         cc:9a:ce:af:ed:15:82:5e:e9:3f:ec:5b:f3:d9:dc:02:ec:ac:
         5d:f1:9b:88:8c:4d:b3:bb:e9:de:bb:8b:b5:0e:08:4e:f9:31:
         b4:3e:3b:e3:08:66:0c:4d:f2:9f:2a:ae:c3:88:8f:b0:ef:31:
         1d:5a:ea:c6:f4:1b:5e:7f:c9:18:07:de:96:3a:1a:b6:b0:a7:
         5a:65:99:21:0a:36:b5:ed:87:65:7a:57:1e:1a:50:9f:fd:94:
         33:0f:dc:35:f7:b4:b4:92:32:f1:ab:91:ae:20:06:69:1a:44:
         da:c7:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:34:44 2025 by rpki-client