Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34.cer
File:                     646b4c8f-df71-430f-9338-67bba3a82c34.cer (raw, json)
Hash identifier:          0vqWZUZTJBBpA/45QZdY2QjP2QaTPps79VMPzwwDiAI=
Subject key identifier:   DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584A3F31DD8FD3B3DD1515DC2600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Jun 2025 20:57:10 +0000
Certificate not after:    Wed 22 Sep 2027 20:57:10 +0000
Subordinate resources:    AS: 15044
                          IP: 64.56.224.0/19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:31:dd:8f:d3:b3:dd:15:15:dc:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Jun 19 20:57:10 2025 GMT
            Not After : Sep 22 20:57:10 2027 GMT
        Subject: CN=646b4c8f-df71-430f-9338-67bba3a82c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:b4:ff:fb:e5:1d:da:74:16:35:95:8a:d4:
                    25:80:47:c2:2b:55:ac:eb:8d:20:e5:9c:3a:e1:17:
                    8c:39:85:b9:5e:d6:3b:64:e0:ea:97:8f:31:d8:f8:
                    53:04:a0:1f:24:9f:5f:b7:fe:f8:9c:d5:0a:c6:d0:
                    1d:6a:8f:68:ec:21:17:c1:cd:5d:91:c4:9a:a2:65:
                    da:69:e5:05:4f:3b:2f:28:57:10:d2:99:4f:4a:6b:
                    99:f3:a6:fc:85:ee:9c:47:b3:60:fd:1e:09:7f:9b:
                    6b:e6:c0:28:5e:d7:bd:e4:af:e4:03:f2:ed:61:ca:
                    ba:35:bf:f1:73:30:51:af:e1:c4:05:0a:34:46:f9:
                    fc:0f:e0:e8:16:93:46:a1:d3:f5:fd:fb:53:53:ca:
                    a6:3d:d2:7d:8d:28:fe:52:3e:71:33:ca:af:65:e4:
                    d2:bf:6e:2c:fd:9c:ab:f6:e9:49:0c:6d:f7:a3:b9:
                    e1:d3:a6:b2:35:a0:4c:e7:62:52:12:fc:e2:5e:3f:
                    ca:c1:8c:fb:99:0e:2c:83:75:fe:92:12:47:95:0c:
                    65:0e:75:b3:0b:00:a0:1a:b1:68:21:48:ba:7c:7f:
                    1e:b0:23:6b:c3:f5:78:7b:8b:70:e1:c3:11:db:87:
                    94:ab:f4:2d:e7:1d:fb:8d:23:01:b8:f7:bf:39:bd:
                    1d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:EE:2B:C6:8A:88:CA:10:F7:A1:A9:F5:21:59:C2:A5:79:2E:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/646b4c8f-df71-430f-9338-67bba3a82c34/646b4c8f-df71-430f-9338-67bba3a82c34.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.224.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15044

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:b6:ae:66:23:2d:0d:79:ff:60:79:78:6b:ee:8c:76:2a:
         c7:7b:6a:5f:61:4e:c3:45:0b:a6:b5:1c:4c:7f:27:1a:99:42:
         16:f3:82:8b:07:8b:8b:19:b1:e2:67:71:ce:b0:e2:97:9b:17:
         56:31:cf:22:72:c1:c6:5d:f1:32:6b:ce:a3:fb:7f:d4:ee:b9:
         c1:de:46:bb:7c:76:2e:74:1d:29:8e:71:c4:8c:74:b9:0d:81:
         0b:e3:d4:e9:72:b1:b6:bb:af:d3:fa:11:15:73:bf:8e:25:b6:
         09:77:38:d0:5e:9b:a1:1e:4f:e6:d3:57:55:71:38:f7:7b:5e:
         87:29:e1:48:2d:1b:ba:18:d1:35:d0:64:af:45:5b:f4:9f:90:
         84:de:fd:2f:1d:7e:f1:28:15:f7:60:48:76:95:29:2c:38:0d:
         fd:01:03:bb:a4:65:1e:40:58:a2:48:aa:7d:62:7c:38:ab:92:
         c7:96:0b:a7:c9:9e:54:a0:eb:7b:97:c3:b6:d4:bc:b7:a6:7e:
         89:b4:80:34:d6:ed:30:c9:f7:3f:ab:19:2d:5d:54:2b:03:5b:
         61:6b:6b:f0:0b:be:e5:ec:66:e7:cc:75:3e:87:ee:f0:85:96:
         15:bd:f2:d0:50:d9:3e:e9:35:a7:67:12:b9:41:bd:40:df:b4:
         8c:28:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:02:13 2025 by rpki-client