Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c.cer
File:                     c1ca327a-71b9-47e5-b718-53788c38e86c.cer (raw, json)
Hash identifier:          w5uauGoKNIi0VR4f88ec3asN4XiqbFl9ryNm6v3fDrM=
Subject key identifier:   CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584B1503545A2731AD13752FEA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Sep 2025 11:06:23 +0000
Certificate not after:    Tue 31 Aug 2027 14:47:30 +0000
Subordinate resources:    AS: 399821
                          IP: 66.150.128.0/22
                          IP: 67.202.214.0/24
                          IP: 68.233.46.0/23
                          IP: 98.97.240.0/21
                          IP: 159.112.234.0/24
                          IP: 164.152.6.0/23
                          IP: 167.150.84.0/23
                          IP: 198.232.236.0/22
                          IP: 2606:5b40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:03:54:5a:27:31:ad:13:75:2f:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Sep  4 11:06:23 2025 GMT
            Not After : Aug 31 14:47:30 2027 GMT
        Subject: CN=c1ca327a-71b9-47e5-b718-53788c38e86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:af:5d:18:c7:dd:41:b4:bd:32:3d:d6:b3:
                    38:f1:4b:61:33:84:62:92:6e:3e:47:a0:f7:7b:f0:
                    61:89:3b:f1:bf:c6:c6:35:48:a7:bd:df:fa:fd:24:
                    8f:51:87:fb:29:66:96:c5:02:ec:88:11:a9:c3:b2:
                    04:4a:51:63:61:49:2d:69:fd:f3:c9:3d:bc:86:b9:
                    7b:26:ad:3c:33:26:1b:0d:49:9d:b3:c5:14:4d:f2:
                    66:03:17:11:c1:80:b3:7d:de:47:7c:41:da:41:59:
                    52:b4:65:21:73:26:cd:80:7b:2f:b9:14:e6:bc:19:
                    67:24:61:e6:e4:9d:15:45:df:96:2f:2b:58:43:17:
                    06:65:48:9f:5a:82:9c:a5:39:dd:be:c3:89:46:8b:
                    ed:65:39:53:9a:b8:d4:e0:ec:39:1f:dc:6c:ff:3b:
                    fe:e5:bc:14:37:58:7a:95:17:9b:56:0b:24:45:80:
                    f0:46:36:8d:0b:7a:a5:cf:17:ce:1e:97:5b:72:2f:
                    65:16:8e:d0:10:c8:3f:cd:13:ad:7f:2f:68:6c:77:
                    00:c3:db:9c:3d:1f:0a:7d:22:59:a1:60:3d:22:e9:
                    f3:1c:b7:a0:fd:82:b9:c3:0f:7a:9a:f8:18:dc:e9:
                    2b:82:5b:db:88:ff:b0:1c:35:8c:22:e1:ee:27:00:
                    a2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:A1:B6:26:1B:1F:1C:7D:CB:D9:A9:95:4B:AE:12:C7:3F:99:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c1ca327a-71b9-47e5-b718-53788c38e86c/c1ca327a-71b9-47e5-b718-53788c38e86c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.150.128.0/22
                  67.202.214.0/24
                  68.233.46.0/23
                  98.97.240.0/21
                  159.112.234.0/24
                  164.152.6.0/23
                  167.150.84.0/23
                  198.232.236.0/22
                IPv6:
                  2606:5b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399821

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:1f:72:fa:6a:cf:70:15:e2:87:a9:ab:be:f2:28:cc:52:
         2e:64:84:1c:40:80:6f:2f:4a:16:f2:c7:66:bf:35:5d:30:e4:
         c3:d6:86:1f:26:ed:fe:44:54:d2:5c:4c:87:cf:77:fc:04:61:
         96:3e:81:6c:e2:46:1c:d4:5e:c1:bd:01:16:9f:16:7f:be:2c:
         1a:f2:be:72:83:d0:40:eb:34:30:a3:12:28:ff:80:8a:94:de:
         2e:65:3b:ac:2a:ff:86:32:49:7a:89:10:70:2e:6d:c0:5c:7f:
         1d:1d:9d:4c:12:01:7c:8e:a7:6d:4d:1f:85:7b:f8:c7:f9:a9:
         f3:fa:e7:f2:a0:79:64:36:e0:b6:22:84:18:24:83:88:db:7e:
         e1:cb:a0:97:a3:be:e1:a9:6b:7f:92:ab:2c:28:5d:45:d8:ea:
         a3:c8:98:17:11:59:a4:3a:8b:47:b9:c5:d5:c8:c8:ae:d5:e8:
         c8:b0:36:da:06:86:77:b4:29:cb:d7:2a:06:b8:f8:3e:c3:5a:
         d7:73:22:fa:9f:2f:50:b8:55:3c:93:b2:b5:2f:1a:1f:64:4b:
         fb:86:34:43:48:01:06:9e:f4:34:9d:e3:a4:04:6b:51:89:2a:
         3b:36:29:d4:78:a2:fa:8d:8e:1a:b5:8d:c7:2f:1f:33:ee:ca:
         cf:3e:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:40 2025 by rpki-client