Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer
File:                     d1d7a311-3518-44d2-aa48-eeb29263a6ad.cer (raw, json)
Hash identifier:          lL5HpH8Axul8TcrUK5qRYbVVLmVBQYZMPQKDmLtC9wU=
Subject key identifier:   C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584B7A810CEC4415810730592300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Oct 2025 19:36:20 +0000
Certificate not after:    Wed 11 Aug 2027 10:52:11 +0000
Subordinate resources:    AS: 20118
                          IP: 23.129.188.0/24
                          IP: 142.248.92.0/23
                          IP: 2602:f797::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:81:0c:ec:44:15:81:07:30:59:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Oct 10 19:36:20 2025 GMT
            Not After : Aug 11 10:52:11 2027 GMT
        Subject: CN=d1d7a311-3518-44d2-aa48-eeb29263a6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:0e:b0:56:7e:9a:ca:db:2f:6c:c8:5e:74:
                    90:0d:dd:91:40:59:75:eb:89:a2:f9:06:78:b6:26:
                    42:7b:00:d7:06:30:c2:00:26:5e:d4:c2:bf:3d:4b:
                    b4:82:aa:88:cf:33:5e:55:1d:c1:77:eb:c6:ff:c5:
                    a7:e7:0d:34:0a:a9:35:77:32:fd:43:c3:47:7d:77:
                    a4:04:ee:18:3b:ab:30:75:8f:f0:0e:51:40:c3:9e:
                    d2:a5:87:18:39:92:56:95:0c:f9:49:8f:6e:46:9f:
                    e4:fa:ed:49:52:39:55:74:37:78:90:71:13:72:37:
                    fe:40:01:49:5f:5c:f5:9e:ce:18:e3:4b:a6:b0:23:
                    34:dd:8b:d1:5f:24:41:2c:eb:a5:af:fb:7d:e1:0d:
                    cb:0b:46:04:52:f5:5e:23:db:86:06:db:d8:dd:80:
                    51:17:d5:1d:50:6f:be:92:24:0b:4a:5b:96:6c:13:
                    75:0d:a0:e0:07:2c:03:1c:a7:b4:9b:8e:f4:79:6c:
                    40:2f:1e:b3:50:a6:c9:f3:14:7e:58:d4:b6:7a:93:
                    0a:3a:25:5b:59:a3:ef:ae:37:75:87:56:19:11:e5:
                    0f:e9:d5:37:a8:bf:8f:0b:b3:e7:c6:8d:dc:97:a7:
                    30:18:7c:16:db:58:af:de:d7:85:16:ee:ce:75:85:
                    4b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:92:97:0B:64:4A:02:05:AF:C4:76:63:8A:B2:F5:EC:C3:A2:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d1d7a311-3518-44d2-aa48-eeb29263a6ad/d1d7a311-3518-44d2-aa48-eeb29263a6ad.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.188.0/24
                  142.248.92.0/23
                IPv6:
                  2602:f797::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20118

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:6b:59:3b:2e:e8:8f:32:d5:bb:36:d7:35:8e:16:2d:bb:
         1c:8f:c0:bb:00:92:09:1e:22:fb:97:41:94:10:a6:f4:83:df:
         bb:7f:de:85:eb:fa:00:d0:a7:ec:fe:70:ab:4d:dd:a7:88:b5:
         27:dd:06:81:81:1f:7d:2d:e0:5a:ff:96:dc:e3:d5:b0:9f:bc:
         a4:7b:43:ed:75:81:62:16:e8:7f:a2:4c:87:ca:5d:39:4c:61:
         7e:e0:86:fd:dd:18:d0:71:86:5a:d9:f8:3d:61:4e:63:ec:cf:
         a5:0e:6e:05:ad:ea:83:f2:e5:fb:1f:e5:51:d0:c0:f7:10:e5:
         7d:bf:3c:36:37:8c:76:91:84:1c:25:50:a3:d3:2b:99:9a:51:
         e6:f2:85:9e:fa:9f:4e:bf:1f:bc:82:9e:72:43:bc:7d:89:c3:
         0d:35:b4:f2:67:ca:ab:59:da:a3:76:a5:ed:21:6e:7e:84:a3:
         8c:e3:96:b0:00:16:3c:d4:6b:db:f7:f1:3a:59:cc:96:cd:c6:
         96:07:0a:85:54:32:7c:d4:30:03:80:15:93:4a:16:34:1e:1a:
         38:64:5a:a6:ae:90:0f:c0:f9:9f:62:1b:db:ea:06:f6:1f:23:
         3a:d2:23:ea:0d:17:db:0c:0c:5e:25:e8:ed:b1:27:0e:2f:ef:
         8b:f8:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:46 2025 by rpki-client