Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
File:                     ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer (raw, json)
Hash identifier:          aTjKZnLm0GnpQiJaCH4c9xruY/5a6J9zvlGDCgrTKiw=
Subject key identifier:   7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority key identifier: 21:F9:3C:DA:50:12:16:AE:25:42:AD:22:DF:88:FF:D4:CE:20:64:E0
Certificate issuer:       /CN=fd789de6-3f6d-456e-8870-c04ed6990c13
Certificate serial:       010D0C9F4328584A61DB07DBDF59A4E066FAA280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
caRepository:             rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 02 Jul 2025 06:55:30 +0000
Certificate not after:    Tue 05 Oct 2027 06:55:30 +0000
Subordinate resources:    IP: 64.57.176.0/20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:db:07:db:df:59:a4:e0:66:fa:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd789de6-3f6d-456e-8870-c04ed6990c13
        Validity
            Not Before: Jul  2 06:55:30 2025 GMT
            Not After : Oct  5 06:55:30 2027 GMT
        Subject: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:2d:cd:d6:e0:62:84:91:ac:36:62:19:31:
                    3a:e3:bb:84:04:df:26:85:5f:2e:6c:c1:a0:ab:a1:
                    94:ad:ee:e6:a7:b2:ae:06:58:d0:30:e6:a6:00:11:
                    bb:37:41:37:6f:fe:a2:cf:98:69:68:29:4a:16:c4:
                    de:e0:c0:8c:4b:35:93:e5:09:5f:f3:b5:1f:44:15:
                    78:f7:d6:30:49:a8:98:b0:27:e4:b8:03:bf:c8:38:
                    3a:41:cf:fc:51:24:d6:fe:b4:c1:55:d4:d6:e7:a7:
                    8f:b1:38:8e:90:d4:3e:33:0b:a7:2a:39:90:e4:fc:
                    f6:68:e9:59:7b:e7:13:9b:13:c0:dc:38:78:c2:87:
                    c1:a9:65:55:f2:21:31:49:26:8a:2c:93:d9:e8:d5:
                    34:37:f6:21:4a:64:84:64:4e:d1:8c:bd:01:bb:20:
                    9d:80:53:db:72:f8:14:0f:f0:dc:b9:72:63:1c:d5:
                    2a:35:3a:20:02:60:f8:a7:87:e4:0d:74:71:b2:a3:
                    53:e2:21:fe:06:16:cf:66:5c:91:f0:09:6e:48:68:
                    86:a4:3c:7e:87:ef:06:74:cb:52:c9:ff:ce:c9:a4:
                    66:0d:56:aa:f2:3b:d6:af:79:ff:74:db:4f:a5:71:
                    8e:4c:c5:8b:ee:06:09:5e:c9:10:59:0b:3a:36:73:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl

            X509v3 Authority Key Identifier:
                keyid:21:F9:3C:DA:50:12:16:AE:25:42:AD:22:DF:88:FF:D4:CE:20:64:E0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:51:cb:68:85:d1:4a:df:c7:79:2a:b8:b3:17:a0:c0:6d:
         ea:56:c7:9f:e0:f9:a4:af:bf:17:d8:9c:8c:0b:80:02:48:e4:
         9f:37:5d:b2:2e:7f:31:f1:a8:7b:33:92:e9:79:1f:eb:9e:db:
         68:5a:a7:24:64:16:cf:84:f4:f3:fb:ac:cc:78:a5:c9:6e:53:
         48:43:69:2e:2f:67:59:b9:2a:00:df:b5:c3:9b:7b:7b:98:41:
         95:0a:97:7c:6e:3c:31:93:d2:19:ca:fa:59:08:c2:fc:5c:da:
         11:bb:00:da:9d:f3:20:c3:51:d3:f9:95:84:08:cb:1c:18:57:
         2d:e3:13:2c:6f:98:73:76:29:f0:b2:0a:28:e9:34:a3:95:d4:
         65:1c:00:39:cf:46:4f:7e:c8:27:77:a3:d8:84:dd:ad:e9:6e:
         9f:42:c9:69:db:a5:75:ec:56:3b:b2:07:42:61:15:5c:10:c1:
         60:e2:7f:67:c1:ff:41:96:56:7a:8b:79:01:61:a3:91:04:5b:
         3b:16:4e:bb:aa:e1:32:6d:c1:5e:07:51:53:60:8a:b8:22:53:
         69:55:fe:6a:f6:37:92:46:d8:30:2a:bb:56:1d:11:0d:4c:1c:
         63:a5:15:32:a1:b1:40:cd:f7:7f:80:75:d0:cf:11:c1:eb:be:
         f9:0a:3e:98
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWEph2wfb31mk4Gb6ooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ3ODlkZTYtM2Y2ZC00NTZlLTg4NzAtYzA0ZWQ2OTkw
YzEzMB4XDTI1MDcwMjA2NTUzMFoXDTI3MTAwNTA2NTUzMFowPTE7MDkGA1UEAxMy
ZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVlNjZhNzZkOGI3YTY4ZTAw
NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyC3N1uBihJGsNmIZ
MTrju4QE3yaFXy5swaCroZSt7uansq4GWNAw5qYAEbs3QTdv/qLPmGloKUoWxN7g
wIxLNZPlCV/ztR9EFXj31jBJqJiwJ+S4A7/IODpBz/xRJNb+tMFV1Nbnp4+xOI6Q
1D4zC6cqOZDk/PZo6Vl75xObE8DcOHjCh8GpZVXyITFJJoosk9no1TQ39iFKZIRk
TtGMvQG7IJ2AU9ty+BQP8Ny5cmMc1So1OiACYPinh+QNdHGyo1PiIf4GFs9mXJHw
CW5IaIakPH6H7wZ0y1LJ/87JpGYNVqryO9avef9020+lcY5MxYvuBgleyRBZCzo2
c1ZzAgMBAAGjggOlMIIDoTAdBgNVHQ4EFgQUfiyTW3VMALHoBDu7cSHMO1qtJIww
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvYTkyYWQyNmRkZGQ2NDE5Yjk3M2UwNTZm
ODc5NDUzMDIvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYTkyYWQyNmRkZGQ2NDE5Yjk3M2UwNTZmODc5NDUzMDIv
MC83RTJDOTM1Qjc1NEMwMEIxRTgwNDNCQkI3MTIxQ0MzQjVBQUQyNDhDLm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNi
Yy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcw
LWMwNGVkNjk5MGMxMy9mZDc4OWRlNi0zZjZkLTQ1NmUtODg3MC1jMDRlZDY5OTBj
MTMuY3JsMB8GA1UdIwQYMBaAFCH5PNpQEhauJUKtIt+I/9TOIGTgMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0xY2JjLTQ3YWIt
OTA0ZS00NTM2MWE1NDg3YzMvZmQ3ODlkZTYtM2Y2ZC00NTZlLTg4NzAtYzA0ZWQ2
OTkwYzEzLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBEA5sDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQBKB1HLaIXRSt/HeSq4sxegwG3qVsef4Pmkr78X2JyMC4ACSOSfN12yLn8x
8ah7M5LpeR/rnttoWqckZBbPhPTz+6zMeKXJblNIQ2kuL2dZuSoA37XDm3t7mEGV
Cpd8bjwxk9IZyvpZCML8XNoRuwDanfMgw1HT+ZWECMscGFct4xMsb5hzdinwsgoo
6TSjldRlHAA5z0ZPfsgnd6PYhN2t6W6fQslp26V17FY7sgdCYRVcEMFg4n9nwf9B
llZ6i3kBYaORBFs7Fk67quEybcFeB1FTYIq4IlNpVf5q9jeSRtgwKrtWHRENTBxj
pRUyobFAzfd/gHXQzxHB6775Cj6Y
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:01:41 2025 by rpki-client