Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
File:                     e7a6341b-5a5e-4ac0-a760-5a54190af913.cer (raw, json)
Hash identifier:          dH7fvVUduQfxThfpcyz2jlBoLoQuOVm5zev58pWEQfQ=
Subject key identifier:   31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584B354F58E37DB2E21679F558E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Sep 2025 00:45:25 +0000
Certificate not after:    Mon 20 Dec 2027 01:45:25 +0000
Subordinate resources:    IP: 64.112.124.0/22
                          IP: 206.168.212.0/22
                          IP: 207.2.120.0/22
                          IP: 2602:fbdf::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:4f:58:e3:7d:b2:e2:16:79:f5:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 16 00:45:25 2025 GMT
            Not After : Dec 20 01:45:25 2027 GMT
        Subject: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:da:8f:00:7f:9f:55:ca:2b:a3:8a:a1:6c:
                    27:80:dc:4a:84:1d:ba:4f:24:28:e8:ce:40:9f:87:
                    d6:9f:29:a5:4c:33:4c:c8:57:46:8b:48:d5:6a:b5:
                    cd:31:40:ce:21:bf:18:f9:aa:88:11:60:9a:8f:a8:
                    1d:65:c3:31:32:02:6a:c6:fd:ad:01:87:55:92:99:
                    af:41:b9:ea:ba:f3:12:ce:3d:a6:f1:c0:23:33:a8:
                    ea:99:fa:be:71:56:83:96:1e:05:1e:95:61:80:3b:
                    e3:91:37:89:b3:76:a6:a1:cc:81:2d:01:e4:6c:4d:
                    07:f9:ad:be:9b:f0:b7:e3:9f:22:85:f5:c7:0f:83:
                    f9:ac:df:b0:e6:0f:97:f6:95:d6:7a:20:0a:4f:24:
                    6c:3b:54:74:05:6e:d7:1c:71:8a:c1:cc:ee:46:1e:
                    6b:b1:19:2f:99:3e:27:53:4f:aa:fb:98:32:88:96:
                    58:ce:3c:5e:e3:b1:4b:09:5c:64:e8:48:06:5c:1c:
                    cd:aa:1e:1e:e3:c9:e0:ce:d0:24:bc:f2:4a:34:ea:
                    1d:85:64:96:4c:a4:ec:2f:b8:26:23:5b:9e:50:f2:
                    85:9e:c9:c3:10:25:32:e2:7a:b1:d6:94:d8:6a:22:
                    87:4c:dc:6b:d5:9a:59:95:27:af:29:a0:f3:4c:85:
                    26:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.124.0/22
                  206.168.212.0/22
                  207.2.120.0/22
                IPv6:
                  2602:fbdf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:01:e0:88:36:8b:22:28:6d:7a:03:40:90:7e:38:e7:e4:99:
         66:35:ce:45:6d:c8:71:bc:c2:d6:b4:72:6c:79:3d:4f:e5:8f:
         01:69:e9:11:f2:3a:7e:84:55:b4:07:90:2c:56:c1:52:9f:9d:
         12:72:79:d9:ef:dc:85:49:a7:d5:5d:c5:ed:4c:32:20:73:94:
         09:5e:2b:13:ac:ea:15:31:73:ef:2e:5f:ee:31:6e:27:f6:af:
         31:c5:51:4a:53:03:6a:39:b1:ac:06:30:11:0f:f9:25:70:14:
         25:ee:e7:08:2d:63:f1:c0:49:f1:6d:51:12:7c:24:49:dc:c8:
         00:59:85:3e:35:99:2b:f1:4c:46:b7:c7:b7:2c:3e:e7:a8:e7:
         5e:d3:22:e0:2d:b3:e2:9c:ec:45:51:19:de:12:9a:f8:48:77:
         ec:1c:8a:3a:43:f9:d8:82:8f:b7:2a:0b:ed:cc:ea:55:2d:76:
         09:4f:6a:c6:a5:d1:45:a8:dd:e8:f8:19:12:dc:c4:06:bd:fc:
         fd:91:54:e7:c6:0d:22:5a:98:bc:49:c3:df:b2:93:dd:33:89:
         d1:ed:2a:9f:55:f9:87:1e:a7:4e:1f:b5:c4:ca:d5:7a:37:ee:
         fd:f2:fd:42:c1:96:f5:d7:ca:cc:af:66:8f:dd:42:ae:35:e0:
         3d:99:77:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:20:04 2025 by rpki-client