Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
File:                     589a433f-d0bb-4ea9-85da-52c4d90317c6.cer (raw, json)
Hash identifier:          efauuP8qApz7++rGgfgb0sHQ1uR3g9D+VCJb0SGaQio=
Subject key identifier:   79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584B8786BDFD4C33A59AD3D3D000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Oct 2025 11:33:19 +0000
Certificate not after:    Thu 14 Oct 2027 21:15:40 +0000
Subordinate resources:    AS: 401454
                          IP: 23.147.116.0/24
                          IP: 2602:f647::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:86:bd:fd:4c:33:a5:9a:d3:d3:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Oct 15 11:33:19 2025 GMT
            Not After : Oct 14 21:15:40 2027 GMT
        Subject: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:e8:68:ad:ca:2a:25:f9:a1:99:31:ac:c6:
                    4d:e2:82:90:7e:53:b5:c7:2d:1a:a3:a6:d1:a6:33:
                    94:b8:d0:7b:bb:df:1c:9d:67:39:b6:98:04:f5:da:
                    ea:61:f3:33:f5:81:c6:ca:90:0c:7f:a2:57:82:d5:
                    aa:19:4c:1b:9b:50:a8:d2:44:7b:88:ec:df:5a:7d:
                    d8:67:6e:ef:73:b0:cb:11:f8:68:d4:cb:ad:9e:cb:
                    6b:bd:bf:7b:83:84:0e:b5:b5:20:44:70:64:65:01:
                    38:cb:5c:c2:88:56:92:6d:87:17:ab:ee:25:6b:cc:
                    cb:a7:4b:69:90:74:8d:c5:3d:c0:ba:bf:98:80:29:
                    8e:a7:b2:1f:71:5e:95:8a:62:e6:50:e5:b5:12:a4:
                    3a:9d:e1:a4:6e:3f:20:55:cc:33:fe:07:9f:b9:fd:
                    8c:78:36:b9:ac:5f:be:ca:af:40:8d:4b:49:e2:ec:
                    fe:26:b2:3e:f9:5b:df:cf:91:ae:81:92:c1:eb:e3:
                    77:f0:23:81:20:6f:5e:42:a7:44:59:35:c6:23:d5:
                    b1:f2:5d:fa:33:01:f2:71:96:eb:2e:81:d6:2e:38:
                    61:44:d0:f9:9c:6e:1a:a0:d0:57:2d:53:30:62:9c:
                    ed:78:21:e8:8d:3c:46:8f:2f:b9:f4:ff:58:43:0e:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.116.0/24
                IPv6:
                  2602:f647::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401454

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:32:83:bb:61:f2:a8:dc:2f:b5:a7:0a:58:13:46:9a:f9:80:
         9f:1c:d0:b7:2a:9d:33:bd:f2:0b:33:0b:e6:28:56:15:32:86:
         42:e4:b7:1b:9b:06:42:2a:b0:4e:ca:6e:d7:80:64:31:88:43:
         d7:6c:48:a3:a8:bf:04:bc:00:73:9e:66:a7:d1:7b:e5:b4:89:
         ac:e0:82:14:bf:dc:91:33:f4:09:06:1e:9f:00:8b:55:c8:72:
         6e:5a:ec:b8:ef:94:cd:6b:ce:fb:50:48:18:7e:02:6b:c9:f6:
         ea:76:01:8d:7b:cc:00:2a:69:e8:f6:d9:de:f0:51:ad:6b:22:
         ae:e8:97:a1:bb:66:8c:72:47:ca:be:d7:4e:b8:78:e9:aa:a5:
         3c:85:92:4b:40:55:d0:64:eb:e5:ec:39:f1:2e:c3:83:0b:6b:
         25:ac:44:4d:79:40:cb:48:10:e8:73:00:8e:e2:d0:03:15:b8:
         af:20:6f:05:1f:16:51:13:01:59:e5:f9:b5:c2:f9:74:2c:f4:
         ec:d8:fa:4b:58:3b:cb:72:53:52:01:c1:30:e0:31:f2:e2:31:
         d6:69:e1:22:e3:d1:14:72:24:de:73:ad:1a:9e:91:f5:cf:ac:
         ab:09:07:32:0c:11:8b:67:01:c8:63:8c:46:db:10:07:e1:65:
         79:8b:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:02 2025 by rpki-client