Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70.cer
File:                     8d6ffccc-661c-4332-9017-cddf03d9fc70.cer (raw, json)
Hash identifier:          pqcGTVdWmZH3dbPUkqWaR4FXqbGmeNpcIU6O7VCTEpg=
Subject key identifier:   94:D5:30:D0:B9:3D:4D:3B:84:48:92:B9:D6:55:EF:8D:9D:FD:3B:BA
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584AEDEC6F18BB540C95A80D5800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/8d6ffccc-661c-4332-9017-cddf03d9fc70.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Aug 2025 11:03:44 +0000
Certificate not after:    Wed 24 Nov 2027 12:03:44 +0000
Subordinate resources:    AS: 400007
                          IP: 162.249.56.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:ec:6f:18:bb:54:0c:95:a8:0d:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Aug 21 11:03:44 2025 GMT
            Not After : Nov 24 12:03:44 2027 GMT
        Subject: CN=8d6ffccc-661c-4332-9017-cddf03d9fc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:9e:76:39:bc:5e:58:b5:7d:c5:a2:e7:0a:
                    71:3d:a2:d3:6c:61:d9:df:3f:d1:73:2b:d7:66:ba:
                    c4:55:99:f4:a9:2f:a7:cc:0c:16:30:73:3a:1b:17:
                    99:0b:06:95:a6:92:6a:ca:23:fb:39:8e:c5:68:cd:
                    0a:5e:0f:49:36:6d:b2:65:7e:e9:19:29:65:a0:3a:
                    1c:27:e2:93:df:d5:be:e9:1a:88:55:06:78:0e:4f:
                    57:ce:1d:6d:d2:78:85:cf:b9:eb:aa:99:ea:7a:fe:
                    92:e4:47:cc:9a:d4:b6:ee:9e:ac:ba:c4:56:e9:58:
                    07:b8:a3:60:3b:ba:cf:32:61:c7:be:b4:9c:7b:42:
                    45:bd:a8:65:8d:67:ef:f9:dc:1e:80:8b:33:53:fe:
                    d8:21:82:08:38:db:bb:94:ed:7b:78:c2:a2:f4:ed:
                    9c:92:a8:d8:19:27:4a:5d:83:3a:de:76:26:a1:77:
                    bb:08:4a:de:5a:95:5e:b0:1a:c3:57:6e:10:1a:7c:
                    39:c0:53:ce:5f:6e:62:03:1a:a1:16:30:0d:25:8f:
                    68:9c:f3:6c:fb:11:4a:92:32:d8:cd:58:e7:b0:94:
                    cf:62:4b:77:c0:3f:18:1a:3e:df:a9:df:56:27:ec:
                    31:75:3f:97:1b:ea:2c:12:3e:7c:62:e5:41:f0:81:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:30:D0:B9:3D:4D:3B:84:48:92:B9:D6:55:EF:8D:9D:FD:3B:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d6ffccc-661c-4332-9017-cddf03d9fc70/8d6ffccc-661c-4332-9017-cddf03d9fc70.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.56.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400007

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:b5:c4:66:5b:8a:c2:6d:17:8b:82:c5:ab:84:86:18:77:
         22:72:c7:93:06:2e:be:6e:71:69:62:d8:0f:26:12:f4:94:91:
         92:ad:0e:f1:ea:ff:b8:e1:d3:65:e2:2e:da:24:f2:3c:35:d9:
         ca:1c:29:c8:70:c4:91:bb:54:83:a7:9e:0f:4a:ec:60:69:87:
         10:fd:32:a8:70:a8:47:51:bb:7e:ec:ac:dc:d3:74:78:5e:98:
         62:6b:a5:6a:23:23:38:4f:cc:bd:60:e8:8b:40:36:2b:5f:06:
         f1:e2:19:36:a1:18:ae:29:c1:c9:d2:e6:6b:72:5e:d9:43:56:
         a3:4e:4d:91:bb:4a:60:7e:2b:b3:f6:61:cb:3e:48:01:78:d2:
         4b:ff:18:4d:b8:c1:6c:d6:bb:1f:b5:e6:b7:e6:cc:ff:71:37:
         69:f2:fe:fb:0b:88:a1:f8:ff:b8:36:b2:e0:10:9f:c4:59:3a:
         c6:6f:ec:7c:3a:63:cc:6c:06:59:a7:4d:b2:b2:f3:b7:87:e9:
         fe:b2:94:a1:5f:f6:ef:f4:d9:09:10:4f:72:3d:06:67:cf:3d:
         f4:0d:03:80:6e:65:76:55:7d:1d:39:80:32:49:80:50:dc:3b:
         d1:0b:46:d7:3d:e3:ff:66:d9:11:cd:78:88:9f:74:01:3b:64:
         f4:8a:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:19 2025 by rpki-client