Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
File:                     e056707d-838a-4b8b-bd8e-8a874ea0684d.cer (raw, json)
Hash identifier:          cPLbdDdvuaJeLB8DkA2hnj/ClziEXUMV5v+XRZg1zh8=
Subject key identifier:   21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority key identifier: FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2
Certificate issuer:       /CN=fde169ed-d0d2-4165-8308-df2597e343f8
Certificate serial:       010D0C9F4328584AEFB48FF8107245E5C61E9DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Aug 2025 02:22:46 +0000
Certificate not after:    Thu 25 Nov 2027 03:22:46 +0000
Subordinate resources:    AS: 30705
                          AS: 398804
                          AS: 400011
                          IP: 23.155.16.0 -- 23.155.18.255
                          IP: 23.247.232.0/22
                          IP: 216.52.108.0/22
                          IP: 2605:b9c0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:b4:8f:f8:10:72:45:e5:c6:1e:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde169ed-d0d2-4165-8308-df2597e343f8
        Validity
            Not Before: Aug 22 02:22:46 2025 GMT
            Not After : Nov 25 03:22:46 2027 GMT
        Subject: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:00:97:14:4e:c5:8e:11:58:f5:a7:4f:c0:
                    40:9c:01:82:5f:96:1d:91:1a:72:d1:09:dd:db:d8:
                    d5:a5:02:e2:e3:a3:66:b6:44:5e:41:b1:c2:38:e3:
                    5d:f1:53:a5:59:c5:4d:ed:f6:c3:b9:56:8a:c0:9e:
                    d4:3e:18:97:8e:61:47:b7:56:20:de:21:56:c8:c1:
                    00:e7:5d:c2:7a:79:36:8e:b4:69:f1:b7:bb:84:b1:
                    ba:17:6b:c6:30:42:4e:84:bc:00:13:f0:22:68:36:
                    38:54:8a:d8:0d:b7:b8:e1:1f:5c:4a:3c:d4:1d:5f:
                    6c:d8:e9:6d:c2:dc:89:6d:d3:25:02:9a:e6:43:e5:
                    d6:4e:61:82:14:18:ee:98:0b:73:6f:a1:69:38:19:
                    9a:b9:ec:07:a6:65:8e:9f:c1:ec:71:0a:d9:ec:5b:
                    fb:36:19:76:7f:47:f1:24:db:69:49:dc:f3:e7:45:
                    e4:85:0f:8f:87:4a:a6:67:81:de:91:e4:ac:b4:d4:
                    c4:41:e9:f9:b3:1b:72:db:b3:8c:0c:32:7d:5e:cf:
                    06:14:8a:4a:86:da:d6:d4:2d:d8:e0:fd:65:52:22:
                    d2:67:b1:de:b9:22:e3:9e:88:a6:c4:ab:49:cc:fc:
                    18:45:47:dd:b4:94:f6:7d:2d:45:eb:4d:e8:48:57:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl

            X509v3 Authority Key Identifier:
                keyid:FE:31:54:6E:75:19:EC:43:32:1F:9A:EF:2B:F4:E5:7A:07:23:8D:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.16.0-23.155.18.255
                  23.247.232.0/22
                  216.52.108.0/22
                IPv6:
                  2605:b9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30705
                  398804
                  400011

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:bc:eb:f1:bd:20:fe:b0:4f:4a:e9:be:77:f6:93:e8:f8:
         97:09:05:c1:88:ff:7d:03:46:1b:6e:18:56:7f:a6:94:a3:e4:
         ae:26:6d:95:4d:91:38:75:9a:c7:20:33:e1:75:a9:84:08:43:
         78:12:6e:70:29:5b:83:9e:66:65:7c:47:14:49:47:52:a6:04:
         37:0a:0f:ab:da:b5:6a:25:b2:3c:b6:90:dc:a1:87:42:3d:04:
         05:d3:64:43:a0:f9:b3:93:eb:77:26:10:ba:d4:df:bf:31:8b:
         ff:1f:02:75:9a:ac:2e:06:3b:f8:1c:aa:4d:e4:5f:9d:af:21:
         03:07:19:f9:bb:b7:cf:0f:90:93:12:c3:51:9e:6a:d7:c0:77:
         0a:a2:05:98:05:11:b9:db:1b:78:39:01:63:e2:d2:c8:66:c8:
         9e:7c:7d:cd:5d:ce:3b:02:7a:12:96:67:17:0b:c6:c7:2c:9b:
         ea:36:76:aa:65:fa:f6:d0:75:a9:a0:d5:cf:59:09:d2:fe:52:
         d1:2b:95:ee:e5:f0:16:bc:2e:6e:63:49:94:90:ec:af:ec:93:
         c3:9b:af:09:e3:cf:b6:94:a5:07:7d:01:1e:09:4a:94:d6:a8:
         f6:e0:b1:97:30:62:ab:7d:26:bd:66:de:9f:a2:30:46:f9:b1:
         3e:c3:6a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:52:26 2025 by rpki-client