Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
File:                     2a246947-2d62-4a6c-ba05-87187f0099b2.cer (raw, json)
Hash identifier:          51Sldraltpk/bO3h/To0p9Zfa/SdKhGUTJKTPKlyHK0=
Subject key identifier:   C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F43285841E48308909F904485C2750D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:38 +0000
Certificate not after:    Sat 05 Apr 2025 19:06:38 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:08:90:9f:90:44:85:c2:75:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: May 15 19:06:38 2023 GMT
            Not After : Apr  5 19:06:38 2025 GMT
        Subject: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:7f:a5:51:05:31:2e:55:8c:4d:ce:23:c6:
                    c8:e5:ab:b5:1d:74:70:c9:09:fd:0b:c0:2b:43:dc:
                    1b:d5:00:65:5a:59:a2:3e:bb:2d:0c:6f:16:a3:e2:
                    b1:c2:db:23:d4:7c:25:9b:f5:f6:b5:20:fa:18:17:
                    07:40:5a:f2:0e:be:dd:e5:fc:b3:ef:46:77:74:69:
                    63:09:1e:63:bd:5b:51:58:e3:5e:c4:4d:b4:d7:3e:
                    fd:39:0c:36:81:e0:94:6c:cf:4d:7d:6b:33:e0:7a:
                    ff:57:a5:a4:fa:f4:54:b4:94:37:2d:0f:27:93:20:
                    93:2c:bc:b2:c9:41:4c:8a:12:02:a9:b8:17:49:97:
                    2c:7d:4f:1c:9d:18:32:94:f4:d7:d0:73:01:0c:96:
                    c7:72:69:f5:ca:dc:07:cc:2b:67:c2:ba:21:87:4c:
                    fb:1c:3d:70:4a:70:47:b2:a4:96:ee:43:f2:ef:ce:
                    50:90:c6:dc:85:ba:6b:92:8d:3f:d4:ff:35:9c:47:
                    3f:6b:c9:34:e9:d2:bd:c0:e5:75:64:d8:0f:bb:2c:
                    9f:92:3c:43:5f:99:16:6b:d2:aa:5d:0b:a5:c5:17:
                    05:e7:6c:40:16:aa:75:8a:cb:2d:3a:59:68:ce:90:
                    d3:2a:6e:5c:ce:37:53:c3:59:04:f0:50:23:d2:1b:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:c5:61:8f:6e:96:be:45:20:ed:8f:87:bc:f3:90:7e:3c:
         54:09:17:1e:92:0f:6f:89:93:8d:55:72:8a:94:2b:83:b6:d5:
         c5:e1:0f:d8:3e:7a:86:65:a1:81:60:7d:c0:c6:5f:8b:9a:03:
         d9:41:15:e1:1e:4a:46:f5:83:b1:d3:04:3b:a8:2e:9d:c0:5d:
         55:ad:23:06:5e:04:32:df:10:cb:d7:7c:ea:12:5d:0e:2a:95:
         37:eb:b4:4d:b2:72:4d:85:aa:74:62:69:8a:ea:aa:56:14:85:
         ad:53:79:b4:5a:cd:07:06:03:b1:03:60:81:18:49:61:5b:08:
         d2:38:f3:d8:5d:26:bb:8a:28:65:a7:6f:26:cc:bd:60:8c:ae:
         48:c9:dc:27:d4:83:cc:d7:25:0b:f0:cd:a5:7c:7f:c1:0b:20:
         a6:88:33:eb:bc:bb:85:fb:f3:29:c4:b6:e8:78:61:bd:a2:b6:
         40:27:98:d9:77:a6:b1:b8:05:79:fe:2f:49:6f:4c:4f:a1:ec:
         37:e3:c5:f3:94:50:50:da:88:16:05:dc:a8:9a:42:f7:05:da:
         d3:70:ac:8c:bd:02:b1:e7:36:d3:0e:5e:01:25:d0:dc:c0:cf:
         b6:bc:76:5d:c2:67:36:4e:1b:b9:32:a2:08:52:aa:85:9b:01:
         21:46:28:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:08:53 2024 by rpki-client on console-ams.rpki-client.org