Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
File:                     184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer (raw, json)
Hash identifier:          1lu+ZcBmrWdN2hhZEFirNZ7zK+xmrb7v+uXUYFzQ1dg=
Subject key identifier:   D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285845319A9FCA91842331F005D790
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 12:12:14 +0000
Certificate not after:    Mon 02 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 14496
                          AS: 18554
                          AS: 19442
                          AS: 26379
                          IP: 129.248.0.0/16
                          IP: 130.27.0.0/16
                          IP: 130.29.0.0 -- 130.30.255.255
                          IP: 130.168.0.0/16
                          IP: 134.40.0.0/16
                          IP: 141.188.0.0/16
                          IP: 146.223.0.0/16
                          IP: 148.5.0.0/16
                          IP: 192.6.3.0/24
                          IP: 192.6.7.0/24
                          IP: 192.6.143.0/24
                          IP: 192.25.30.0/23
                          IP: 192.25.74.0/24
                          IP: 192.25.81.0 -- 192.25.100.255
                          IP: 192.25.106.0/24
                          IP: 192.25.109.0/24
                          IP: 192.25.114.0/24
                          IP: 192.25.117.0/24
                          IP: 192.25.122.0 -- 192.25.126.255
                          IP: 192.25.133.0 -- 192.25.134.255
                          IP: 192.25.140.0 -- 192.25.142.255
                          IP: 192.25.144.0/23
                          IP: 192.25.148.0/23
                          IP: 192.25.152.0/24
                          IP: 192.25.155.0/24
                          IP: 192.25.169.0/24
                          IP: 192.25.191.0/24
                          IP: 192.25.199.0/24
                          IP: 192.25.218.0/24
                          IP: 192.25.230.0/24
                          IP: 192.25.240.0/24
                          IP: 198.183.200.0 -- 198.183.202.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:31:9a:9f:ca:91:84:23:31:f0:05:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 13 12:12:14 2024 GMT
            Not After : Jun  2 19:06:39 2025 GMT
        Subject: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:2b:c9:ad:c0:b1:4e:b0:06:ee:77:7a:be:
                    f6:33:f2:11:3c:07:18:ff:ec:68:b3:ad:4e:0b:38:
                    2d:29:51:9c:8d:a3:b5:1b:68:02:c4:34:98:15:a0:
                    24:27:fe:d5:50:bd:c1:a0:2f:12:b9:b8:1c:84:10:
                    5e:f3:6f:aa:73:71:70:46:b4:d6:a7:8b:35:74:cc:
                    bd:fa:b1:78:3a:e9:0e:53:41:9c:fb:cc:d7:63:33:
                    2b:89:05:62:d2:ba:35:2c:be:a4:1f:5e:89:41:b8:
                    0a:80:41:1c:a0:b4:23:3d:43:1e:44:e9:ae:82:f2:
                    a5:03:c7:b5:4f:11:d9:13:e7:61:f7:5e:d7:fc:bb:
                    6c:20:59:73:d2:57:4a:df:0e:a3:a4:70:53:fb:4b:
                    a7:d8:06:68:50:89:6f:d1:18:62:1b:9b:3e:1a:3a:
                    7f:cb:5c:01:14:8e:06:f3:0d:17:37:ce:33:f3:0b:
                    74:4d:18:68:e9:77:ff:ef:5a:c3:f8:c3:51:63:7e:
                    ec:24:6f:4e:0b:cb:f5:5c:09:ba:68:f1:89:8e:f6:
                    55:0e:b1:87:7f:5d:81:4b:c4:75:3b:64:c6:ed:6b:
                    9a:e4:77:e3:8c:ff:a3:d3:2f:77:7a:76:6d:04:93:
                    17:97:4f:9b:10:66:31:47:1e:32:51:0e:00:79:48:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.248.0.0/16
                  130.27.0.0/16
                  130.29.0.0-130.30.255.255
                  130.168.0.0/16
                  134.40.0.0/16
                  141.188.0.0/16
                  146.223.0.0/16
                  148.5.0.0/16
                  192.6.3.0/24
                  192.6.7.0/24
                  192.6.143.0/24
                  192.25.30.0/23
                  192.25.74.0/24
                  192.25.81.0-192.25.100.255
                  192.25.106.0/24
                  192.25.109.0/24
                  192.25.114.0/24
                  192.25.117.0/24
                  192.25.122.0-192.25.126.255
                  192.25.133.0-192.25.134.255
                  192.25.140.0-192.25.142.255
                  192.25.144.0/23
                  192.25.148.0/23
                  192.25.152.0/24
                  192.25.155.0/24
                  192.25.169.0/24
                  192.25.191.0/24
                  192.25.199.0/24
                  192.25.218.0/24
                  192.25.230.0/24
                  192.25.240.0/24
                  198.183.200.0-198.183.202.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14496
                  18554
                  19442
                  26379

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b0:ed:aa:fe:75:a5:5f:41:16:3c:10:24:19:d9:38:be:c6:
         24:1f:0d:87:92:65:f5:4c:8c:e0:03:7f:6d:ac:82:fc:48:3c:
         fb:a2:1e:ab:47:57:1d:7f:28:7d:62:2e:0b:71:ac:0c:ad:a1:
         07:12:09:9d:9d:d3:2e:42:60:02:b3:62:58:c2:44:60:b8:7d:
         14:eb:4e:a1:03:7a:53:99:bd:c1:78:82:e3:ed:a6:0a:db:1d:
         80:26:85:aa:a6:cc:a8:c1:60:97:62:e6:53:50:96:fc:3b:f7:
         c2:17:4e:40:b3:4b:14:0f:35:f6:7d:5e:f5:75:df:78:52:6c:
         d2:6d:a8:c9:73:33:0a:d6:07:b3:a1:0f:78:1a:3d:5d:82:ff:
         5f:8d:a1:fd:3f:60:13:e2:46:cd:cd:06:0a:67:21:3d:a8:f5:
         86:7d:c1:b2:64:7f:09:ca:36:ef:00:9b:db:f8:9d:a5:cc:54:
         19:a9:5a:1f:6e:18:21:fd:d8:7d:cc:b7:54:0f:74:eb:cc:6e:
         e4:1e:37:61:7c:5b:41:fb:0e:a3:a1:93:17:b4:67:b6:84:fe:
         de:80:49:3a:66:74:98:14:e3:e8:34:c1:9c:8f:26:a8:3b:eb:
         3c:9e:97:5b:3c:57:f2:65:77:7d:8c:ac:a9:b5:6e:2f:48:91:
         ad:86:72:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:49:43 2024 by rpki-client on console-ams.rpki-client.org