Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer
File:                     3f67eb88-a5d4-466c-9bba-adafc57cf4e6.cer (raw, json)
Hash identifier:          Z5Ew8fcgc4VduCken5Rv9kXH0o2rHakmwnRA3CprLIQ=
Subject key identifier:   BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858456AE616466ECB744C4738FF40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 00:45:21 +0000
Certificate not after:    Tue 07 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 399568
                          IP: 23.181.48.0/24
                          IP: 45.41.38.0/24
                          IP: 2602:fc6f::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:e6:16:46:6e:cb:74:4c:47:38:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  3 00:45:21 2024 GMT
            Not After : Jul  7 00:45:21 2026 GMT
        Subject: CN=3f67eb88-a5d4-466c-9bba-adafc57cf4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:56:69:64:89:7a:88:00:9e:ea:94:2d:42:
                    d1:c6:a9:cb:50:c2:14:3b:9f:2c:24:e1:54:96:e5:
                    46:be:b7:40:9c:b3:88:9a:9a:2f:30:37:61:b9:23:
                    af:c8:46:37:53:f2:6c:bb:2e:8d:8f:ad:75:e9:e2:
                    8c:55:7a:3d:d7:fe:70:54:3d:e5:ad:e3:96:d0:7f:
                    b3:93:6b:cf:34:95:7f:b6:e3:1a:7d:5b:41:a8:56:
                    26:e8:9c:36:28:ec:67:4a:86:96:99:2f:c7:41:04:
                    99:ec:60:fd:46:40:3f:43:ed:02:d6:f3:4b:47:63:
                    14:2a:b5:b6:68:a2:47:f5:62:ef:a0:b7:16:03:a9:
                    a7:ef:04:d0:06:5c:b5:8e:5a:a5:7c:26:2e:db:98:
                    62:1f:14:44:cc:3a:86:08:fa:ff:67:ad:f8:1d:4f:
                    43:1a:9a:f3:3d:f1:58:75:ec:25:58:d8:bb:6f:0c:
                    3f:2b:7a:f4:ee:2c:bb:fd:17:e6:68:bf:61:10:79:
                    95:7e:40:d4:34:38:b4:79:f9:4d:c5:23:dc:e9:ed:
                    43:cc:23:ea:cc:ca:23:38:4a:d0:3d:dd:06:2b:1d:
                    3b:d4:91:8e:c1:f3:a9:77:1a:a7:d2:73:5b:5e:c6:
                    95:4f:c5:5c:5e:8d:2d:fd:3d:2d:f0:9e:10:c8:ad:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0D:FE:A8:F2:BC:A0:1C:A2:35:E2:8A:C8:A6:57:4A:C2:C5:36:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f67eb88-a5d4-466c-9bba-adafc57cf4e6/3f67eb88-a5d4-466c-9bba-adafc57cf4e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.48.0/24
                  45.41.38.0/24
                IPv6:
                  2602:fc6f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399568

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:93:e7:61:cb:32:e4:f6:84:85:ae:aa:11:02:aa:62:a8:d2:
         94:82:8a:83:50:17:80:97:46:bd:c5:c3:1f:e3:db:72:13:2f:
         92:e3:f3:6c:82:cf:52:d1:88:c6:c2:e5:19:33:6d:39:d3:a6:
         3b:d6:6d:87:0b:78:41:44:1d:15:a5:40:ce:b3:cd:b8:71:0b:
         5e:4f:da:a9:f6:45:e1:08:d1:24:5c:1e:b4:0f:36:bd:cf:d7:
         6e:69:26:29:fc:9f:2f:22:ca:01:48:09:fe:96:bd:e8:60:71:
         a1:5a:1c:85:bb:08:3f:7e:e8:73:c3:4f:c6:bd:d2:1c:11:74:
         0c:5f:fc:66:27:20:7d:46:a5:cf:d5:08:df:36:e3:cc:8f:5c:
         84:b5:97:bd:bb:a0:6a:e9:2f:9f:7e:83:47:9f:96:e3:1e:02:
         21:0c:60:d1:20:94:be:22:04:3b:f7:6a:5f:19:b9:72:11:48:
         66:e7:99:6e:8c:92:8a:76:22:7c:90:9f:52:89:c1:83:15:2e:
         d7:86:af:0b:f2:a5:8e:15:c4:56:fe:e6:a7:1d:2e:8e:26:a3:
         3a:07:e1:23:b3:e6:97:08:11:39:f4:b9:70:83:39:70:7f:78:
         e2:9a:7c:cf:c8:7f:a6:59:9c:ac:13:ff:e5:f1:ec:18:a1:2d:
         1c:51:96:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:32:07 2024 by rpki-client on console-fra.rpki-client.org