Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
File:                     906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer (raw, json)
Hash identifier:          8VakGKwAdtPreQPzBszw4c+nHiBWAMKRgRDXTwTKPnU=
Subject key identifier:   B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858420F0B5B160CFE4C32966A5E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 00:45:16 +0000
Certificate not after:    Tue 02 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 21740
                          AS: 32133
                          AS: 394308
                          AS: 394497
                          AS: 394644
                          IP: 98.124.192.0/18
                          IP: 169.197.0.0/18
                          IP: 2606:8e80::/32
                          IP: 2620:10f:5000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:0b:5b:16:0c:fe:4c:32:96:6a:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 31 00:45:16 2023 GMT
            Not After : Sep  2 00:45:16 2025 GMT
        Subject: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:0d:f6:b6:2c:36:b2:f8:f2:eb:2a:de:f4:
                    f1:bd:97:83:0c:86:7a:74:d0:16:73:c0:29:55:3f:
                    24:2e:cb:60:69:b2:46:09:e8:c7:18:f7:e7:b6:68:
                    d2:e6:ad:60:a5:3a:78:f4:7a:72:57:c5:6f:6b:84:
                    85:18:6c:9a:ac:71:2e:68:6c:7a:bd:4e:3f:b6:12:
                    78:69:9e:05:61:52:7d:93:60:de:77:49:57:2c:d9:
                    ab:95:d6:fd:c1:ba:39:e9:20:78:cb:15:c8:fc:d0:
                    7a:b3:ad:ec:d5:ac:e8:a0:84:a5:70:0a:7e:3a:76:
                    28:18:72:f6:1a:72:ad:10:d0:12:f1:6e:03:a9:1b:
                    b7:96:5d:bb:65:3c:fb:dc:6b:96:17:54:26:2f:5d:
                    f6:e0:97:94:ef:71:c5:31:57:04:5a:d7:c2:69:24:
                    12:f0:5f:7b:1b:ca:92:6c:45:62:52:43:11:a0:c0:
                    a5:92:31:91:a8:35:45:f6:4b:58:84:6e:7b:69:c4:
                    5f:77:93:0d:40:93:c3:49:86:a3:60:88:2f:8c:d4:
                    fb:3c:cf:54:81:44:e1:87:fb:40:21:a8:c3:77:af:
                    66:e1:c1:b4:5b:53:55:f7:db:59:8a:1b:8d:ca:c3:
                    29:f5:9d:7d:e9:20:6d:67:d6:80:18:ce:dd:ee:1d:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.192.0/18
                  169.197.0.0/18
                IPv6:
                  2606:8e80::/32
                  2620:10f:5000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21740
                  32133
                  394308
                  394497
                  394644

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:4f:fc:e5:95:33:a8:0c:93:18:2b:62:62:19:0a:bb:df:
         00:0f:36:d6:7d:e2:bc:32:28:0a:b5:8b:19:92:2e:91:b9:4e:
         e6:f6:2c:fd:ea:af:2a:3e:ab:0a:11:62:6b:8d:46:ed:81:8e:
         ba:c4:a5:8b:07:39:59:d3:a3:63:e1:10:4b:43:18:c3:60:af:
         13:19:1d:c4:6e:ca:2d:24:72:b3:bb:ba:71:5d:b8:3a:0e:6b:
         7f:65:81:32:c7:84:b9:74:45:8c:e5:35:19:f5:d9:e2:8c:20:
         35:6f:d3:6d:e2:a7:78:2e:a2:1a:ae:0d:1e:ab:33:40:f8:53:
         3c:dd:22:98:62:4a:67:85:65:f1:cd:5c:be:50:f8:4a:1b:35:
         39:1e:a7:92:30:17:2a:70:40:bf:08:6d:4c:ee:cd:8f:9c:2f:
         30:21:4d:76:9c:7e:b0:3b:f1:52:d0:5a:08:55:6c:13:21:d3:
         2a:39:ff:32:ee:6f:d4:06:81:48:d8:62:b3:51:b7:c4:9b:49:
         0b:2a:37:83:9d:f0:4a:f7:23:fc:c6:3c:06:42:27:aa:79:54:
         b0:3e:e3:76:2a:7a:79:d4:62:ea:47:fd:f3:c5:0a:fd:7a:fc:
         4a:ff:3d:fd:77:a4:1b:3a:3a:69:30:db:16:df:33:5d:12:30:
         6c:ff:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:09 2024 by rpki-client on console-fra.rpki-client.org