Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
File:                     a4a5ba5d-c707-479a-82b6-0d1735321896.cer (raw, json)
Hash identifier:          t5dZTDYawufB+Z/crTVd8T+eqg1UBZm159YpQXc4Xpg=
Subject key identifier:   F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858437CC304E1ED536EB8A91BDA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Oct 2023 00:45:22 +0000
Certificate not after:    Sun 11 Jan 2026 01:45:22 +0000
Subordinate resources:    AS: 396904
                          IP: 23.226.120.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7c:c3:04:e1:ed:53:6e:b8:a9:1b:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct  9 00:45:22 2023 GMT
            Not After : Jan 11 01:45:22 2026 GMT
        Subject: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:6c:45:60:90:13:7c:13:28:7f:54:7e:e7:
                    fe:b1:b4:6c:6f:55:4e:2c:74:73:ec:b8:fe:a1:5f:
                    55:13:97:e2:cb:63:70:67:4a:85:5e:f5:2e:dd:f8:
                    b1:21:72:f0:b0:2d:cc:58:5d:70:c7:f6:2f:30:84:
                    47:70:0a:0b:1a:27:3f:52:64:49:9e:20:2b:f2:69:
                    0e:fa:ec:55:0e:64:5f:db:5f:f1:e6:49:6c:e4:31:
                    7d:23:ea:a7:67:4a:4f:92:4e:46:9c:67:30:71:06:
                    e7:67:a8:1f:fe:cd:86:7a:f3:34:3e:51:61:7e:98:
                    1a:95:fa:65:78:8a:82:ab:8e:2c:99:18:d3:04:0c:
                    bd:ac:4a:c9:b0:15:d8:e9:5b:35:1e:e7:64:99:a1:
                    6a:f5:21:03:0e:61:dd:a0:b6:e8:0c:e9:ca:16:0b:
                    ce:19:35:ca:8a:73:c1:50:6e:24:cf:58:b9:7d:fb:
                    a1:11:c5:06:51:57:75:86:22:94:c5:47:f8:fd:ab:
                    ad:75:b2:c9:b9:85:9e:5e:a6:16:16:c5:ee:f6:1b:
                    52:23:f2:21:f3:48:aa:9f:fd:a9:d3:08:b9:aa:31:
                    ed:06:bf:ee:10:36:3d:71:0b:41:74:af:01:fb:fe:
                    dd:37:e6:13:2c:91:32:52:7a:4a:4d:4d:09:9c:88:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.120.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396904

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ba:48:7b:11:53:c3:d1:c0:5f:b4:a1:fb:c6:69:c9:2a:69:
         78:3f:e9:4c:04:61:3e:67:ca:4b:a9:c2:fe:70:65:98:42:49:
         db:1f:b5:7e:0e:5a:65:1e:54:44:6c:cf:8a:35:b8:b7:5d:c2:
         bc:db:6b:6c:ed:2b:af:78:d0:d9:a8:0d:27:92:78:fb:6c:9a:
         c1:da:9a:25:0d:f4:ac:1b:3f:93:79:68:88:1a:c9:ea:63:4d:
         99:31:10:44:5d:a7:af:74:ad:70:46:b5:25:c8:7e:6b:93:0d:
         49:a1:88:3a:09:c5:91:a2:db:12:26:c3:c3:70:aa:2a:ab:fe:
         be:97:0e:4d:e3:d1:64:d5:57:12:8d:f1:af:90:49:b7:c7:5a:
         e8:ef:98:09:2d:55:c3:9c:bd:b3:99:14:45:38:8c:29:a4:d9:
         5c:f5:8b:a3:ff:7c:b8:ec:81:8a:45:20:09:e3:90:9a:8b:1f:
         28:f6:be:e3:58:97:8a:fb:e0:7f:97:7f:fb:0b:f1:cf:d6:b8:
         c9:9b:63:30:ab:4f:ed:7c:c7:3e:98:33:8f:aa:31:59:0e:f6:
         c1:fa:b1:e5:2b:5d:0a:07:36:2b:13:d3:31:4f:6f:9d:fa:7f:
         c7:16:c5:eb:c7:bf:b0:d7:03:e9:64:6e:37:dc:83:5f:77:49:
         a8:95:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:23:22 2024 by rpki-client on console-ams.rpki-client.org