Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
File:                     b84ab52d-915e-4d8a-b37b-496ea49c6798.cer (raw, json)
Hash identifier:          rJVgJjiOSN1IDHmJzhLL8Zsg8W3rNas5HOdmUK755vI=
Subject key identifier:   DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844D9D84AB7562009496CBE2800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Feb 2024 01:45:21 +0000
Certificate not after:    Sat 16 May 2026 00:45:21 +0000
Subordinate resources:    AS: 1403
                          IP: 64.58.32.0/20
                          IP: 67.221.48.0/20
                          IP: 74.116.184.0/21
                          IP: 96.127.192.0/18
                          IP: 104.163.128.0/17
                          IP: 107.159.0.0/16
                          IP: 107.161.56.0/21
                          IP: 107.167.248.0/21
                          IP: 146.71.8.0/21
                          IP: 172.93.16.0/20
                          IP: 173.246.0.0/19
                          IP: 185.146.32.0/22
                          IP: 192.222.128.0/17
                          IP: 198.16.128.0/17
                          IP: 198.58.128.0/17
                          IP: 199.58.248.0/22
                          IP: 216.25.240.0/20
                          IP: 2600:d400::/28
                          IP: 2606:6d00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:d8:4a:b7:56:20:09:49:6c:be:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 11 01:45:21 2024 GMT
            Not After : May 16 00:45:21 2026 GMT
        Subject: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:b0:53:8f:0d:47:7a:ff:96:fa:06:b4:ab:
                    00:64:40:31:e3:40:39:f1:e4:03:92:42:c0:49:5b:
                    85:1d:72:5a:9d:2f:15:cd:e1:2f:af:f5:7f:34:2e:
                    e3:9c:ee:48:46:18:83:82:fd:49:4c:84:3e:bf:09:
                    ba:65:4e:35:6b:5c:0f:4d:07:db:11:36:9d:7f:fe:
                    d7:ab:4c:ab:29:4f:47:5f:6b:41:81:b5:3a:a2:95:
                    95:47:6c:ff:0e:99:6a:46:e0:66:8d:c4:59:94:58:
                    d0:e2:06:ac:ab:b3:c9:8a:25:43:e8:97:c5:15:21:
                    f9:6d:95:42:81:ba:d6:18:e9:0b:75:4b:d7:9f:d4:
                    e3:fe:ff:57:b7:05:03:16:09:1a:d3:2e:13:d7:40:
                    7c:a8:71:18:f6:94:10:18:60:6f:10:c3:11:cc:95:
                    d7:71:e3:0e:28:a1:f2:1e:8f:0e:b0:2a:ca:6d:cd:
                    af:ce:27:87:83:22:42:a7:9c:22:01:fe:c1:38:a0:
                    5a:1a:5e:b6:60:8a:e6:c5:34:8c:c7:10:56:70:6d:
                    ff:d4:8c:b3:60:ee:42:06:65:8c:63:a6:48:90:da:
                    4c:f4:3e:3b:7c:b2:ab:41:51:d7:e6:db:df:05:db:
                    2f:5a:4d:17:75:8b:f8:20:6a:9b:bd:b4:15:f6:6f:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.58.32.0/20
                  67.221.48.0/20
                  74.116.184.0/21
                  96.127.192.0/18
                  104.163.128.0/17
                  107.159.0.0/16
                  107.161.56.0/21
                  107.167.248.0/21
                  146.71.8.0/21
                  172.93.16.0/20
                  173.246.0.0/19
                  185.146.32.0/22
                  192.222.128.0/17
                  198.16.128.0/17
                  198.58.128.0/17
                  199.58.248.0/22
                  216.25.240.0/20
                IPv6:
                  2600:d400::/28
                  2606:6d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1403

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4c:6b:e6:4d:44:24:23:59:b1:97:67:02:2c:aa:f5:2f:cd:
         0c:f3:1a:5e:c0:a0:59:c8:87:35:4e:38:fe:10:c9:2f:9b:64:
         1f:c5:33:5c:a3:d0:66:27:cf:a1:cc:07:ac:43:99:4c:68:06:
         c5:34:eb:fa:68:bb:22:1a:fa:6d:f5:68:10:09:ad:d5:7c:d5:
         ab:cb:98:35:c4:4e:77:41:22:49:00:66:80:4b:3e:92:ab:ac:
         3b:3d:50:d5:32:ec:91:b3:9a:cc:a0:b7:fa:6e:5e:d5:13:6b:
         cc:75:a6:44:45:b0:6d:f4:e6:cb:03:5e:7b:e7:ba:65:bf:ce:
         96:a5:dc:42:10:b9:72:d8:be:4d:7b:0f:6c:6c:e5:5a:0d:1a:
         10:55:c0:55:57:32:ef:84:06:86:15:b0:cb:ae:3a:3c:5f:c9:
         79:d6:a0:9e:8e:4b:20:78:e4:6c:e5:51:6b:72:45:40:2f:49:
         ee:f9:4a:17:ca:72:1a:19:cb:d0:89:d2:17:b1:f3:c3:b2:e1:
         cc:ab:78:3e:00:3c:d1:9f:d3:e6:8d:f0:54:f0:e1:8c:00:12:
         cc:25:1b:27:81:cf:3c:9f:69:54:73:0f:31:dc:4f:76:e4:50:
         35:e7:e7:a3:b8:c6:ef:39:70:a1:9b:af:58:4c:e2:4b:f3:f9:
         e7:f7:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:23:26 2024 by rpki-client on console-ams.rpki-client.org