Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c5253a9-c7f5-43da-bc47-1cc29d685857.cer
File:                     4c5253a9-c7f5-43da-bc47-1cc29d685857.cer (raw, json)
Hash identifier:          V3Rp73nnweaNAVC+u1iD8AfoP52/f7VodrvX1yS7Knk=
Subject key identifier:   84:5B:C1:4D:61:67:C3:08:74:29:78:24:18:FC:F0:59:66:EF:A4:47
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584413A1AF077570E8EABE5C4200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c5253a9-c7f5-43da-bc47-1cc29d685857/4c5253a9-c7f5-43da-bc47-1cc29d685857.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c5253a9-c7f5-43da-bc47-1cc29d685857/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Dec 2023 01:45:16 +0000
Certificate not after:    Fri 06 Mar 2026 01:45:16 +0000
Subordinate resources:    AS: 398936
                          IP: 199.114.13.0/24
                          IP: 2620:8f:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:13:a1:af:07:75:70:e8:ea:be:5c:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec  2 01:45:16 2023 GMT
            Not After : Mar  6 01:45:16 2026 GMT
        Subject: CN=4c5253a9-c7f5-43da-bc47-1cc29d685857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:93:5e:4a:55:1f:4c:62:92:3f:a6:37:e1:
                    86:d8:4b:75:ef:44:f3:11:19:bd:0e:75:17:12:88:
                    d2:de:9c:73:29:fb:38:ee:1a:b0:c1:c0:ba:70:66:
                    9d:ef:e5:2c:08:f2:7f:c7:c4:24:41:4c:c7:18:d7:
                    a6:15:4d:86:6a:9c:19:d0:a8:11:b1:e6:08:04:40:
                    82:e9:8c:87:ed:89:b1:2d:67:30:3f:25:30:93:7b:
                    ce:fe:00:b1:00:19:6f:34:a7:09:30:1a:52:63:ef:
                    5b:57:24:98:23:40:3e:5d:67:a6:45:4c:9c:21:11:
                    8f:5a:2a:52:6e:8c:fc:44:09:52:b4:d1:ac:46:e4:
                    a9:f3:2d:fa:74:8e:88:eb:a0:72:3c:3d:a9:e1:65:
                    0e:26:f3:f4:30:ce:e0:4c:3d:2e:e6:6d:b8:6a:29:
                    27:f3:5f:83:30:ba:19:f6:27:45:ad:d1:51:1c:84:
                    f8:bf:7e:00:88:71:cd:9f:e4:b9:fa:3a:c5:15:39:
                    00:c5:25:a6:d6:b9:83:28:a6:71:ec:5b:26:54:09:
                    dd:57:6e:eb:84:5d:60:30:e4:5f:1d:44:f6:f1:4f:
                    8a:db:db:50:51:9e:c8:ba:5f:e7:fb:bb:7c:7c:d5:
                    1f:69:03:7f:fc:8b:14:a9:86:db:0c:c2:9c:bc:8d:
                    3b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:C1:4D:61:67:C3:08:74:29:78:24:18:FC:F0:59:66:EF:A4:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c5253a9-c7f5-43da-bc47-1cc29d685857/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c5253a9-c7f5-43da-bc47-1cc29d685857/4c5253a9-c7f5-43da-bc47-1cc29d685857.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.114.13.0/24
                IPv6:
                  2620:8f:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398936

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:29:c5:cb:77:a1:3f:e0:10:74:41:13:1e:60:31:60:3f:84:
         e3:ab:06:f0:2d:69:61:ae:a0:a0:1f:fc:57:2b:2c:1c:46:2c:
         6e:b9:c3:87:91:e3:90:92:3e:bd:96:ec:be:02:5c:65:26:e7:
         c7:40:eb:0b:37:c2:87:0b:a9:55:ec:84:fa:a3:82:d9:48:ef:
         77:cc:14:e8:1a:76:db:0b:04:f2:5d:11:9f:4a:93:5d:97:76:
         59:fb:75:5f:d2:c4:8d:c4:a8:74:c7:3f:22:36:28:53:92:72:
         a9:43:e5:29:9a:96:ee:83:f8:b2:30:66:ff:c5:21:32:18:e2:
         59:96:05:94:fd:c3:79:6d:d0:31:25:b0:00:1c:bd:53:e9:66:
         57:35:88:66:62:b3:70:9d:6e:b1:27:12:ed:b1:97:8a:50:9f:
         07:8c:9f:33:c4:9b:a0:a7:72:b6:5d:97:81:c7:f7:b1:66:d8:
         4e:2e:d3:47:4a:24:e0:24:64:c4:8b:1f:36:eb:15:47:68:d9:
         c2:60:28:20:ed:e3:2f:00:76:5f:4e:04:0e:1b:09:65:bd:33:
         e3:be:10:4c:4b:54:f3:f9:ce:f2:3a:d5:d1:14:4f:ab:6b:f4:
         b0:7a:d6:ed:e8:2d:d7:f7:86:a7:92:95:4f:01:61:d3:48:7e:
         43:2d:a0:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:26:05 2024 by rpki-client on console-fra.rpki-client.org