Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
File:                     0546b3ee-1f11-4525-8576-f238a19fb7ba.cer (raw, json)
Hash identifier:          753JTWjRWMx58GBBsFMrHW0b1Q/Xq0+f2oaRG9bOKiQ=
Subject key identifier:   4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584254D676AC944D06FBD3BDE224
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Jun 2023 00:45:17 +0000
Certificate not after:    Sat 27 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 54004
                          IP: 47.16.0.0/14
                          IP: 50.29.0.0/17
                          IP: 63.142.16.0/20
                          IP: 63.143.128.0/17
                          IP: 107.188.0.0/17
                          IP: 162.216.56.0/21
                          IP: 173.229.64.0/18
                          IP: 192.96.160.0/22
                          IP: 192.208.120.0/21
                          IP: 199.115.84.0/22
                          IP: 199.193.104.0/21
                          IP: 209.140.32.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:54:d6:76:ac:94:4d:06:fb:d3:bd:e2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 25 00:45:17 2023 GMT
            Not After : Sep 27 00:45:17 2025 GMT
        Subject: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:27:e4:d9:92:7c:d6:d7:0f:f7:51:c8:2f:
                    32:cd:31:df:4c:ea:c9:1b:1f:22:eb:60:74:e4:b1:
                    8b:dd:64:24:28:55:13:1a:3b:39:b8:2a:9f:6a:cb:
                    c2:04:5d:a2:5c:a4:e7:23:c6:e8:01:23:23:b0:8b:
                    0d:c5:f2:b2:0a:bf:98:4e:2c:ff:67:8e:f7:04:c6:
                    68:12:c0:df:e7:4c:86:e1:8a:07:0f:50:6b:54:1e:
                    79:8d:e0:92:43:da:70:cf:95:ff:96:7d:46:aa:c8:
                    60:59:79:1f:e2:6f:26:27:2d:ea:7a:37:d5:a0:3d:
                    ca:ca:bd:fd:9e:cb:ad:27:c9:64:ae:9c:78:66:79:
                    d6:43:4b:ac:50:0a:14:40:ae:41:6a:df:af:38:3e:
                    0b:95:af:42:bb:42:1e:6b:76:e9:08:7a:1a:69:cc:
                    38:e8:06:f1:09:68:b3:7c:a6:d0:52:e4:38:9d:2b:
                    fc:83:6c:7a:b0:c5:23:fc:f1:55:13:6c:73:49:38:
                    70:56:15:1b:b1:c9:48:95:03:88:87:08:df:f5:70:
                    4a:7c:fe:cd:d8:f3:ad:dd:31:04:6c:ce:bd:5c:8f:
                    ca:b0:b8:03:0e:59:bb:03:d0:b9:d2:a7:58:40:ad:
                    e0:d8:85:81:a4:44:d9:b9:27:36:67:d1:62:eb:92:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.16.0.0/14
                  50.29.0.0/17
                  63.142.16.0/20
                  63.143.128.0/17
                  107.188.0.0/17
                  162.216.56.0/21
                  173.229.64.0/18
                  192.96.160.0/22
                  192.208.120.0/21
                  199.115.84.0/22
                  199.193.104.0/21
                  209.140.32.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54004

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:fb:8b:d0:89:0a:61:6e:79:ea:16:0d:e8:b6:6a:c0:6c:8c:
         a2:13:1c:7b:62:3e:55:38:55:ba:a6:b7:31:a8:b8:34:40:10:
         58:c0:30:16:b6:a8:2a:85:bb:b3:f0:71:14:b5:b3:bb:79:ff:
         e9:bb:ad:c3:04:f7:f2:4f:b6:90:26:c9:ca:41:e7:5f:46:07:
         cb:b2:8f:81:c7:89:19:56:68:c9:4a:85:85:ee:82:60:63:4d:
         2d:61:02:62:97:9f:c0:ca:d6:6f:e1:0b:d3:99:69:7f:84:9f:
         ae:43:e4:00:39:aa:96:b3:d9:d6:61:1e:9a:6d:bf:78:fc:b2:
         38:e7:ca:3b:71:9a:6e:cc:12:ab:da:63:65:37:53:79:2c:0e:
         af:c2:d1:bc:87:4e:5b:c6:4c:50:ce:ff:3f:81:37:4d:f9:22:
         0b:ac:6f:35:bc:7d:23:bb:49:23:26:86:e7:60:08:8d:c6:96:
         ec:2b:89:11:e9:4b:7a:7c:f1:15:88:65:8a:04:1d:9e:fd:b6:
         f8:0c:ed:96:86:a0:b6:12:90:55:46:c2:0d:a3:27:94:c1:88:
         92:7a:c2:e8:a4:03:04:90:a1:e7:8f:7c:55:44:55:5d:59:d6:
         cc:83:aa:cb:11:be:64:c3:ca:01:af:c1:ee:89:d0:3e:2f:cd:
         30:c6:4f:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 20 14:21:34 2024 by rpki-client on console-fra.rpki-client.org