Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer
File:                     1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.cer (raw, json)
Hash identifier:          whxAysbVtHNmvOM87zH72u0+wECucr7OUdMvdyYeqoE=
Subject key identifier:   C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843BA2E02AFA4A4FD37F6313300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 02 Feb 2026 01:45:15 +0000
Subordinate resources:    IP: 104.245.112.0/21
                          IP: 192.163.24.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ba:2e:02:af:a4:a4:fd:37:f6:31:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 31 00:45:15 2023 GMT
            Not After : Feb  2 01:45:15 2026 GMT
        Subject: CN=1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:ab:13:01:f6:99:ef:23:b1:ec:6e:2f:d3:
                    7c:dc:0e:75:ad:d7:61:f7:2c:15:a1:22:67:f0:90:
                    7d:0d:20:0c:0d:9c:c2:b3:2c:31:3b:05:2b:c2:9b:
                    0b:71:24:1d:65:a4:b4:82:f8:fb:c2:11:66:65:f0:
                    b8:93:04:de:cd:50:43:32:d8:71:1b:3c:7d:29:79:
                    cf:3c:ff:dd:95:15:0d:76:a6:e6:d6:02:31:de:b4:
                    60:51:ff:e3:1d:62:79:dc:51:79:a7:b6:47:73:ea:
                    64:73:e9:6a:42:69:5a:d3:ab:ac:f3:0a:f4:be:9a:
                    1e:c2:a0:63:7f:1b:3c:58:53:18:73:cc:34:80:1d:
                    d6:cc:b6:d9:28:27:77:93:df:a8:78:12:23:ab:87:
                    ee:77:fd:8c:64:3f:41:0d:eb:31:b0:74:b7:b7:0d:
                    d7:b1:83:06:3c:ea:47:45:c0:b2:f9:f0:e4:57:1d:
                    b5:3f:de:1f:e7:71:2e:ec:92:d0:36:3d:fb:45:79:
                    7c:eb:04:46:1d:63:f2:43:d4:22:a4:17:88:a5:2a:
                    cd:97:d0:b5:37:71:e6:c5:d2:00:01:b7:0b:21:68:
                    5a:a1:9e:c0:9c:df:8a:46:be:a2:f4:c6:89:73:2f:
                    ef:08:b3:3a:3f:bd:69:ed:85:5f:a7:9c:0d:54:46:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:86:33:E3:D7:3C:4D:34:25:8E:3E:1E:29:B3:54:DD:EE:51:23:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82/1d7c77ec-0ad0-484b-a0c5-f5cb12d1de82.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.112.0/21
                  192.163.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:92:69:3b:ad:65:a9:eb:66:3d:a4:88:81:bf:ca:18:f5:27:
         98:77:77:d9:3b:50:0c:1d:85:55:3b:fa:35:7f:50:62:07:62:
         77:4d:1d:b3:94:c3:0b:b7:2a:e6:af:09:8f:72:27:a7:31:d3:
         1d:3b:22:a7:91:7c:b7:0e:c0:57:d7:31:ab:90:96:aa:6b:9b:
         18:a9:91:88:3a:4b:ce:1c:1e:fe:fb:cc:87:12:45:00:0d:a7:
         72:13:e2:db:2b:6e:32:63:52:98:77:b6:be:7b:10:8b:7e:1b:
         f8:7e:e6:eb:2e:21:a4:08:62:bc:93:62:82:8f:07:ec:61:21:
         3f:5a:91:85:b2:28:07:90:ca:fd:30:78:9a:77:aa:89:80:6b:
         30:35:24:20:e5:1c:cb:c1:6a:fe:d2:d7:92:84:9d:08:93:b0:
         59:ab:f9:cc:75:b2:40:3c:e2:bc:a0:dc:8f:0c:83:eb:46:19:
         bf:f7:c0:7e:bc:4a:71:25:92:28:d5:ce:b3:69:c9:14:6b:98:
         b5:b9:fd:81:d6:8c:5d:8e:bb:70:a5:2a:30:43:77:37:95:23:
         29:f9:7b:f6:c2:2e:fb:a1:56:8d:c8:f9:9e:8e:bf:f9:f3:6d:
         36:49:65:92:95:f4:e2:40:fc:22:d9:7b:a5:d1:2e:9d:ea:34:
         79:df:38:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:54:14 2024 by rpki-client on console-fra.rpki-client.org