Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
File:                     23658315-b56f-46db-89d2-184000d7f7e1.cer (raw, json)
Hash identifier:          Nkyj/WEhYpJ8H0/pF381JJzeQzs1DpEYFwPoXdkWKbE=
Subject key identifier:   E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584731F3A0AB301E90C7BF8F99E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Sep 2024 00:45:26 +0000
Certificate not after:    Thu 17 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 14007
                          IP: 69.50.160.0/19
                          IP: 74.50.224.0/20
                          IP: 192.149.104.0/24
                          IP: 192.234.196.0/22
                          IP: 192.234.204.0/24
                          IP: 199.101.72.0/22
                          IP: 216.251.128.0/19
                          IP: 2600:ac00::/28
                          IP: 2607:f040::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:f3:a0:ab:30:1e:90:c7:bf:8f:99:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 13 00:45:26 2024 GMT
            Not After : Dec 17 01:45:26 2026 GMT
        Subject: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:e4:95:e6:53:23:86:47:3a:3e:a3:01:8a:
                    d9:a5:b1:57:7a:92:7f:f0:4e:0f:65:e7:a3:80:a7:
                    aa:7d:98:10:5d:bc:15:3a:e5:b3:f6:0c:c3:3a:b9:
                    9b:aa:ba:ac:59:20:74:0a:03:5a:86:14:d0:52:93:
                    0a:5d:ca:cb:3f:6c:94:d8:21:2a:63:b9:d9:10:8c:
                    55:55:90:cd:fb:40:49:7a:a3:92:86:b2:b5:d2:90:
                    81:7b:25:3c:81:b3:8c:ba:19:49:a4:5c:98:98:38:
                    e1:2a:e4:76:9c:ff:d9:3c:ff:d0:ad:bb:c7:91:da:
                    e8:2b:e8:63:45:e6:fa:f8:d6:ea:f7:3f:2f:1d:df:
                    2d:5b:4f:e4:6b:02:8d:3a:fa:7e:61:c8:82:12:36:
                    d9:16:79:b9:13:28:e6:2c:85:54:a4:a0:71:ad:5e:
                    1e:ff:a2:85:29:ef:0e:a1:6c:10:4c:b3:f1:1f:25:
                    eb:e4:ed:91:7d:cc:9a:fc:30:47:70:47:3f:51:93:
                    e1:06:8f:59:9e:a9:60:de:8c:ed:29:bb:20:06:8a:
                    92:61:55:a5:f0:c1:08:f5:a7:f3:f8:2d:9a:35:66:
                    2a:4a:92:14:b8:af:4b:cc:e7:07:8e:68:08:da:81:
                    1f:7f:16:be:be:97:a8:c5:84:e1:c1:38:ed:ae:7d:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.50.160.0/19
                  74.50.224.0/20
                  192.149.104.0/24
                  192.234.196.0/22
                  192.234.204.0/24
                  199.101.72.0/22
                  216.251.128.0/19
                IPv6:
                  2600:ac00::/28
                  2607:f040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14007

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c7:84:e7:f4:f3:7e:6b:89:e5:db:0d:03:56:be:54:98:75:
         c3:6b:8b:4e:02:24:36:7c:c9:17:36:b4:06:13:34:27:28:95:
         30:79:4f:cd:0b:87:ae:c0:6c:2a:90:c9:7a:14:96:71:2b:da:
         0e:1b:6c:8d:df:21:fd:13:29:46:c9:3c:d7:28:78:40:76:8b:
         13:41:44:78:5d:67:5b:68:39:33:d9:44:58:a0:22:e9:8d:ca:
         10:23:e4:26:fe:b5:18:2d:01:53:2d:7d:33:45:cc:a5:56:9b:
         d2:85:b2:b9:8d:1d:51:17:a3:eb:b8:cf:c5:c7:61:45:ce:5e:
         fe:a2:22:a2:c1:6b:0c:54:ca:73:40:57:63:4c:ce:0e:f1:10:
         5a:ac:4b:fa:b6:9d:89:82:30:5d:a5:94:30:fa:18:9e:61:27:
         59:ae:23:7b:b2:fd:7d:91:50:97:1e:9f:ef:f3:9f:4e:37:0f:
         57:cb:5e:dd:d9:dd:01:d3:e6:16:4f:ab:13:8b:7a:f1:8f:5d:
         71:e1:fe:c5:85:1f:18:aa:fe:35:dc:df:c4:ae:6d:2c:b3:ad:
         0e:39:88:99:9f:d0:bd:0f:fc:24:49:d6:e1:ef:7a:7a:c9:7b:
         84:04:58:31:6d:20:77:28:b6:44:7a:5c:28:3c:72:87:01:7e:
         5c:2b:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:48 2024 by rpki-client on console-ams.rpki-client.org