Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef.cer
File:                     30a6fed9-a752-4874-889d-31c878bbf1ef.cer (raw, json)
Hash identifier:          Yw0ndZFSz2Xyu2pLboDYdxW2hDJi79ucIhYgmYmAUD8=
Subject key identifier:   FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858457610D04DE708DFBDF97A9580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Apr 2024 00:45:20 +0000
Certificate not after:    Sat 11 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 3701
                          IP: 140.211.0.0/16
                          IP: 184.171.0.0/17
                          IP: 199.165.177.0/24
                          IP: 2605:bc80::/32
                          IP: 2607:8400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:10:d0:4d:e7:08:df:bd:f9:7a:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  7 00:45:20 2024 GMT
            Not After : Jul 11 00:45:20 2026 GMT
        Subject: CN=30a6fed9-a752-4874-889d-31c878bbf1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:06:c9:12:66:6c:83:68:c2:7a:a5:2e:d2:
                    96:3e:02:84:f2:a3:ad:20:29:02:6b:a2:b3:14:c4:
                    15:5f:7c:25:a8:4b:a2:f1:d7:7e:a9:cd:54:32:6c:
                    85:52:34:63:76:e2:eb:e9:f0:bf:43:b4:42:65:2d:
                    19:95:a9:1e:e2:8d:33:93:29:0d:81:48:bb:ba:e2:
                    de:af:67:ad:18:0a:fd:42:ff:e7:a9:bf:c0:20:40:
                    de:e9:40:2a:a8:09:35:ff:f3:81:64:ba:94:78:30:
                    b5:2e:77:16:0e:0c:c6:a9:c6:ab:80:c4:13:e5:3d:
                    98:41:cb:a2:74:e3:1c:79:bf:87:cf:77:07:15:14:
                    7d:5f:70:4f:19:e5:35:1e:ba:55:b6:ab:1b:69:14:
                    1e:ab:65:21:04:6d:86:55:2f:24:96:d2:3d:2e:34:
                    f4:19:e7:31:dc:23:2f:32:5e:b8:f6:76:67:01:d4:
                    e0:85:61:50:ca:bb:3b:23:73:d1:8d:2b:2b:50:e8:
                    56:d3:5b:85:fd:64:71:cf:36:f1:f0:28:16:93:25:
                    ee:20:6c:ad:ac:98:05:bf:63:3f:c6:b4:4f:81:5d:
                    cd:82:fc:a9:4f:6d:58:50:81:97:78:04:5b:ad:24:
                    ba:b5:81:48:93:78:43:ed:e3:e4:5c:4c:19:c7:6f:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.211.0.0/16
                  184.171.0.0/17
                  199.165.177.0/24
                IPv6:
                  2605:bc80::/32
                  2607:8400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3701

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1c:f4:0a:de:7f:c1:f7:aa:cf:de:0f:2e:07:f9:cd:a4:00:
         ee:f7:81:8d:da:5d:7a:07:e7:23:8b:08:11:6d:ec:32:d2:18:
         93:67:0f:95:ab:8c:5c:64:91:77:98:fb:b4:e5:b1:91:51:d4:
         48:0c:a4:e8:ed:a9:be:39:63:56:f0:3a:30:b8:76:ab:7f:67:
         79:44:28:81:de:47:d0:7d:23:65:4a:42:85:a0:c1:5a:09:61:
         eb:a1:93:48:11:a7:90:e6:aa:bf:53:32:e7:ed:50:6a:2b:37:
         08:8b:b0:1f:4d:6c:b1:df:fd:e6:f0:d1:05:f4:a6:09:09:c9:
         28:8c:53:34:8c:dc:d4:9e:ae:cd:70:93:53:1a:4d:cc:50:aa:
         b5:e7:77:70:74:0f:ea:6b:3e:78:9b:b7:dd:df:6e:ae:e6:f5:
         a6:91:45:ae:cc:dd:c5:7d:3b:ac:37:fe:7e:94:6a:32:b6:5e:
         2f:bd:d8:77:20:2a:4b:80:88:b3:fc:2e:b6:68:0b:15:26:5e:
         74:09:04:fd:b0:80:d3:57:f1:05:d1:ce:6b:a0:e1:46:70:f6:
         95:44:cc:1a:95:eb:e7:ef:2d:5c:57:e9:ba:aa:05:8c:40:e2:
         b1:87:8b:c9:89:cb:66:ad:c9:bf:79:00:16:3e:69:4c:84:66:
         e0:67:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:51:02 2024 by rpki-client on console-ams.rpki-client.org