Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
File:                     341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer (raw, json)
Hash identifier:          AIVLDXaN14AegCcj4ATudYIZ1mEkR5TwLBZNYZr4Nvc=
Subject key identifier:   A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48346DF60EFAB7207F072C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 04 May 2025 19:06:39 +0000
Subordinate resources:    AS: 19551
                          IP: 45.60.0.0/16
                          IP: 45.223.0.0/16
                          IP: 107.154.0.0/16
                          IP: 192.230.64.0/18
                          IP: 198.143.32.0/19
                          IP: 199.83.128.0/21
                          IP: 2620:28:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:46:df:60:ef:ab:72:07:f0:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May  4 19:06:39 2025 GMT
        Subject: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:04:ba:fe:56:48:92:72:a9:a6:3a:a0:5e:
                    e8:47:9d:09:87:9a:df:cc:cd:a8:00:3a:68:6e:03:
                    3d:12:42:40:59:66:e1:cb:03:99:41:35:b6:ba:35:
                    d4:d2:15:09:e4:6e:6f:4a:5e:34:d8:56:50:80:66:
                    d7:41:82:36:22:63:b1:ed:a2:cd:1d:7f:1f:13:97:
                    97:4e:33:b8:8b:23:6b:24:cc:db:9e:ed:7e:62:f6:
                    47:4a:e4:c6:d8:23:bf:7e:66:88:90:72:1f:2b:58:
                    9c:ed:b6:ce:0b:f7:02:20:a4:5f:9a:e9:82:b8:af:
                    7c:07:12:1a:4b:76:2f:7c:5c:f9:db:cd:03:01:f2:
                    c5:5c:a1:f7:ea:8b:55:d8:b7:ac:da:93:8e:4d:c8:
                    2f:b4:9d:d7:06:16:43:e1:80:9a:f5:21:2c:91:84:
                    bb:0f:2d:c8:db:df:f9:f0:46:da:13:e5:b1:4d:27:
                    09:fa:45:6f:98:e7:20:5c:08:11:06:ed:5f:b0:2f:
                    a6:4c:0b:81:8d:60:c4:04:ef:06:51:a0:0f:2f:e6:
                    ad:6c:8d:7b:9c:3d:9c:ec:67:f5:de:69:54:ff:a9:
                    09:26:02:fb:8b:bf:df:9e:fb:fc:d6:e4:41:47:57:
                    32:29:19:e4:d7:4d:dc:a4:4d:54:41:8b:24:69:4e:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.60.0.0/16
                  45.223.0.0/16
                  107.154.0.0/16
                  192.230.64.0/18
                  198.143.32.0/19
                  199.83.128.0/21
                IPv6:
                  2620:28:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19551

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1d:cc:15:d7:d2:9a:05:a9:c2:55:64:b1:a0:4b:25:0b:58:
         ff:fd:9c:ee:d8:ba:1f:fb:18:70:52:60:91:b0:72:73:bf:36:
         9c:73:98:86:26:7c:8e:49:e7:f9:0c:57:6b:6d:40:a8:b0:0c:
         b5:13:46:d3:aa:10:3b:ee:a8:88:9d:c0:95:8e:6a:5d:66:c1:
         b9:0f:1b:bb:76:d7:27:f6:f4:2a:6f:e3:82:78:95:75:6b:25:
         c6:b1:8a:31:2b:1f:89:a1:63:14:a9:47:6e:7f:52:77:62:3f:
         d3:2d:cc:f0:5f:dc:60:21:9d:03:b5:3d:a4:fb:74:9a:87:e2:
         1a:2d:56:c1:0a:eb:45:84:79:33:7a:33:c7:90:c0:f2:e1:06:
         7b:84:f6:d7:05:ac:ec:b4:b3:9d:79:de:af:ea:d0:d9:ae:47:
         29:92:49:ab:89:fb:02:88:e1:24:ba:05:c0:cc:23:43:62:dd:
         49:88:ba:f5:44:64:04:81:5c:c7:77:0d:a3:3d:d4:44:55:2e:
         86:92:b6:dc:ed:31:e6:a3:75:ed:9e:e3:b0:83:40:71:c7:0d:
         63:d7:df:d6:26:e8:a3:c9:a4:dc:f3:22:cc:2e:7b:fd:e1:37:
         2d:ef:95:a4:cf:a6:44:88:da:5a:4d:45:d4:1d:e8:8f:2e:55:
         55:02:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:50:36 2024 by rpki-client on console-fra.rpki-client.org