Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
File:                     37d983de-280d-4374-a056-b21eb13451dd.cer (raw, json)
Hash identifier:          6x6Fp/XWYDp6uFW3KKI0ifyVoVQWBggdNwZvAvjzGBg=
Subject key identifier:   A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834F5ED72A8AF66E1B2D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 02 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 33604
                          IP: 65.183.128.0/19
                          IP: 69.5.112.0/20
                          IP: 162.247.88.0/22
                          IP: 204.13.40.0/21
                          IP: 2606:8600::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:5e:d7:2a:8a:f6:6e:1b:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  2 19:06:39 2025 GMT
        Subject: CN=37d983de-280d-4374-a056-b21eb13451dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:46:25:a4:a7:f2:fa:7f:ff:bd:98:1f:82:
                    07:58:c4:d0:2d:16:ac:70:42:30:a5:c3:ac:c4:d7:
                    07:20:d0:c1:3f:60:42:87:c8:37:53:7e:76:3c:3f:
                    cc:a0:50:5f:89:43:be:7f:d1:4a:aa:47:38:fe:0a:
                    2a:db:ee:44:ab:6b:49:ed:b2:cb:46:72:fc:1c:47:
                    35:1f:c0:d4:1f:cf:dc:53:63:0e:10:00:22:ec:94:
                    8b:6c:97:f6:81:85:b1:58:9a:6a:64:3c:88:1a:09:
                    02:d7:54:ad:34:c0:d0:85:7b:1e:7c:85:14:98:5e:
                    94:52:89:15:fc:52:34:f4:9e:78:c5:46:a8:d5:6a:
                    e0:ed:ab:df:03:8c:29:1a:65:a7:c8:6f:c0:3e:7b:
                    e3:4b:da:c6:6d:2d:9e:9a:f0:1b:f2:23:ee:58:9f:
                    16:36:75:38:cf:e5:08:e6:2b:5d:c9:ef:9a:1b:29:
                    02:28:91:bf:e1:da:07:40:9b:c9:bf:5f:85:a8:f7:
                    76:ca:3d:87:e9:6e:46:ae:19:a3:ef:9b:cc:f0:4c:
                    3d:7a:58:bb:90:57:2d:10:f4:97:e3:7f:3c:0e:5a:
                    ea:77:49:c2:c9:47:e2:58:ca:23:28:d1:1d:79:ad:
                    89:e4:ba:46:00:46:1d:cc:47:16:a1:77:0e:21:67:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.128.0/19
                  69.5.112.0/20
                  162.247.88.0/22
                  204.13.40.0/21
                IPv6:
                  2606:8600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33604

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ee:8f:eb:bf:c6:d3:be:06:4e:08:db:6b:b9:19:54:17:39:
         57:95:ec:49:b7:3a:bc:c9:41:94:62:50:85:36:9b:bf:be:c3:
         a2:02:e6:e1:dc:89:5d:4a:3e:8f:ff:ed:61:4f:5c:dc:7a:0d:
         90:78:44:fc:67:99:5b:8f:7e:2d:fc:14:4b:21:2e:2f:bd:f2:
         9a:a7:29:e5:90:8d:14:9a:fe:b5:03:73:cf:78:e7:ac:d2:cc:
         4b:4f:1c:96:0b:77:73:c3:e1:2d:fd:77:83:78:35:33:be:bb:
         77:af:47:da:9e:93:e4:1a:ff:21:db:5b:19:f1:dc:9b:65:e2:
         3b:a1:8a:23:78:d9:d4:15:3e:c8:b6:47:30:bb:dc:bd:b0:b2:
         ec:5e:7f:ce:4f:20:89:6e:f6:cd:68:b6:38:89:8b:63:36:7f:
         e3:10:c5:cf:57:82:b8:bc:26:89:af:6b:21:2c:cf:77:76:22:
         72:d4:6d:44:e9:cf:ea:b5:6f:2f:0e:6a:dc:a6:4f:8c:f1:b4:
         d3:0c:87:93:6e:e1:3e:a7:37:ba:64:c0:e8:a2:03:96:ad:60:
         74:1d:d2:10:77:eb:70:4c:a4:12:21:6b:a9:08:b3:44:bc:d7:
         29:b1:ba:c9:28:3b:fa:7a:96:d5:4a:e1:33:a4:4d:66:86:05:
         f5:04:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:22:30 2024 by rpki-client on console-ams.rpki-client.org