Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
File:                     405ae070-e9e9-4d3c-b449-868426ff2303.cer (raw, json)
Hash identifier:          jXiDupYExt/FZ9E1P4Iyfdeuc/PKZjGquHRZkwdmggE=
Subject key identifier:   F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858451A0E05DF72C76EF257E25500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Mar 2024 01:45:20 +0000
Certificate not after:    Mon 08 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 15296
                          IP: 162.246.156.0/22
                          IP: 199.116.232.0/22
                          IP: 204.209.76.0 -- 204.209.80.255
                          IP: 2605:fd00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:0e:05:df:72:c7:6e:f2:57:e2:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  5 01:45:20 2024 GMT
            Not After : Jun  8 00:45:20 2026 GMT
        Subject: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:76:bb:41:0d:b8:d5:e9:36:94:01:dc:ce:
                    0e:63:cf:e8:eb:e7:0d:91:12:02:46:51:c9:34:2b:
                    6b:6c:71:b0:8d:d5:ce:84:69:2a:8b:bb:db:fd:ac:
                    28:f9:d3:7d:18:bf:79:5b:2c:cb:27:42:db:dd:ca:
                    6c:dc:e2:c3:a5:a3:40:61:03:b2:48:ca:ad:e6:53:
                    38:6c:4d:72:ed:3f:d7:c1:c0:ab:21:bf:fd:a6:3c:
                    85:f8:8c:a2:49:84:a9:c3:89:08:c2:b1:4d:25:18:
                    c7:93:cb:b3:f6:87:67:a2:cd:91:55:97:f7:02:a1:
                    ca:29:28:47:8d:b8:1e:62:5a:56:bb:01:f1:e8:9c:
                    f7:94:16:34:ad:2d:d6:bf:9a:dd:d0:45:6f:d1:fb:
                    76:12:dc:1e:64:72:f3:f7:77:37:11:8b:69:58:02:
                    38:cb:f1:e4:5b:53:8c:54:ee:e2:59:79:51:42:a1:
                    9b:4c:91:a3:55:72:e9:a2:88:1c:ab:80:41:63:1d:
                    a4:7c:76:f7:10:da:f8:a2:fe:94:80:71:f0:9d:a5:
                    40:be:b2:0f:75:5a:51:75:e0:17:87:fb:d6:74:09:
                    25:34:25:5e:6f:64:b9:fd:12:9d:e3:29:2a:e3:71:
                    83:92:69:bc:f9:1e:aa:48:2b:e9:9f:23:4d:8d:5e:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.156.0/22
                  199.116.232.0/22
                  204.209.76.0-204.209.80.255
                IPv6:
                  2605:fd00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15296

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:ca:f8:29:d0:44:cb:68:b7:99:48:87:5d:46:82:35:73:
         fa:40:23:f9:b6:9f:af:1a:58:0e:da:fc:aa:aa:1e:e2:07:3f:
         09:92:90:2a:2f:77:47:0c:b3:6d:74:0d:4e:86:18:71:3c:49:
         6b:c0:31:e1:74:d8:5f:db:6a:35:03:84:e3:da:af:23:59:32:
         31:92:2e:bf:f3:db:4a:f8:0c:45:ec:a3:a7:7b:cd:ce:d0:01:
         da:a2:aa:af:e3:9c:8a:48:54:b8:10:9d:89:00:68:e7:d6:61:
         22:a0:2f:e8:fa:6b:9e:83:86:4e:2d:9b:09:b8:db:c6:44:ab:
         fe:63:0e:86:bf:e7:ed:e9:24:6f:a4:3b:34:09:03:c7:9c:28:
         a7:0a:ae:4c:c1:b0:a9:08:20:e0:69:d4:0a:d6:4b:5f:b1:8f:
         39:12:d5:29:03:b4:47:43:9f:51:64:7f:f9:11:cf:3d:94:8f:
         75:1e:0d:ad:be:6c:90:26:8d:9a:a3:e4:ac:72:3d:1b:5c:4e:
         95:6b:c4:6d:1b:04:a2:b8:69:9b:0a:e5:85:1d:98:21:45:a3:
         07:69:34:ac:aa:04:6d:6a:3c:83:ed:d0:69:09:bd:da:83:6e:
         c4:d2:f7:6f:96:38:48:aa:75:1c:dd:5c:b9:13:b4:dc:39:8b:
         39:65:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:51:05 2024 by rpki-client on console-ams.rpki-client.org