Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
File:                     4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer (raw, json)
Hash identifier:          EcC7ZWkC3JkMlCE4uFgQSd187+NvHVE/QPKGV1o2noY=
Subject key identifier:   65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE8740F397CEC053913C8A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:18 +0000
Certificate not after:    Sun 10 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 25736
                          AS: 30010
                          AS: 53952
                          AS: 54386
                          AS: 54716
                          AS: 62499
                          AS: 62760
                          AS: 63034
                          AS: 393752
                          AS: 400330
                          IP: 23.173.176.0/24
                          IP: 149.112.11.0/24
                          IP: 149.112.27.0/24
                          IP: 149.112.39.0 -- 149.112.40.255
                          IP: 149.112.68.0/24
                          IP: 206.53.137.0/24
                          IP: 206.53.202.0/24
                          IP: 206.82.104.0/22
                          IP: 206.130.10.0/24
                          IP: 2001:504:36::/48
                          IP: 2001:504:44::/48
                          IP: 2001:504:61::/48
                          IP: 2001:504:102::/48
                          IP: 2001:504:116::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:40:f3:97:ce:c0:53:91:3c:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:18 2023 GMT
            Not After : Aug 10 19:06:39 2025 GMT
        Subject: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:de:c3:02:bb:3e:53:21:fa:21:63:00:39:
                    fe:01:df:dc:5d:f1:d0:1d:f5:c9:43:4a:03:b4:d2:
                    e0:73:ba:2c:dc:f2:c9:ba:da:10:46:11:3c:82:d9:
                    38:e3:fa:2f:66:5f:ca:30:0a:62:71:9b:58:b6:d9:
                    6a:51:61:44:92:58:6f:5d:5e:84:35:23:d6:05:13:
                    34:e3:89:6c:72:30:f1:a8:fa:09:c9:3f:00:dc:b4:
                    a7:6c:a6:23:5d:f9:34:23:07:3c:65:35:54:59:dd:
                    1c:cd:1f:46:eb:1c:57:ae:bb:b9:1e:14:a1:86:dc:
                    85:f0:43:a9:25:5e:57:df:c8:31:26:2d:c0:41:53:
                    dd:b7:da:ee:64:37:66:17:e8:07:da:03:93:9b:71:
                    f1:b3:4a:b0:2b:57:ab:03:db:92:b0:00:92:ff:89:
                    43:60:75:ef:df:13:24:c0:65:cc:1a:71:11:5e:4e:
                    a8:3b:6b:0b:59:35:c9:b3:0a:0c:f8:e1:04:8c:49:
                    5f:dd:2a:3b:84:f8:2c:bd:50:04:63:ea:c5:c6:58:
                    3b:8e:0a:09:60:21:2d:30:c0:7f:11:ff:d5:68:61:
                    b9:ea:2c:49:d8:62:b9:04:b5:4f:8e:dd:b3:d5:b4:
                    88:76:ac:f6:63:8e:55:88:6b:d5:3e:8e:1c:f0:df:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.176.0/24
                  149.112.11.0/24
                  149.112.27.0/24
                  149.112.39.0-149.112.40.255
                  149.112.68.0/24
                  206.53.137.0/24
                  206.53.202.0/24
                  206.82.104.0/22
                  206.130.10.0/24
                IPv6:
                  2001:504:36::/48
                  2001:504:44::/48
                  2001:504:61::/48
                  2001:504:102::/48
                  2001:504:116::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25736
                  30010
                  53952
                  54386
                  54716
                  62499
                  62760
                  63034
                  393752
                  400330

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:a3:ed:ce:cb:95:10:ff:5e:fb:9d:b7:44:2d:84:ca:32:
         e7:4a:44:93:77:5a:4e:48:e2:09:16:44:c8:00:aa:23:0e:cd:
         02:52:9d:95:ae:fa:ac:91:bb:62:46:d2:af:ec:1e:75:d4:5a:
         bb:d4:22:b6:77:d5:dc:89:2a:c2:3f:ea:20:f4:02:6a:64:25:
         61:cd:fd:20:8e:a0:f9:49:fe:e8:3f:48:87:7d:2a:f5:aa:21:
         ee:a2:da:5a:7f:f1:77:63:9a:ec:40:a8:82:43:9e:36:99:3e:
         25:25:16:c5:80:13:76:39:67:19:f7:fc:8f:f2:a2:e1:fd:de:
         c4:1d:f5:eb:b3:66:2e:01:21:47:50:c6:bc:a0:5b:28:44:df:
         ae:40:8c:5c:2b:6b:da:02:5d:9a:27:a0:3a:f7:2f:e8:3b:d9:
         08:20:91:fc:63:85:d3:8f:53:ef:52:8e:ad:53:8b:a1:5c:54:
         9f:3a:3c:8e:c8:3f:01:61:56:03:d5:ca:fb:8c:1a:a1:51:3f:
         c3:bd:87:37:80:e7:8a:05:71:66:e6:2d:a4:e8:5e:e4:6b:5d:
         17:d6:37:94:a4:5b:79:b1:00:54:85:cf:82:de:4b:22:88:38:
         24:5a:fc:08:da:18:5a:b6:c8:6d:9f:89:b0:3c:a6:94:64:cf:
         2e:31:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:16:16 2024 by rpki-client on console-ams.rpki-client.org