Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
File:                     590b174f-a815-4e24-9512-3236e7727928.cer (raw, json)
Hash identifier:          wvL+8xjgpqupN4UMrE48JEUDM7YC5bNcPw7cZ7yce3Y=
Subject key identifier:   D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844EA98678F935276CB5D817FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 17 Feb 2024 01:45:22 +0000
Certificate not after:    Fri 22 May 2026 00:45:22 +0000
Subordinate resources:    AS: 396479
                          IP: 69.72.32.0/20
                          IP: 141.193.32.0/23
                          IP: 143.55.224.0/20
                          IP: 159.112.240.0/20
                          IP: 159.135.224.0/20
                          IP: 161.38.192.0/20
                          IP: 198.244.48.0/20
                          IP: 216.71.96.0/22
                          IP: 2620:23:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:98:67:8f:93:52:76:cb:5d:81:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 17 01:45:22 2024 GMT
            Not After : May 22 00:45:22 2026 GMT
        Subject: CN=590b174f-a815-4e24-9512-3236e7727928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:69:81:f5:24:3f:52:29:ea:23:d5:69:4e:
                    38:d3:88:e5:95:69:3e:0d:b8:31:84:82:82:43:7f:
                    c1:ed:f5:0c:a2:70:e4:67:3c:0d:b3:6e:97:ae:bd:
                    7f:89:8d:47:16:18:66:f5:82:2b:d1:f8:6d:95:3a:
                    03:78:9f:bb:24:16:44:bb:15:43:bc:23:39:10:28:
                    ff:91:e2:5b:12:48:3b:84:8f:84:b1:74:6b:ca:7a:
                    28:6d:53:40:87:29:2c:5d:4c:c1:ae:5a:19:95:f5:
                    7e:db:8a:c5:8a:ef:4b:d8:fc:73:2c:26:51:26:d3:
                    ad:ef:c6:cd:af:a0:b1:d7:07:12:5c:e7:90:80:10:
                    88:74:fe:f9:1d:f5:d0:30:38:64:8d:bb:cc:12:cd:
                    42:66:a7:de:39:48:b0:b2:8b:d3:9a:96:39:f9:ca:
                    44:dc:ea:df:cd:7b:e2:ab:d5:b2:d3:21:d2:9b:7b:
                    be:13:13:ad:e5:2a:a5:1e:f6:5f:ee:67:88:c8:38:
                    29:81:bb:98:7c:e7:6a:f7:2b:0a:cb:68:84:1b:b9:
                    6d:5b:13:d6:1a:f1:ff:3d:00:03:1b:73:22:a7:6a:
                    9d:aa:de:2e:f4:93:ab:f3:bc:04:bd:de:45:33:58:
                    cb:fb:f6:f2:f2:68:46:54:cc:21:a1:ca:a6:fb:38:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.72.32.0/20
                  141.193.32.0/23
                  143.55.224.0/20
                  159.112.240.0/20
                  159.135.224.0/20
                  161.38.192.0/20
                  198.244.48.0/20
                  216.71.96.0/22
                IPv6:
                  2620:23:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396479

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:72:3a:a7:bf:72:a0:b3:ca:2b:33:67:0d:5d:84:93:82:4d:
         5f:6d:0e:00:36:bb:58:5c:37:b5:e0:47:cc:68:f3:e3:59:71:
         29:7a:f4:ef:d5:89:3e:03:56:7a:01:af:08:11:3d:fb:c0:36:
         c2:4d:2f:09:1a:bb:ff:42:ef:d1:5d:e9:72:41:22:a0:a0:5d:
         72:37:41:a2:bd:d6:2e:7b:ec:ef:ba:37:8e:68:ce:6c:70:02:
         74:43:1b:14:10:93:5b:c4:94:66:97:d3:af:68:b9:47:3b:a5:
         ab:64:65:04:55:6f:d6:c4:b4:2b:64:04:d7:d8:3f:97:44:3e:
         42:95:5d:99:6c:83:12:dd:c6:e0:b9:55:f2:ac:c8:72:41:15:
         86:1e:09:ce:c4:3b:1f:ff:bc:9a:9c:8e:30:f8:7a:71:b7:65:
         9d:c2:44:21:47:3b:64:e8:2c:c9:02:e5:c8:a2:5a:38:ba:fa:
         70:ab:8f:49:de:0e:f5:79:5e:22:d9:cf:f6:c6:7e:5d:ba:1a:
         2c:9d:f3:d5:c0:85:3e:df:84:07:10:3a:89:16:45:29:ed:8e:
         2a:4d:11:cb:98:3c:43:bd:34:7e:f0:16:ef:3b:78:44:28:c5:
         23:fd:c5:d6:27:a5:82:98:29:7d:7a:10:c2:2a:86:7b:cd:59:
         67:f6:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:16:17 2024 by rpki-client on console-ams.rpki-client.org