Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer
File:                     5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer (raw, json)
Hash identifier:          qAb/w5faGCHa7Leo5TABK8jXYz6Kk96PE/hfnAEOa0E=
Subject key identifier:   58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48348039794035F0A66A380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 12 May 2025 19:06:39 +0000
Subordinate resources:    AS: 394669
                          IP: 52.124.57.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:03:97:94:03:5f:0a:66:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 12 19:06:39 2025 GMT
        Subject: CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c1:b2:8f:36:49:66:7c:23:45:d9:26:c4:c8:
                    90:2d:f6:59:55:37:93:90:f8:61:bd:36:bb:59:dc:
                    6d:75:45:f6:c4:b4:97:4d:5d:76:2d:28:24:00:76:
                    b5:35:ff:98:36:4d:91:d9:6a:8e:4a:f1:e7:4f:b8:
                    ef:63:36:cd:ae:06:e8:85:ed:a0:ab:dd:3b:3b:3d:
                    38:64:f5:8e:a9:53:70:ac:41:19:41:31:43:6d:af:
                    01:92:73:fd:0e:6b:fd:8f:4c:9c:3d:15:4a:04:95:
                    5d:44:be:9e:00:61:48:c6:e6:da:61:e1:1a:a9:d4:
                    5a:5e:8e:dd:19:31:c6:6b:87:d6:89:9b:7a:15:25:
                    c8:4b:8b:04:84:d1:68:b0:3b:ae:9e:f7:ab:68:fb:
                    eb:b6:ed:11:e5:44:dc:c8:8e:56:e3:03:2a:71:8a:
                    3c:a1:86:ed:a8:78:f8:40:de:f4:60:87:87:52:33:
                    3e:22:8a:f0:60:88:84:d5:9d:79:7c:8b:ed:21:8f:
                    cf:87:2d:a8:05:02:57:5d:7c:17:6a:08:b1:81:25:
                    96:fd:d2:20:2f:15:8c:8b:5f:5a:37:5c:12:ff:ab:
                    51:b4:d4:8c:f8:a4:10:1a:a8:da:9c:87:c1:0c:84:
                    9b:1a:11:37:40:39:7c:4b:03:1e:05:eb:0e:85:5c:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.57.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394669

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:ab:37:f2:93:7c:77:57:9e:b3:5c:fc:b1:9f:5f:52:09:
         c7:ef:3c:36:36:cd:67:ff:1c:5c:1c:3a:41:51:a9:c4:5a:3c:
         32:14:6d:02:e0:4c:a8:9f:0b:d5:33:62:79:55:db:f4:7c:5f:
         75:b1:1f:5b:91:fc:60:c1:4e:74:8a:7e:39:ac:bc:ae:d4:37:
         72:5e:74:5c:67:f5:91:30:d5:22:a0:31:a6:97:51:52:ae:2f:
         f2:b2:e9:41:0f:a8:95:98:5b:37:d1:f0:4d:49:83:7d:9b:06:
         66:01:f9:5a:fa:13:c8:52:98:c8:91:67:8f:30:1c:c7:19:ef:
         0e:1d:96:76:67:63:d4:60:d6:6c:76:df:55:3a:3d:7f:dd:af:
         8c:c7:d3:c5:63:2c:8b:0a:89:bc:58:2a:a0:01:c2:3f:9a:dd:
         09:40:c7:08:b4:b4:96:4f:54:43:9e:94:d3:39:44:2f:bc:6f:
         57:4d:19:e0:2d:79:20:7c:72:b6:3b:c5:6d:81:67:3f:13:f8:
         0a:1f:05:5c:b8:9c:c7:07:6e:57:da:d6:f1:7c:21:9a:a0:3b:
         6d:45:e3:a0:94:72:ff:1b:87:27:4c:90:ea:e4:52:3b:df:b4:
         d2:fe:ba:1b:78:11:d7:07:ff:1b:f9:6c:71:2b:24:66:0d:80:
         55:6c:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:28:00 2024 by rpki-client on console-ams.rpki-client.org