Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cf38c56-f14f-4024-82df-607f674f1068.cer
File:                     7cf38c56-f14f-4024-82df-607f674f1068.cer (raw, json)
Hash identifier:          vAPIGdxZ34Zjb9DwadZdWCT7/NTHRvP3hK4AMI+4cNA=
Subject key identifier:   4A:C2:D4:EF:F7:3C:45:99:48:EB:4A:53:D9:2E:7B:7A:A3:92:84:06
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858451478A7808ADEA96D3C8F0500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cf38c56-f14f-4024-82df-607f674f1068/7cf38c56-f14f-4024-82df-607f674f1068.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cf38c56-f14f-4024-82df-607f674f1068/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Mar 2024 01:45:20 +0000
Certificate not after:    Sat 06 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 16916
                          IP: 206.80.64.0/19
                          IP: 209.40.224.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:78:a7:80:8a:de:a9:6d:3c:8f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  3 01:45:20 2024 GMT
            Not After : Jun  6 00:45:20 2026 GMT
        Subject: CN=7cf38c56-f14f-4024-82df-607f674f1068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:cd:a5:d8:2c:77:72:cb:bc:7a:5f:72:d8:
                    6e:ba:c7:62:8c:dc:00:ef:89:ec:57:b9:bc:34:cd:
                    36:3a:ca:f6:95:3c:d5:8c:54:de:63:d5:34:b4:1b:
                    9b:ee:48:fd:00:41:47:69:59:45:4f:00:1b:b6:01:
                    5c:ea:99:91:6b:b3:8a:42:c5:b1:90:42:4f:41:23:
                    19:13:a1:54:c4:be:31:1f:12:76:56:59:b9:70:60:
                    b9:8c:22:4c:d3:53:c7:67:32:6f:b7:fc:e6:25:c9:
                    49:71:64:77:55:53:9c:b0:fd:a8:5e:91:38:80:c0:
                    f4:52:79:46:d3:03:15:17:1d:55:59:c7:b0:ab:68:
                    46:78:a8:ed:b4:41:4c:b6:a5:5b:97:f0:40:64:80:
                    53:bf:ee:77:08:e7:99:48:bf:64:31:1b:43:14:f6:
                    fb:f4:64:30:fd:0b:2e:48:fc:6b:56:f2:65:de:28:
                    92:7e:bb:7a:5d:f7:96:98:bb:d5:bd:13:2b:85:c4:
                    4c:b6:2e:01:76:9c:cb:29:7f:bd:20:e1:88:9e:37:
                    fa:8b:ac:ff:e1:e8:f0:df:29:4b:be:1d:6f:91:13:
                    12:91:b9:b6:7e:eb:90:3c:b8:d2:39:b8:65:76:a7:
                    ab:d8:76:c9:be:f8:14:68:15:88:64:33:f0:16:f7:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:D4:EF:F7:3C:45:99:48:EB:4A:53:D9:2E:7B:7A:A3:92:84:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cf38c56-f14f-4024-82df-607f674f1068/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cf38c56-f14f-4024-82df-607f674f1068/7cf38c56-f14f-4024-82df-607f674f1068.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.64.0/19
                  209.40.224.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16916

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:70:76:91:88:9f:c5:fa:65:6b:25:35:11:e7:7d:b2:cd:
         db:52:da:5b:e6:07:a6:66:ad:7a:f8:1c:c9:5b:d7:fe:ba:54:
         19:9a:a5:6e:4f:54:67:52:c5:74:8d:f4:3d:84:78:8e:b3:14:
         5c:de:2f:4c:de:5d:06:74:ce:65:2f:09:ff:10:ae:20:c9:54:
         78:0a:4e:4e:5f:0b:8e:e4:b1:aa:c2:f8:60:86:ed:7b:a1:21:
         84:1e:eb:ba:45:7a:8e:09:79:ff:cd:10:06:2a:4d:d8:fd:65:
         24:8e:10:f7:f7:44:e4:50:ff:9b:54:82:b8:55:11:4c:d3:c7:
         50:fc:9f:dd:72:4f:a1:04:96:79:6d:6b:4a:96:b8:75:72:f1:
         6b:dc:9b:53:fe:9c:1b:5b:24:4b:a3:3c:6c:a5:94:ac:c3:0a:
         ed:93:65:21:a4:51:57:bd:a0:4c:e8:66:75:01:c5:a8:f7:09:
         06:50:28:19:54:2b:7b:c2:89:df:bb:9f:34:43:78:2a:11:b4:
         7f:78:58:0d:d9:e8:83:20:36:3f:b2:7f:6c:6e:45:f1:97:6f:
         50:f8:e6:72:8b:15:91:8f:db:7c:d6:8a:d1:b3:7b:e3:a0:50:
         78:2e:31:2e:e4:7a:b6:ef:b5:01:47:fb:10:1a:d6:91:38:2f:
         b8:d2:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:02:28 2024 by rpki-client on console-fra.rpki-client.org