Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190.cer
File:                     8a69f9d3-746f-47a4-971f-36ee3a52a190.cer (raw, json)
Hash identifier:          8w3AQwqWCFSCPyzbo4nPBE0f7AVFkxG7pmGYbNIb9P0=
Subject key identifier:   16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4C411C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Nov 2018 11:55:47 +0000
Certificate not after:    Mon 20 Nov 2028 11:55:47 +0000
Subordinate resources:    AS: 19551
                          IP: 45.60.0.0/16
                          IP: 45.223.0.0/16
                          IP: 107.154.0.0/16
                          IP: 192.230.64.0/18
                          IP: 198.143.32.0/19
                          IP: 199.83.128.0/21
                          IP: 2620:28:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jul 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4c:41:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 20 11:55:47 2018 GMT
            Not After : Nov 20 11:55:47 2028 GMT
        Subject: CN=8a69f9d3-746f-47a4-971f-36ee3a52a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d5:35:a8:c8:49:6b:93:d8:a4:89:91:0f:39:
                    4f:ba:90:b5:ef:ab:b7:df:70:1a:ab:51:8a:59:24:
                    a6:9d:61:4e:a3:57:d5:7d:58:db:e3:3c:47:66:00:
                    73:c8:e4:57:dd:09:25:8b:34:0c:27:8b:1d:4c:9f:
                    42:56:ad:97:05:59:43:73:05:6c:dd:e7:b1:3b:dc:
                    83:c8:e2:4f:c2:33:7c:71:8d:68:67:c4:b6:72:b9:
                    8e:2a:d0:03:49:1e:72:4b:88:90:76:ce:34:2f:67:
                    fd:d0:f0:dc:91:44:f9:d6:ff:4b:ea:c5:66:85:b7:
                    97:f3:a1:43:76:93:2d:d3:1e:89:eb:6c:10:7e:ff:
                    38:91:97:3b:4d:c6:de:90:d8:61:5f:8b:86:73:fa:
                    c6:72:37:b5:22:e2:20:cb:24:4b:4a:05:38:98:17:
                    2b:e0:45:a5:b4:17:93:9d:b9:3f:c9:7b:39:6d:35:
                    c2:78:91:3d:c8:81:38:26:47:d8:36:cc:39:82:da:
                    d2:22:92:e3:d5:d7:14:67:3d:8c:e9:4b:c5:b2:87:
                    16:e6:b9:dd:76:54:e5:01:92:27:04:0c:e7:37:74:
                    63:3a:0b:35:a0:4c:05:a2:db:98:d6:5e:f1:d4:6c:
                    97:de:7f:43:4d:a2:a6:5c:82:40:47:43:47:b1:7b:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:E8:A9:FC:0C:22:F4:68:BE:86:8C:B0:69:47:3E:55:3A:B0:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8a69f9d3-746f-47a4-971f-36ee3a52a190/8a69f9d3-746f-47a4-971f-36ee3a52a190.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.60.0.0/16
                  45.223.0.0/16
                  107.154.0.0/16
                  192.230.64.0/18
                  198.143.32.0/19
                  199.83.128.0/21
                IPv6:
                  2620:28:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19551

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7e:87:05:0a:b3:10:65:e7:c1:a2:c4:45:db:1d:fb:b1:73:
         91:34:5b:c8:69:ab:9d:fd:fb:fc:1b:26:66:d2:a7:61:7c:06:
         e1:af:7a:d3:94:75:33:e2:d8:e0:d4:e0:5d:e8:6b:27:cf:e8:
         9d:a0:48:ce:1f:29:e8:94:c9:6d:4e:c0:43:79:d8:e2:e5:e5:
         f3:53:67:7f:cc:aa:fd:37:d5:2d:3e:94:f5:e7:0a:a1:62:34:
         80:c6:37:2a:b4:00:8c:b5:93:97:47:49:5b:40:67:fc:2f:fd:
         a0:2d:d8:26:98:80:50:84:4d:5f:8d:a1:7a:31:07:fe:2c:e0:
         16:45:6f:8d:cf:e4:22:5b:b1:c9:a6:a5:1e:5e:4c:76:18:eb:
         d4:9c:99:1d:b5:34:7f:28:72:e2:d5:82:6b:e4:ab:fa:94:09:
         81:8a:88:06:4b:f0:23:c3:07:a5:c7:d9:f5:66:b2:ea:84:fe:
         bb:14:3a:a8:12:43:49:b2:41:f4:e0:c5:6e:5e:0d:db:eb:96:
         79:4a:6d:90:e4:90:63:c1:b6:75:eb:07:6e:53:b9:08:2d:5c:
         96:16:2f:3c:c1:f7:07:53:c1:49:0b:3a:cf:2e:df:7f:62:a5:
         17:b6:ac:6d:56:d3:11:15:10:09:6c:87:7b:d6:ce:28:83:5b:
         c7:86:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org