Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer
File:                     8da2ab18-c7fe-481a-a5e3-31579c83e101.cer (raw, json)
Hash identifier:          WJCrJ9ez/dg/ruehiITaA05/vuSeq8AoWlRk3WEipgE=
Subject key identifier:   5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842FF223BA1A9AC178BE1AE9500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Aug 2023 00:45:21 +0000
Certificate not after:    Thu 27 Nov 2025 01:45:21 +0000
Subordinate resources:    IP: 69.161.208.0/23
                          IP: 69.161.220.0/24
                          IP: 69.161.222.0/23
                          IP: 206.188.192.0/23
                          IP: 206.188.195.0/24
                          IP: 206.188.198.0/23
                          IP: 206.188.204.0 -- 206.188.209.255
                          IP: 206.188.212.0/22
                          IP: 206.188.219.0 -- 206.188.223.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ff:22:3b:a1:a9:ac:17:8b:e1:ae:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 25 00:45:21 2023 GMT
            Not After : Nov 27 01:45:21 2025 GMT
        Subject: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:a7:9e:32:bc:73:08:bb:e8:2a:a6:0e:f1:
                    5d:83:e1:93:77:78:e2:db:06:3c:ad:97:61:fb:ef:
                    84:d2:8b:62:08:7e:e8:5e:69:0c:a5:35:76:d5:20:
                    07:f0:97:cf:e3:9a:6e:ab:5f:a9:ef:90:d7:ef:75:
                    08:0a:f7:36:07:9c:e7:3e:a3:13:75:2b:ba:ef:5e:
                    cb:3e:5d:a0:3b:08:5c:51:26:f3:f8:ec:3d:56:97:
                    e4:85:3e:27:2e:4a:d9:df:f7:b8:59:27:22:3f:38:
                    64:99:c9:2f:67:bf:fa:7a:f4:6a:cb:10:11:ad:1e:
                    d0:4a:76:39:c4:8d:27:69:0d:66:f7:84:67:4e:bb:
                    ad:be:83:ac:ab:30:91:aa:6a:95:2c:e0:03:47:63:
                    14:b6:8a:a5:16:62:f5:9f:3e:20:4c:bb:be:06:50:
                    59:78:ab:fe:f3:a3:26:c1:25:c8:c8:7f:07:9a:94:
                    c4:0c:4b:7b:bf:8e:8c:22:54:67:43:ee:38:00:d4:
                    e1:52:4c:53:18:51:73:0f:36:c0:19:77:ba:48:8d:
                    93:b8:46:8b:18:68:9d:9a:54:8c:b7:9a:f6:69:f4:
                    b9:16:df:3e:46:1c:2b:c6:95:b7:ce:2d:65:d8:01:
                    6f:2a:09:47:20:fe:d7:b4:a5:8b:63:2e:61:b8:23:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.208.0/23
                  69.161.220.0/24
                  69.161.222.0/23
                  206.188.192.0/23
                  206.188.195.0/24
                  206.188.198.0/23
                  206.188.204.0-206.188.209.255
                  206.188.212.0/22
                  206.188.219.0-206.188.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:98:95:61:fc:b9:5e:88:ed:d2:01:bf:80:85:02:4b:27:
         a0:ad:93:2f:e0:e9:06:b2:67:96:36:24:f9:27:93:ea:f4:02:
         ec:cf:11:39:52:6f:c0:4d:b5:30:fa:e9:c0:e8:79:0e:de:6e:
         b4:81:26:bb:f2:79:5e:ac:4a:8a:f3:93:9f:fb:c5:7f:02:82:
         a3:5f:f4:ba:85:50:62:22:d0:71:6b:0f:08:29:09:40:3c:e6:
         41:5c:f6:28:08:db:0c:cb:57:6f:74:43:a2:f2:9e:c4:f3:a5:
         4e:11:a8:a2:e2:34:03:f9:8e:b5:c1:d7:2d:21:9e:20:dc:2c:
         84:e9:c9:75:d8:0f:d2:15:22:71:c5:7c:de:20:2c:65:b8:80:
         8e:84:f6:99:de:3d:62:c6:1b:05:b0:87:87:27:b8:19:51:06:
         1b:db:c5:e7:d5:a1:a1:09:38:18:31:a8:72:98:3e:f2:a4:51:
         53:76:9a:1e:3b:0a:87:bb:40:62:f0:bd:4b:2e:44:6e:74:14:
         09:1a:91:1a:49:fe:f3:81:8d:e7:9a:1b:5f:0e:37:b6:c9:49:
         ee:e1:0c:d6:d4:46:54:4c:70:90:45:05:fb:d4:63:f2:4d:ad:
         7b:7a:e1:ba:d2:1e:9f:93:3f:e9:7d:04:df:f7:88:bb:7f:26:
         d5:76:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 02:16:15 2024 by rpki-client on console-ams.rpki-client.org