Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
File:                     946cb195-9b9a-4836-9152-b97e9e831144.cer (raw, json)
Hash identifier:          /2fSyOB4HGqPFvh1kbFU3fQwK8/oKM9tv55B1lODBHc=
Subject key identifier:   D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858442197191BCBC66230195DBCF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Dec 2023 01:45:15 +0000
Certificate not after:    Wed 11 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 21935
                          AS: 396292
                          IP: 142.54.0.0/21
                          IP: 142.54.16.0/23
                          IP: 142.54.32.0 -- 142.54.41.255
                          IP: 142.54.200.0/23
                          IP: 142.54.240.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:21:97:19:1b:cb:c6:62:30:19:5d:bc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec  7 01:45:15 2023 GMT
            Not After : Mar 11 00:45:15 2026 GMT
        Subject: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:3d:72:2b:11:9f:e6:61:3e:68:1a:3c:9c:
                    5b:a1:60:95:0b:d1:fa:4b:8f:e5:3d:a9:c4:ba:d7:
                    35:6c:db:2e:a8:14:ea:ce:fe:f5:d0:f0:21:37:17:
                    2b:7d:35:23:50:e2:c5:10:7b:0c:40:7d:2f:e8:ff:
                    79:c5:68:bd:e1:0e:e3:d8:b6:24:8e:ba:28:a8:51:
                    18:80:cb:b8:2d:ba:a0:a2:23:ac:e3:5b:4e:81:54:
                    07:a1:50:ad:15:b2:dd:2e:a1:e9:dc:1b:6f:c2:51:
                    84:4e:31:08:52:cc:28:a8:48:df:f8:5b:32:51:dd:
                    3f:8d:b6:72:24:69:83:6b:93:f3:4a:2c:78:fb:a0:
                    f0:56:aa:81:43:f8:4c:b7:fc:8f:56:38:1c:0b:94:
                    f2:ba:c4:67:1f:78:73:f7:6e:56:56:7a:34:ca:6a:
                    0c:e2:ec:7b:2d:07:ee:b4:31:60:dc:37:69:9c:6d:
                    f6:a2:1b:aa:fe:25:bb:7f:c6:6d:96:49:2c:39:42:
                    28:78:1d:33:1b:a6:e0:be:29:a0:d7:ec:f5:88:d7:
                    e1:17:9e:86:28:32:55:c4:db:d7:a0:c5:3f:50:8e:
                    5f:fc:34:f9:e9:60:6d:b8:34:40:b8:7b:f3:b9:93:
                    a9:37:78:8d:8e:03:79:3f:18:24:13:5e:f9:eb:f4:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.0.0/21
                  142.54.16.0/23
                  142.54.32.0-142.54.41.255
                  142.54.200.0/23
                  142.54.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21935
                  396292

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:fc:dc:4c:71:9a:5d:a2:19:5e:5a:ce:be:04:f3:d7:0d:
         fd:57:0b:e4:f9:88:1b:18:39:96:ab:02:13:04:65:af:04:31:
         3d:34:ba:7f:86:b1:a9:e9:35:3a:50:1a:b4:85:22:94:4e:59:
         f2:59:77:a7:f7:f2:ca:16:3e:40:8e:5d:21:b2:3f:23:da:91:
         eb:35:30:50:0f:9a:a3:e4:27:1e:4c:79:0c:8d:b9:a9:fa:bf:
         36:40:1b:28:72:72:99:10:48:28:70:34:50:8c:56:a7:93:e5:
         44:79:00:91:a4:0f:a0:ea:f8:45:ce:b2:99:db:68:05:3e:45:
         f2:fe:36:35:b9:c3:70:c6:ee:9e:b2:bc:ab:df:e8:33:06:76:
         97:2a:89:ba:12:19:1a:65:ca:e3:ad:d1:af:34:51:38:1c:29:
         6e:68:08:56:7e:a1:68:16:11:43:74:f2:89:1c:84:27:8f:6e:
         5b:5a:91:dc:af:77:d8:9e:a0:65:d6:62:d3:1f:c7:3e:42:c4:
         7b:a0:e7:cc:0f:89:e0:12:fd:09:29:47:83:38:51:b7:2e:58:
         30:32:d3:f8:9d:47:10:f4:26:cf:bc:a9:d7:76:c2:ba:9d:ce:
         39:c2:85:aa:ec:0b:1f:e2:74:ff:9c:9c:13:25:92:9a:80:44:
         46:a7:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:33:02 2024 by rpki-client on console-fra.rpki-client.org