Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer
File:                     bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer (raw, json)
Hash identifier:          rT7paJ5stMEzVnMSCwVKJNb25RtXQ2dOHiOMWCh4Iew=
Subject key identifier:   E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE8744F1F622814052547CEA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:20 +0000
Certificate not after:    Fri 02 May 2025 19:06:39 +0000
Subordinate resources:    AS: 395277
                          IP: 192.101.143.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:44:f1:f6:22:81:40:52:54:7c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:20 2023 GMT
            Not After : May  2 19:06:39 2025 GMT
        Subject: CN=bffdabcb-09d5-4804-be56-5d34d53f6cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:be:2d:14:aa:1a:4a:b3:78:2a:b6:f7:6b:
                    e1:86:8a:d8:5b:cc:3c:f0:9d:fa:88:e6:39:22:a0:
                    6c:77:3f:4e:57:25:f9:ac:7f:0f:ee:07:e4:95:7f:
                    ca:f7:b5:d9:8f:3a:82:fa:fb:ab:fa:84:ee:fc:0e:
                    f6:57:9b:d3:95:bf:58:0c:ee:f9:a6:11:7e:12:d3:
                    85:d3:30:8b:fe:83:95:2f:bc:d1:22:7e:88:c3:be:
                    88:c4:17:bc:16:36:0f:6e:42:f9:9e:fe:eb:c4:87:
                    40:8f:13:9c:21:85:c0:2e:06:05:85:4a:f8:f2:43:
                    c3:7b:f8:aa:a6:6b:31:4b:7e:52:a5:54:84:6d:5c:
                    8b:46:6a:fb:e7:c9:50:9d:dc:67:7c:6e:fd:e3:03:
                    0d:b7:69:c8:d0:00:12:44:4a:25:3e:a7:45:4b:52:
                    b9:c8:7f:cd:36:f9:98:26:08:b4:9d:85:1a:ab:82:
                    3d:ef:c1:4c:0b:4a:18:9a:5c:db:e0:55:84:6b:d4:
                    0a:d9:6e:02:23:fc:2c:b6:fa:fc:22:3b:1e:10:99:
                    23:b2:59:6a:c0:9c:f3:f6:77:2b:63:57:c3:05:d9:
                    aa:5a:3a:b4:af:98:6d:0a:a0:b3:cc:16:6e:a1:bd:
                    42:7a:8f:09:7e:d6:31:37:de:41:7a:63:dc:e7:7a:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.143.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395277

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:91:60:1d:ab:23:fc:c7:8b:db:3f:44:bc:ad:60:ec:1e:c7:
         12:8c:e8:1d:4b:07:7c:e0:98:e8:20:be:c6:0e:d6:5d:09:bf:
         ac:9d:36:38:5a:41:d0:cd:c2:16:5b:29:a4:37:ba:3e:20:a1:
         90:e2:93:bc:80:45:44:b9:f8:ec:e3:fb:b1:14:cd:bb:54:6f:
         9b:27:ad:8d:09:bf:ca:5b:33:23:e7:8c:5b:18:d3:0a:57:dc:
         29:b7:29:fc:26:b6:10:e3:fe:0e:3b:24:8c:c5:16:21:80:02:
         76:6c:bc:70:86:e0:7a:d6:9c:05:72:ea:ae:63:86:ba:52:fb:
         f5:ff:36:30:ac:19:dc:cc:0f:6d:00:d4:d2:83:ef:d2:75:21:
         16:fa:54:ec:ee:cb:4d:87:19:c7:74:1a:0d:43:d2:b6:78:54:
         bf:d4:6c:12:98:7b:27:9d:d5:76:19:31:10:c0:59:a2:c2:b8:
         4b:92:a6:df:78:d6:cf:37:60:92:0c:04:7c:e1:29:5e:f9:e4:
         75:49:0f:ba:0c:95:07:7f:3c:3d:38:2d:cd:3b:61:9a:21:05:
         f0:52:c0:41:98:e9:82:b0:02:c3:02:03:87:93:51:ae:22:72:
         8b:db:3b:73:68:a5:a7:0d:31:aa:e8:a2:d3:00:5f:f3:78:a8:
         dd:dc:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:29:04 2024 by rpki-client on console-ams.rpki-client.org