Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3.cer
File:                     c743b329-2385-4bb0-899d-c1639569faa3.cer (raw, json)
Hash identifier:          8o/I4RPdnEyMElQ/vHZ8tbATNRNYcnjuke9zk+JSwDA=
Subject key identifier:   9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834F85DCA56D65AD9E5C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 03 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 399199
                          IP: 172.99.192.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:85:dc:a5:6d:65:ad:9e:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  3 19:06:39 2025 GMT
        Subject: CN=c743b329-2385-4bb0-899d-c1639569faa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:ca:03:8c:d2:53:13:b8:a5:4e:f7:ba:cc:
                    19:67:3b:69:5f:b1:00:8e:b1:eb:0f:71:01:c2:05:
                    e7:d2:4c:cf:32:30:fe:bb:71:ef:69:8a:5c:dc:e0:
                    4c:24:46:b6:53:67:d6:c6:cd:b9:ad:67:06:f0:e1:
                    93:dc:1c:ca:21:07:75:4f:fe:5c:0f:91:3a:f8:8e:
                    2e:1f:18:7d:90:15:6a:44:89:a9:be:01:58:e7:cc:
                    61:c6:7b:cf:2a:aa:f0:bd:a5:ed:5c:49:a1:5b:ce:
                    47:aa:0b:24:b6:6d:95:ff:23:c0:6c:d4:18:6b:d6:
                    03:50:bd:86:d7:8e:56:0f:be:bf:d9:03:5b:59:00:
                    45:a2:e1:df:56:2d:32:6f:b3:e5:59:8f:8d:4a:00:
                    25:de:ec:28:b3:91:2d:c0:2e:eb:ea:71:b9:2e:88:
                    f1:a1:cd:37:fa:a1:7d:4d:6d:58:9a:fd:87:9f:be:
                    1b:45:76:f9:cd:ef:0a:8e:57:66:56:5b:4d:43:67:
                    3a:94:1f:5a:6e:bc:56:d4:86:9c:59:31:6f:3f:96:
                    5c:bb:06:23:ed:35:b0:9e:f8:f0:4a:86:1d:ce:dd:
                    66:42:61:c7:14:42:1c:72:e5:36:9d:14:df:72:d9:
                    b1:7a:cf:6a:ee:45:c5:1d:78:bb:d7:1c:53:7f:ab:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:5F:66:B7:3C:80:89:49:B2:4A:36:5B:57:D2:58:0F:F8:3A:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c743b329-2385-4bb0-899d-c1639569faa3/c743b329-2385-4bb0-899d-c1639569faa3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.192.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399199

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:69:70:ba:f8:00:41:5e:7c:49:15:3a:a9:0b:9f:ed:f6:b3:
         36:8a:f6:8c:c0:fa:b4:b0:93:a2:2f:b1:a9:00:7c:6d:fa:df:
         26:7b:13:70:cf:eb:a0:7f:ce:b5:9d:0f:12:4d:f5:08:0b:63:
         57:b2:f7:89:26:69:35:4b:2a:61:47:62:10:93:5c:b1:7e:bb:
         e9:cc:74:4c:65:5a:73:88:d8:6a:5d:3a:ca:cf:04:6e:2e:b9:
         fc:e6:8a:ba:50:ca:a9:44:8c:51:91:e1:5c:fa:d9:26:90:e7:
         df:62:25:91:fe:9c:74:c8:79:5a:45:db:0f:49:97:c2:8a:4c:
         c9:60:e5:96:84:f2:9a:58:79:c0:37:1e:58:c2:e4:bf:2c:8f:
         a0:e9:cc:91:0e:29:09:21:95:1c:3d:e8:13:03:f9:b5:bf:aa:
         3c:de:8c:b5:1c:01:ff:62:2b:43:81:f6:6c:56:d4:cf:b1:e4:
         93:02:dc:76:d0:ee:9d:ef:6a:69:dd:0a:2b:e1:b0:d7:82:b6:
         51:60:e5:07:4d:62:0e:44:5f:35:3f:a5:7c:cc:42:b8:63:4d:
         51:83:3c:3d:15:6f:cb:bf:c2:c5:7e:36:4b:ee:7c:e2:3d:76:
         8f:eb:86:ff:26:a9:8b:64:56:1b:3a:6c:e7:25:36:35:3c:24:
         86:de:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:52 2024 by rpki-client on console-fra.rpki-client.org