Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
File:                     ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer (raw, json)
Hash identifier:          HJNRWRjF4vPOE8KsLzVZrEHFnE9nTjRy6ZBBSqujJZY=
Subject key identifier:   58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E483484C31C553CCED648F60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 14 May 2025 19:06:39 +0000
Subordinate resources:    AS: 398797
                          IP: 199.255.148.0/22
                          IP: 2602:fd1e::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:4c:31:c5:53:cc:ed:64:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 14 19:06:39 2025 GMT
        Subject: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:e6:b7:33:0c:70:b1:d6:4c:fe:76:37:14:
                    71:8c:d5:5b:88:43:db:44:7e:b8:33:d4:42:da:f9:
                    88:be:9a:7f:6c:2d:f6:2f:28:12:06:40:5d:d2:37:
                    cf:02:7c:79:7e:9f:de:c7:b5:ec:34:f8:ae:2d:ef:
                    ec:40:d8:ca:24:d2:97:d4:93:2b:0e:21:e7:ff:84:
                    48:cb:73:b2:99:8f:fe:63:ba:10:56:fa:70:54:75:
                    08:cc:76:e0:60:fa:78:4c:d0:12:a7:03:fe:08:ce:
                    ea:56:14:72:45:85:35:59:4a:36:b3:67:5c:72:76:
                    0e:c1:85:f6:88:ec:81:61:2e:cd:dd:f2:d6:e0:c0:
                    51:72:97:91:1b:39:7e:f0:bc:e9:6f:2a:7b:70:ad:
                    f3:5e:38:51:13:b7:be:0e:2c:92:a8:6f:bb:dc:7d:
                    44:45:e6:f7:60:79:84:ca:4e:d7:a2:db:de:7f:0f:
                    67:49:7c:39:77:58:92:bc:8d:90:80:24:d9:19:be:
                    3e:5c:83:4f:bd:16:73:d9:cb:d1:8a:d1:09:e1:5e:
                    1a:84:25:f4:5e:65:1f:60:b4:d7:0b:a8:7f:d1:03:
                    d6:80:96:a8:97:d9:b4:d8:4f:ba:e0:7c:86:27:8d:
                    59:96:30:1d:04:0e:27:53:91:05:65:2e:c9:84:84:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.148.0/22
                IPv6:
                  2602:fd1e::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398797

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:ec:a0:9d:95:4b:04:f9:1f:d2:f6:7a:00:90:09:7d:fa:
         76:57:69:7d:13:39:c5:bd:5f:88:8a:79:21:da:eb:e0:8d:dc:
         81:dd:c4:51:43:a7:75:26:20:19:3c:44:94:c9:fb:58:2a:bd:
         99:18:fc:8b:08:1d:b9:e0:b9:28:a1:52:66:da:f0:c8:8f:31:
         a9:eb:2c:9d:91:46:92:80:a0:65:4a:37:4a:19:68:0c:f9:dd:
         5e:c9:5a:02:fe:01:31:49:e6:14:2e:69:52:a5:5c:61:98:f0:
         d3:1f:d6:37:c3:19:9f:ea:78:e0:64:67:b1:7e:95:c0:5f:e6:
         da:83:e5:40:1c:ec:e7:ca:01:90:f4:58:c2:65:5a:cf:aa:3a:
         bc:8d:c8:ed:c2:33:fa:e3:e3:5c:7e:a0:f6:72:28:01:d7:82:
         d8:89:09:f2:27:91:db:7a:f9:2d:ce:fd:8e:52:22:33:e9:a0:
         38:3a:6f:36:91:12:df:94:8c:c6:4e:b1:74:12:07:8c:b7:4c:
         67:af:0b:fb:c8:b9:65:24:3b:4c:2d:81:22:52:55:7c:ba:43:
         f7:ac:1f:cb:ad:5e:de:1d:76:c0:b2:f9:75:9a:42:0a:f3:a6:
         71:f1:d2:fa:67:94:46:31:04:30:af:5a:0b:fd:e2:61:cf:66:
         88:4a:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:20 2024 by rpki-client on console-fra.rpki-client.org