Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
File:                     d3a00337-0fdf-42e1-9343-424fd474da93.cer (raw, json)
Hash identifier:          sLpfo8H9H2a7H6T0hRFJ+RtJRd0UgRRBIiSfHT5blLM=
Subject key identifier:   CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285848C6DEA6CAA68DEF34785CF0A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Feb 2025 01:45:33 +0000
Certificate not after:    Tue 11 May 2027 00:45:33 +0000
Subordinate resources:    AS: 27398
                          IP: 74.123.136.0/22
                          IP: 162.218.248.0/22
                          IP: 206.81.160.0/22
                          IP: 2602:fed5::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:de:a6:ca:a6:8d:ef:34:78:5c:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb  5 01:45:33 2025 GMT
            Not After : May 11 00:45:33 2027 GMT
        Subject: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:73:3b:d0:c2:11:e5:db:78:0f:53:98:e0:
                    a8:7a:5a:a3:1e:16:64:01:19:84:cb:4f:a0:cd:68:
                    b7:4c:95:be:59:8d:b4:6e:04:57:32:10:40:d4:e7:
                    28:9a:f9:85:5a:da:d3:4e:cb:fe:97:da:bf:bc:91:
                    71:3c:6f:db:f3:75:6d:53:e9:75:05:79:c3:bb:42:
                    2b:0c:1c:0c:6d:fe:c5:d7:df:3f:4a:b0:9d:1b:7b:
                    d1:a6:1c:2c:e5:36:4e:07:a9:91:39:fd:cb:d3:b5:
                    2d:dc:61:8a:79:41:7b:15:39:03:3a:5b:95:0c:7e:
                    90:2b:0f:1f:9e:71:41:74:ab:5a:17:37:79:e9:75:
                    95:e4:63:a6:29:6d:7d:bd:ef:3e:fd:4a:03:bd:0a:
                    a7:26:bc:60:d2:13:1e:e1:4d:59:0d:44:dc:62:a4:
                    0c:b2:d1:32:d4:0c:15:df:ca:84:4f:e3:95:f2:8e:
                    16:b5:8f:a1:24:9f:17:53:d2:56:9b:2a:e1:61:fe:
                    0b:f4:61:ab:d3:a0:94:40:59:ab:13:f4:79:a7:c6:
                    cd:e5:62:d6:54:fa:b2:38:43:ed:df:fb:5e:76:70:
                    2a:9f:de:3c:14:d5:ca:50:d2:73:a1:70:d3:2c:12:
                    ba:1a:f8:42:92:cd:32:fd:b1:cd:ee:f6:13:87:a0:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.136.0/22
                  162.218.248.0/22
                  206.81.160.0/22
                IPv6:
                  2602:fed5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27398

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:0e:3a:e8:e1:fd:14:c3:df:da:4d:44:43:35:07:74:f2:0c:
         af:7a:0a:1b:cd:f8:e8:1e:04:43:fb:bc:a8:be:f6:ed:dd:6b:
         1c:14:34:7c:c9:0c:43:0f:62:35:9a:03:5d:de:07:f2:21:79:
         9b:8e:3a:86:85:c1:dd:c6:45:2b:66:15:f8:5a:79:15:39:7f:
         2c:83:6a:dd:9e:59:ec:4a:2f:5b:bf:d3:fa:8f:d1:9b:7e:73:
         f5:4b:12:11:94:1e:5e:22:4a:2c:95:2a:c4:9b:30:87:62:b6:
         47:a4:7d:78:e3:6d:93:1e:66:00:ca:dc:4e:9c:c7:e9:e2:be:
         53:a7:c0:2f:11:9b:87:2c:b4:35:80:85:82:ea:93:6d:84:10:
         5a:cd:97:be:57:b2:70:45:5b:00:b1:d9:b4:ae:20:02:88:7b:
         81:06:8d:7c:e6:86:32:f2:64:5f:86:35:4a:03:31:f8:49:50:
         96:e1:5d:aa:82:80:6f:6c:47:35:23:6e:ed:c0:01:83:4f:b6:
         5f:d7:95:db:b0:83:47:c2:03:b9:42:34:19:c7:56:07:7e:c3:
         16:8e:09:3c:46:2e:1d:a2:9e:46:c6:db:d4:ba:c9:5a:bd:ad:
         d7:4c:22:05:5e:a9:b1:e7:dd:30:7b:d2:5d:0c:72:93:ce:28:
         0f:7a:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:51 2025 by rpki-client