Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer
File:                     d41a3f41-d9b3-4528-8251-900156f4efac.cer (raw, json)
Hash identifier:          O5sBC97cxAhCHnJ5xigyiBRek0lWwytGRD4dzhTaHKI=
Subject key identifier:   39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844392B30B15DBC0A2AD0C0FD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Dec 2023 12:27:14 +0000
Certificate not after:    Thu 19 Mar 2026 00:45:14 +0000
Subordinate resources:    AS: 14525
                          AS: 395077
                          IP: 64.22.120.0/23
                          IP: 199.34.92.0/22
                          IP: 216.250.230.0/23
                          IP: 2604:c0c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:39:2b:30:b1:5d:bc:0a:2a:d0:c0:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 15 12:27:14 2023 GMT
            Not After : Mar 19 00:45:14 2026 GMT
        Subject: CN=d41a3f41-d9b3-4528-8251-900156f4efac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:95:43:08:76:e7:7b:63:18:1a:75:cf:b3:
                    34:d2:4f:87:57:d6:19:7c:3d:fb:00:d6:2c:52:4c:
                    3c:ca:89:90:49:82:59:ab:f5:f5:4e:0c:af:c6:9b:
                    80:ce:7f:0d:ad:04:44:d1:2f:78:c3:1e:5d:82:2c:
                    a1:2d:bf:49:99:2d:ca:c8:b7:58:bc:03:f9:8c:1b:
                    47:1b:dd:ff:db:fa:7c:9d:00:f9:44:d1:08:b4:12:
                    03:7c:18:de:1c:4e:22:66:d3:b3:8a:b7:df:70:24:
                    8e:2f:8a:37:b7:fe:fd:3c:cf:20:05:e6:55:3c:78:
                    fa:38:6a:c6:fc:49:40:cd:4c:2f:5c:5c:7a:1b:79:
                    a5:09:ec:fd:60:ce:5c:74:ef:58:a1:3c:cc:b0:62:
                    97:4f:8c:86:0a:96:29:89:82:7b:62:e5:e2:c4:5e:
                    98:04:ab:db:20:f7:6d:e5:91:1a:42:22:d4:63:f1:
                    a1:28:dc:07:00:7f:31:8d:24:ca:c0:b5:7f:09:0f:
                    0c:46:dc:11:91:56:73:4b:7d:a6:81:1e:81:13:61:
                    f9:80:04:47:ff:7e:cd:49:75:20:dc:be:66:4f:fe:
                    78:be:d4:44:5e:0b:21:b4:ed:3d:ba:08:f7:68:75:
                    20:0b:11:38:63:a5:12:ad:6e:78:9a:25:d2:48:39:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.120.0/23
                  199.34.92.0/22
                  216.250.230.0/23
                IPv6:
                  2604:c0c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14525
                  395077

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:bb:70:4c:98:ff:3c:1c:c6:10:e3:07:ef:52:21:6e:66:
         46:e8:27:59:f8:2b:62:79:c0:10:47:51:94:0c:59:22:f5:f2:
         e5:1d:3e:39:c6:4c:b4:2b:9f:e4:bf:4e:f5:23:3e:95:76:c1:
         50:b5:8b:ee:db:ec:f6:d0:e8:53:f1:05:40:6a:48:9f:f2:f8:
         03:fc:e2:dd:2e:b8:ed:20:5f:61:f8:20:22:c8:b8:35:dc:51:
         b3:92:c1:79:bb:b0:be:45:a3:cf:bf:3d:28:48:f1:ef:1d:e6:
         94:e7:8c:88:5b:7d:b5:e7:e2:e5:76:d8:9f:57:39:3d:3e:b3:
         90:e4:d9:da:53:34:e7:43:aa:89:09:78:a1:a4:15:65:d5:95:
         94:47:09:af:70:82:e7:fb:ac:a4:11:5e:9c:2a:9c:be:d6:c5:
         5f:0c:17:d3:b7:7c:f2:c8:05:48:b5:4e:bb:62:b1:b2:a5:75:
         15:c7:a9:8a:a5:a7:c1:94:52:10:60:b1:26:2e:7b:3b:1d:83:
         f6:3f:f4:c0:c3:c9:d0:95:62:9c:a8:4e:5e:44:3f:f9:17:0f:
         fc:28:30:e0:3c:83:df:91:f3:28:0f:8e:10:6c:4d:37:4c:ad:
         b6:ff:3e:99:5d:21:a1:9e:2f:63:f0:8f:20:ed:bb:5f:59:dc:
         1c:7c:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:20 2024 by rpki-client on console-fra.rpki-client.org