Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d6531c19-a59c-42e2-8331-38225d25f0d6.cer
File:                     d6531c19-a59c-42e2-8331-38225d25f0d6.cer (raw, json)
Hash identifier:          AEoH/xh0bP2A7Gb/LGZVl2bWBaHEzAchOvBcEK0zRqY=
Subject key identifier:   98:24:35:FA:3E:09:68:39:89:C3:B9:20:59:76:F9:CE:75:AC:C1:A3
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4BB9EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d6531c19-a59c-42e2-8331-38225d25f0d6/d6531c19-a59c-42e2-8331-38225d25f0d6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d6531c19-a59c-42e2-8331-38225d25f0d6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Apr 2018 12:52:44 +0000
Certificate not after:    Wed 26 Apr 2028 12:52:44 +0000
Subordinate resources:    AS: 395700
                          IP: 204.68.207.0/24
                          IP: 2620:10f:b000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jul 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4b:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 26 12:52:44 2018 GMT
            Not After : Apr 26 12:52:44 2028 GMT
        Subject: CN=d6531c19-a59c-42e2-8331-38225d25f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:72:56:c6:59:25:b7:5b:53:1b:50:a6:bf:
                    e7:48:df:07:b9:4e:b6:22:d4:6e:61:a6:bf:e9:a4:
                    2f:5b:89:c4:0c:b7:7b:13:d9:81:b9:26:8e:ae:0b:
                    6a:0f:c4:14:8c:58:7b:7f:db:1f:6f:b6:68:7b:b3:
                    ee:6b:a4:99:d7:e5:7e:a5:51:a8:35:2b:e7:bd:f3:
                    81:7c:cb:3c:73:43:2e:fc:86:14:c9:ef:0a:3e:6d:
                    49:8d:7b:84:e6:73:7a:ee:7f:48:19:73:5b:0e:4b:
                    76:ab:61:8c:b8:d0:a5:6b:b4:c0:f4:ed:45:ff:82:
                    97:ca:b6:09:8c:3d:c0:31:d6:25:2f:0f:af:a9:23:
                    5e:b5:e9:38:78:c4:15:96:9a:77:b0:4b:a5:69:a5:
                    6d:a7:cd:6a:e8:15:db:7d:f7:5e:22:26:b3:13:90:
                    16:bf:d5:93:84:99:54:95:de:e7:db:71:d1:38:50:
                    19:19:f0:91:3e:cc:40:74:4b:c4:4c:ef:2f:aa:d4:
                    09:e6:e2:c7:29:34:e8:df:00:dc:8c:df:a4:2e:65:
                    2b:a9:df:1a:1c:9e:6a:85:31:a3:ef:cb:af:41:ab:
                    e5:6c:1e:41:00:80:05:ad:57:af:5f:6e:f6:4a:ec:
                    ec:39:bd:cd:6c:8f:1f:1b:07:0b:e0:b1:59:7a:d8:
                    74:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:35:FA:3E:09:68:39:89:C3:B9:20:59:76:F9:CE:75:AC:C1:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d6531c19-a59c-42e2-8331-38225d25f0d6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d6531c19-a59c-42e2-8331-38225d25f0d6/d6531c19-a59c-42e2-8331-38225d25f0d6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.68.207.0/24
                IPv6:
                  2620:10f:b000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395700

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:67:2d:8d:2b:50:84:ee:7b:0b:fc:ad:74:a0:e4:6f:59:
         b2:d6:41:d0:da:a5:43:d0:65:a3:5b:ec:da:2d:cc:63:30:18:
         8e:d7:4c:d3:cd:b9:46:d2:69:5f:44:f8:36:7a:a5:2e:30:04:
         2b:0e:06:c4:7c:8c:39:09:9c:da:42:52:45:18:23:4f:98:06:
         77:67:a4:3e:09:9a:8e:af:c3:06:3a:ee:a9:52:c5:bf:61:5a:
         fa:51:9f:62:65:57:f9:00:33:36:46:9a:3e:99:b5:e7:ca:d0:
         96:cc:2d:90:75:f0:2d:2d:bf:d5:ce:35:5f:0e:e9:0e:e8:6b:
         0e:3a:53:fb:d9:ab:88:0b:b5:35:2f:fd:f3:7d:8a:46:3b:88:
         00:6f:83:2b:cd:7d:cd:f5:91:f5:c3:96:97:14:a3:8c:17:23:
         be:e8:35:a3:10:6c:df:87:f4:0a:f7:84:cd:3c:c6:3e:a3:10:
         2c:95:56:74:6a:bb:2f:12:10:56:a6:0d:9a:7a:c6:91:94:24:
         8e:62:52:ca:ec:9d:e4:94:84:d1:09:17:90:bf:49:b7:84:64:
         f4:4e:d1:7c:ed:41:62:7f:bd:5a:37:39:89:35:7c:4c:18:97:
         5c:1b:4e:1a:67:34:a5:d2:a9:97:46:8a:ef:ea:9d:48:82:27:
         2c:da:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:26 2023 by rpki-client on console-ams.rpki-client.org