Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
File:                     d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer (raw, json)
Hash identifier:          ZDXm94rv7Sfi+wnTJvHTz23T+KeKeA/ZZGMjeJr8QJc=
Subject key identifier:   DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858471B9E289D629B43D416351900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 09 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 62654
                          IP: 57.140.0.0/16
                          IP: 162.33.226.0/23
                          IP: 162.33.230.0/23
                          IP: 168.245.155.0/24
                          IP: 192.84.38.0/24
                          IP: 216.24.45.0/24
                          IP: 2606:3dc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:9e:28:9d:62:9b:43:d4:16:35:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep  5 00:45:26 2024 GMT
            Not After : Dec  9 01:45:26 2026 GMT
        Subject: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:f6:05:64:60:4a:55:b0:d5:45:61:02:22:
                    df:7e:9a:c3:71:09:c3:ee:ef:c4:bf:83:23:35:c7:
                    5e:4d:e5:80:74:43:7f:29:57:a8:f8:46:2e:b5:b8:
                    3d:0f:d8:f7:d0:db:5d:33:71:da:01:0e:e7:f7:4d:
                    d1:7f:b8:27:85:e5:27:9a:c4:68:57:50:4a:67:47:
                    bf:0d:72:ff:a7:8d:02:99:6e:f3:eb:98:02:8c:f6:
                    8f:dd:dd:a7:a2:d4:9d:b8:74:5a:54:78:2d:7c:c6:
                    72:a0:e9:23:8b:c0:5e:a2:00:8a:78:79:96:76:75:
                    1d:09:e1:e8:93:6d:f9:06:3b:bf:8d:2d:7b:ba:54:
                    36:0a:1b:49:66:f8:8f:e0:42:68:21:5b:c6:39:6f:
                    fe:06:d9:f9:f4:10:e6:d9:03:12:07:d2:08:2c:13:
                    7f:fa:09:16:4c:08:c0:4a:c5:50:16:f6:37:a5:93:
                    5f:b0:94:26:f7:a8:80:f8:76:34:4d:b7:84:fa:0c:
                    c5:6c:74:99:e9:9a:20:f4:cf:ea:53:86:3b:d4:de:
                    ff:b8:f1:cf:61:1e:97:c6:1c:46:75:6b:52:89:f4:
                    65:ef:f8:9c:33:c1:23:41:57:48:fb:0e:a6:b9:bf:
                    6a:e7:95:fb:e0:32:d9:fe:49:a5:e7:04:8e:16:9b:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.0.0/16
                  162.33.226.0/23
                  162.33.230.0/23
                  168.245.155.0/24
                  192.84.38.0/24
                  216.24.45.0/24
                IPv6:
                  2606:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62654

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:96:47:07:89:94:86:1a:9a:fd:a9:c5:5e:cb:f3:3f:48:e7:
         3e:67:79:44:76:e2:c5:f5:65:ba:63:e2:e9:43:eb:7f:51:fd:
         1f:90:35:d6:01:29:9a:95:3e:20:1a:84:ed:92:16:e6:ce:5d:
         ca:78:fe:44:53:1c:ed:e1:d7:25:44:61:36:12:7b:74:c2:93:
         f9:7f:bb:07:8c:19:d9:bb:d8:7c:ed:8a:5a:ef:35:6f:f4:72:
         5c:2e:b4:fc:e4:5a:2e:54:ce:b8:85:c1:28:7b:e9:25:09:c2:
         3f:64:2d:08:c6:24:db:da:87:d4:de:8d:5e:da:ec:ee:8e:41:
         1d:b6:89:bc:da:a5:ed:96:f3:48:84:fb:70:3c:c5:e4:65:93:
         1b:7e:41:97:6f:d6:0d:e3:17:61:10:3c:00:04:6a:94:b3:2e:
         25:bf:a5:3c:fe:d2:97:23:45:8f:30:de:79:ad:87:a6:d6:ad:
         50:3a:76:74:ae:04:fc:74:ae:73:3d:c1:0d:5d:41:76:4e:8d:
         d9:bc:8d:3c:9f:dd:0c:1f:76:2d:7f:f0:60:f0:d7:fa:d2:af:
         76:7c:b4:22:06:c7:44:9b:1d:9c:86:66:83:ae:ae:03:58:59:
         ae:10:3b:a4:e0:e0:db:5e:90:fe:58:2b:c2:b4:6c:43:e0:5f:
         69:ff:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:17 2024 by rpki-client on console-ams.rpki-client.org