Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
File:                     d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer (raw, json)
Hash identifier:          hjr9smo2hWM56R/+Wkt/fZRdZe05CmabHSuHBwGQkiI=
Subject key identifier:   DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842176B6941EFD5AC6FB3210C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 03 Jun 2023 00:45:16 +0000
Certificate not after:    Fri 05 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 62654
                          IP: 57.140.0.0/16
                          IP: 162.33.226.0/23
                          IP: 162.33.230.0/23
                          IP: 168.245.155.0/24
                          IP: 192.84.38.0/24
                          IP: 216.24.45.0/24
                          IP: 2606:3dc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:17:6b:69:41:ef:d5:ac:6f:b3:21:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun  3 00:45:16 2023 GMT
            Not After : Sep  5 00:45:16 2025 GMT
        Subject: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:f6:05:64:60:4a:55:b0:d5:45:61:02:22:
                    df:7e:9a:c3:71:09:c3:ee:ef:c4:bf:83:23:35:c7:
                    5e:4d:e5:80:74:43:7f:29:57:a8:f8:46:2e:b5:b8:
                    3d:0f:d8:f7:d0:db:5d:33:71:da:01:0e:e7:f7:4d:
                    d1:7f:b8:27:85:e5:27:9a:c4:68:57:50:4a:67:47:
                    bf:0d:72:ff:a7:8d:02:99:6e:f3:eb:98:02:8c:f6:
                    8f:dd:dd:a7:a2:d4:9d:b8:74:5a:54:78:2d:7c:c6:
                    72:a0:e9:23:8b:c0:5e:a2:00:8a:78:79:96:76:75:
                    1d:09:e1:e8:93:6d:f9:06:3b:bf:8d:2d:7b:ba:54:
                    36:0a:1b:49:66:f8:8f:e0:42:68:21:5b:c6:39:6f:
                    fe:06:d9:f9:f4:10:e6:d9:03:12:07:d2:08:2c:13:
                    7f:fa:09:16:4c:08:c0:4a:c5:50:16:f6:37:a5:93:
                    5f:b0:94:26:f7:a8:80:f8:76:34:4d:b7:84:fa:0c:
                    c5:6c:74:99:e9:9a:20:f4:cf:ea:53:86:3b:d4:de:
                    ff:b8:f1:cf:61:1e:97:c6:1c:46:75:6b:52:89:f4:
                    65:ef:f8:9c:33:c1:23:41:57:48:fb:0e:a6:b9:bf:
                    6a:e7:95:fb:e0:32:d9:fe:49:a5:e7:04:8e:16:9b:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.0.0/16
                  162.33.226.0/23
                  162.33.230.0/23
                  168.245.155.0/24
                  192.84.38.0/24
                  216.24.45.0/24
                IPv6:
                  2606:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62654

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:11:4c:f2:17:ba:75:a6:f2:31:a4:69:28:65:d0:8d:6b:7c:
         bc:98:ba:ab:58:8b:ef:f4:98:6d:73:f9:d1:c3:a3:ba:24:d1:
         40:69:5d:b8:9f:c6:1f:2c:e5:f7:63:31:da:a5:9c:f8:69:fe:
         8c:00:45:ba:3f:cc:7d:8a:be:34:f1:e0:8e:35:28:33:e5:0c:
         d9:f7:82:42:c4:84:67:25:4e:10:3c:41:26:84:47:c3:a2:de:
         11:0d:c5:5d:9e:5e:30:a9:84:86:00:a0:5e:51:45:de:19:05:
         49:81:4b:26:ad:30:78:dd:2d:6b:b9:ec:80:fa:d9:e8:a1:0f:
         00:80:4d:75:91:a8:5a:74:0b:a4:8f:2c:32:37:2a:d9:8f:8f:
         d4:76:0b:3a:ae:37:42:53:8a:e0:8c:0e:3f:f2:76:dc:d2:c5:
         a3:16:82:ff:eb:52:d2:29:6b:48:bc:d6:d6:41:56:a1:6a:8b:
         23:2a:3f:29:da:1c:53:01:b5:25:10:96:ba:ec:a6:6c:e4:db:
         78:d1:bb:ae:20:c9:1b:20:c6:ea:94:b8:79:ee:45:f7:63:be:
         32:0c:bd:05:98:7c:d8:b9:77:7b:75:5b:38:fa:dc:1c:a8:46:
         26:8e:19:78:a1:35:90:e9:6a:94:7e:3f:f5:d4:06:5c:c2:f0:
         6d:e6:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:18 2024 by rpki-client on console-ams.rpki-client.org