Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd6d136a-2400-42ff-bddd-2b83cc88134f.cer
File:                     dd6d136a-2400-42ff-bddd-2b83cc88134f.cer (raw, json)
Hash identifier:          bULOaHQ040U4nAHgSacZSI8e7n9e6f5SbnG58afNcSg=
Subject key identifier:   F2:D2:F4:5F:47:1B:1B:D7:EE:7E:4F:A1:80:F7:AA:15:87:F2:E0:F9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4B5082
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd6d136a-2400-42ff-bddd-2b83cc88134f/dd6d136a-2400-42ff-bddd-2b83cc88134f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd6d136a-2400-42ff-bddd-2b83cc88134f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Feb 2016 12:41:08 +0000
Certificate not after:    Sun 01 Feb 2026 12:41:08 +0000
Subordinate resources:    AS: 19381
                          IP: 64.119.32.0/20
                          IP: 66.85.10.0/24
                          IP: 67.212.192.0/20
                          IP: 162.211.48.0/22
                          IP: 192.88.109.0/24
                          IP: 192.147.241.0/24
                          IP: 2605:c400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jul 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4b:50:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb  1 12:41:08 2016 GMT
            Not After : Feb  1 12:41:08 2026 GMT
        Subject: CN=dd6d136a-2400-42ff-bddd-2b83cc88134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:6b:6b:cf:0a:c1:84:db:3f:80:15:53:ff:
                    0a:20:74:a2:11:0f:e0:f1:23:cd:e9:c1:3a:20:8d:
                    98:97:1b:c1:b9:fe:5c:85:cb:d9:72:a9:ac:de:6b:
                    b5:0d:d3:15:b9:b7:95:10:1b:54:3a:b1:e2:99:0f:
                    ca:92:d1:5a:65:77:fe:27:b9:00:7f:62:96:a4:18:
                    c2:96:68:12:f2:81:3a:69:96:e6:ce:a3:1a:ce:6c:
                    16:42:4a:c2:ba:7e:3c:a0:0e:cb:5a:eb:25:fa:1a:
                    b6:0d:a6:35:56:10:fb:7c:0f:ac:57:e9:37:7c:07:
                    8d:c3:13:1c:38:c7:35:42:3e:83:cf:82:43:19:b5:
                    fc:98:74:1e:24:dd:ef:ac:a7:4f:63:43:aa:ea:d9:
                    84:cf:ea:a8:3f:d9:f8:cc:38:45:87:ea:f9:91:cb:
                    5e:04:48:80:75:b6:4b:62:42:08:aa:e9:80:b1:5c:
                    2f:e9:d6:13:4b:e3:28:51:16:c8:a7:7e:33:92:73:
                    4e:f4:4f:95:7f:34:b7:37:a9:e3:0f:84:e4:65:32:
                    62:2c:19:19:85:5d:d6:d4:a9:58:48:68:72:22:22:
                    ff:77:15:4c:08:86:e7:47:70:90:c5:6c:df:88:83:
                    c2:c0:df:9a:e0:22:8e:e7:f4:93:8f:0b:ce:72:e4:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D2:F4:5F:47:1B:1B:D7:EE:7E:4F:A1:80:F7:AA:15:87:F2:E0:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd6d136a-2400-42ff-bddd-2b83cc88134f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd6d136a-2400-42ff-bddd-2b83cc88134f/dd6d136a-2400-42ff-bddd-2b83cc88134f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.32.0/20
                  66.85.10.0/24
                  67.212.192.0/20
                  162.211.48.0/22
                  192.88.109.0/24
                  192.147.241.0/24
                IPv6:
                  2605:c400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19381

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:cb:1b:6b:c3:c4:68:92:b7:49:20:4a:26:3b:99:41:f0:23:
         2e:6d:14:65:9a:94:57:b7:54:bb:3f:c2:4b:32:cb:9e:2b:f2:
         a6:a4:2d:f3:d5:63:62:f1:68:2d:ce:f0:ea:70:35:21:e5:be:
         e3:a5:24:39:2b:a8:2c:21:72:a6:ef:34:f9:3e:0d:9a:57:5e:
         fd:2f:66:d5:31:95:cb:28:4a:9e:aa:93:72:63:0e:07:91:66:
         43:e7:f1:c6:72:51:10:fe:4c:f6:68:28:03:52:4c:7a:d4:f5:
         cf:a3:83:9b:7d:95:5a:79:b7:3c:9d:b5:30:75:92:04:50:3a:
         90:12:8c:14:9f:9e:f7:0a:59:ff:3b:1e:62:63:0d:d2:70:ef:
         7b:27:75:79:ba:96:08:2c:59:5c:f4:e7:65:63:d7:94:d9:ce:
         7e:2b:1a:d4:44:df:15:96:92:08:3e:de:e0:cb:5c:7c:fd:2a:
         3e:e2:1a:b7:64:9a:32:9b:db:aa:4a:0b:8c:27:3b:6d:46:08:
         d2:f5:78:4e:4d:13:8c:0b:ab:42:55:55:81:13:fa:66:4d:8d:
         31:2c:6c:3c:76:f2:c4:fe:54:1d:df:29:d6:5a:7b:e6:10:13:
         c4:f5:ff:03:92:45:89:7b:3d:88:5a:c2:9b:28:ec:c2:99:5e:
         af:60:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:26 2023 by rpki-client on console-ams.rpki-client.org