Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1.cer
File:                     e66a6121-7784-4ce4-af34-0e56530ce3c1.cer (raw, json)
Hash identifier:          pyqlHgOo6GrxalM9GFVmzu6spbgipBpwYxnszJ+liqs=
Subject key identifier:   3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842414BACCB5D8BA17701740BE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 18 Jun 2023 00:45:17 +0000
Certificate not after:    Sat 20 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 16970
                          IP: 23.169.240.0 -- 23.169.245.255
                          IP: 23.169.248.0/21
                          IP: 64.40.23.0/24
                          IP: 2602:800:1000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:41:4b:ac:cb:5d:8b:a1:77:01:74:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 18 00:45:17 2023 GMT
            Not After : Sep 20 00:45:17 2025 GMT
        Subject: CN=e66a6121-7784-4ce4-af34-0e56530ce3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fd:d4:72:dc:7b:e9:f8:db:b9:c1:91:4c:7b:
                    d4:41:03:50:74:06:43:a3:14:69:96:f5:86:40:bd:
                    bf:24:b4:23:0f:a5:e2:b0:f1:17:de:4d:f7:0a:50:
                    6f:98:e8:ee:49:b4:7b:ef:25:99:51:14:5a:f5:34:
                    88:55:79:41:83:7b:02:c0:48:15:49:34:c7:74:55:
                    11:ca:73:44:93:e2:d3:83:44:9b:da:2a:61:76:01:
                    c8:1f:99:50:87:0b:60:b5:6a:65:4d:2b:8b:0b:a8:
                    cf:dd:8c:ee:25:7e:14:8a:a2:b8:a7:45:e3:b1:35:
                    12:59:ef:a5:a7:13:9f:63:6b:ca:01:b9:fb:3e:47:
                    c0:d6:d1:e8:4c:6e:0d:ad:8a:db:b8:4b:44:45:e4:
                    c7:70:76:8f:af:d1:b0:7a:8b:e0:03:07:3b:06:a9:
                    79:a4:18:ff:b4:44:7d:53:cf:ce:c2:a7:88:54:5b:
                    23:86:ff:d9:04:4a:ae:81:26:0c:df:18:e3:ff:3b:
                    2c:82:b9:6d:8c:dd:5e:df:c7:30:08:12:43:82:8b:
                    a1:9a:b1:84:d7:8a:49:e4:19:7f:7c:5e:6d:ef:ff:
                    a7:d8:57:9e:5b:bb:c4:c8:32:6f:8b:aa:3a:18:bb:
                    ff:39:e7:e7:e2:6a:da:fd:12:46:96:0a:5e:8f:fa:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:CF:39:C8:82:0B:07:83:25:65:3A:5A:10:56:03:74:07:FF:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e66a6121-7784-4ce4-af34-0e56530ce3c1/e66a6121-7784-4ce4-af34-0e56530ce3c1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.240.0-23.169.245.255
                  23.169.248.0/21
                  64.40.23.0/24
                IPv6:
                  2602:800:1000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f9:db:a8:c6:e6:b3:50:48:2c:03:8d:8d:c6:5a:06:f8:4a:
         cd:dd:13:c9:fa:70:fa:c2:c0:cd:ae:64:c5:de:10:c4:97:dd:
         cd:be:82:b1:f8:62:ba:17:30:d7:4d:e1:dc:1a:f9:ff:dc:4a:
         57:47:11:02:14:3e:7a:df:b0:47:32:b1:15:7a:26:6b:c5:1e:
         bf:e6:19:d3:40:05:ed:d3:2a:e2:f9:2c:ca:fb:b3:61:bf:d1:
         bb:e9:db:91:7b:02:7f:6f:51:8e:7b:5a:cd:19:1c:a9:2d:4b:
         d8:5e:94:aa:93:f5:50:74:6d:b7:62:69:5c:54:d0:df:fa:85:
         69:a6:5c:40:fa:fa:2d:57:b9:9f:8c:75:84:75:10:c5:b8:4d:
         17:11:d4:db:83:41:16:c2:51:b3:89:9a:25:de:94:46:9c:c8:
         67:40:58:15:a1:8d:20:d9:22:79:e3:73:62:4f:89:43:d6:cd:
         5a:34:79:e2:5f:78:67:72:06:12:b5:9f:69:9b:9f:9c:12:f8:
         23:69:d0:d5:4f:4b:b0:7f:97:82:53:b4:a1:27:5d:c5:89:d8:
         84:cc:8f:cb:9e:18:d6:83:71:fb:ca:e8:a7:a0:6a:f1:a6:ea:
         e1:c4:4d:75:7c:b2:37:36:61:50:c2:89:3c:5d:9b:da:01:4c:
         93:b1:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:57:28 2024 by rpki-client on console-fra.rpki-client.org