Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
File:                     e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer (raw, json)
Hash identifier:          bZltzcm03sOxtIXkBzbl9Aux+0vpLcAvc0D/+kPgrJY=
Subject key identifier:   42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4835127CC54AED7E7A13260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 14 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 17216
                          AS: 63292
                          IP: 67.212.0.0/20
                          IP: 142.147.79.0/24
                          IP: 162.254.28.0/22
                          IP: 192.151.136.0/21
                          IP: 198.24.12.0/22
                          IP: 199.47.224.0/21
                          IP: 2604:9980::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:27:cc:54:ae:d7:e7:a1:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 14 19:06:39 2025 GMT
        Subject: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:44:8c:d7:14:7c:14:ce:2f:0e:1b:d7:0c:
                    82:ef:85:a1:ea:b2:fa:73:2a:9d:7e:cc:c3:70:9a:
                    d5:5e:a1:0e:2f:5f:25:1b:4f:35:07:57:d1:5d:c0:
                    8d:77:24:97:92:2f:80:fa:22:62:8c:09:dd:bc:b3:
                    d4:fd:2d:57:92:61:c0:c4:d7:35:f8:6e:69:35:09:
                    ec:0d:96:b2:f5:05:6e:be:af:77:bf:fe:e9:46:a5:
                    11:f7:93:7e:1c:7b:00:73:a3:7f:76:db:79:c2:85:
                    66:bf:49:43:2b:ed:79:34:09:91:7a:f5:36:4d:5f:
                    fd:0c:2e:25:80:67:26:33:b4:e9:d5:c7:c5:de:ec:
                    d7:92:d6:7c:8a:e4:2a:60:ce:7f:df:81:ba:0f:38:
                    ff:4a:20:28:96:3d:7d:df:8b:45:cc:30:23:0b:0b:
                    92:bc:c8:7e:cd:18:63:71:26:37:68:4e:63:ab:c3:
                    7d:24:08:7b:89:e8:0c:19:1d:e8:c3:2b:05:6e:ea:
                    c5:2e:83:27:20:a7:28:76:98:11:e6:c3:1e:b0:a0:
                    24:91:d6:7c:e2:9f:3f:6a:c1:15:fc:01:7c:d0:60:
                    47:11:2c:86:0c:ad:7c:d0:3f:c2:12:8a:14:6f:d9:
                    53:98:f9:cc:c0:de:a0:40:a2:48:55:d5:b9:ec:2d:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.0.0/20
                  142.147.79.0/24
                  162.254.28.0/22
                  192.151.136.0/21
                  198.24.12.0/22
                  199.47.224.0/21
                IPv6:
                  2604:9980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17216
                  63292

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:72:85:22:4d:53:18:dd:a7:ad:19:9f:ca:e0:e3:ce:5a:2c:
         b9:01:2f:64:b4:c7:5f:c7:9a:60:c5:14:5f:09:07:ee:12:16:
         6a:7c:cb:fe:e8:c4:1e:5d:57:98:30:a0:b5:4f:6a:8d:be:97:
         5a:6c:6a:63:9e:8c:0c:17:d1:31:fe:d1:e7:ea:88:64:9f:ac:
         2f:21:86:84:3a:27:bc:26:ee:bc:c3:3d:ab:fa:69:26:4a:4a:
         e5:59:ee:eb:44:60:b8:68:1d:a6:b6:03:87:79:23:28:71:0a:
         98:2d:e5:ed:e8:e7:e6:be:e9:fc:d7:e3:04:a3:29:22:39:97:
         61:7d:92:a3:1a:79:3a:1f:0a:b3:3c:b4:62:f5:52:bc:46:e8:
         07:58:2e:16:91:34:c5:7e:19:65:79:a9:dc:d0:b9:3c:89:4e:
         fd:6d:d6:f1:20:f1:dc:55:c9:8a:dd:d0:f5:14:a5:a3:cc:6d:
         f9:17:10:99:03:f6:21:51:f2:1d:b4:71:c0:87:bc:96:17:27:
         77:da:21:9b:66:c9:76:0e:af:6d:fc:cb:cf:a8:08:36:c6:38:
         38:0d:3b:87:5e:2f:83:f2:32:ba:33:1a:37:7c:5e:32:73:e8:
         5f:b0:55:0e:6a:90:65:40:2f:3a:f4:cf:34:9e:6c:ab:00:d8:
         c4:26:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:48:02 2024 by rpki-client on console-ams.rpki-client.org