Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
File:                     e97da778-a1f6-4dad-9d0a-d3a070010373.cer (raw, json)
Hash identifier:          ytMsuGe1LhTAblAl9KOL1YE3uXJydwddSEFVyGFyv0w=
Subject key identifier:   32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858459791050EBBC5FD0AFF392020
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Apr 2024 00:45:20 +0000
Certificate not after:    Thu 23 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 21538
                          IP: 192.131.134.0/24
                          IP: 2602:fc30::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:97:91:05:0e:bb:c5:fd:0a:ff:39:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr 19 00:45:20 2024 GMT
            Not After : Jul 23 00:45:20 2026 GMT
        Subject: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:a1:80:28:5a:92:ad:27:17:3d:50:45:9c:
                    e4:7f:b6:63:cb:72:59:74:05:cb:1a:f7:31:a1:09:
                    da:77:2d:3c:96:71:86:f8:0b:92:3f:58:4f:90:69:
                    b5:e8:6a:f5:5d:f3:4e:16:23:72:90:79:1d:9a:c3:
                    fa:dc:e8:7d:41:6d:d1:40:5e:f1:0a:a9:91:d5:48:
                    ff:5d:a1:d7:02:e5:64:ab:c8:d2:38:a4:22:aa:c6:
                    ea:bd:b3:df:a9:c2:ed:0c:ab:0c:4f:90:09:3a:4c:
                    b0:28:3d:97:e1:98:85:a7:b9:52:09:4d:6d:c7:c7:
                    e4:3f:47:61:47:49:dc:95:7c:6c:6d:e2:77:c7:be:
                    fb:e4:63:aa:b2:26:d0:43:2f:23:63:26:cc:1a:c5:
                    77:b4:62:3b:61:fb:fd:bc:70:df:cc:96:f4:3a:c3:
                    8a:3c:12:1d:4e:66:a9:fc:3d:63:ec:8b:72:af:03:
                    31:e6:11:e1:33:f2:14:9a:21:fa:07:24:16:5b:a5:
                    54:83:98:70:20:62:93:82:3c:dc:1f:ce:6e:34:13:
                    05:4d:67:f1:e9:fa:2c:0e:c9:9b:a3:8c:5a:d5:46:
                    52:c2:2c:37:f3:13:13:6b:50:4c:c8:8f:82:04:7e:
                    48:96:06:e3:b3:ba:a2:c6:a9:15:7a:2b:42:be:49:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.134.0/24
                IPv6:
                  2602:fc30::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21538

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:23:80:fe:2e:62:8b:07:8e:8a:e8:24:38:a7:44:e5:8d:
         60:b7:ab:dd:48:b5:f6:76:fb:80:ba:6a:d0:fd:19:9c:5a:4b:
         7f:6f:35:25:bc:b6:b3:53:0c:61:e9:84:1a:30:92:70:f6:9a:
         18:ec:4a:04:b5:c9:de:9c:9e:1b:8b:d4:2c:a5:52:94:c2:05:
         1b:9b:df:cf:f6:30:92:f4:24:23:7b:be:c2:3e:5f:2c:a0:25:
         e1:ad:6b:08:ae:88:c9:b6:b5:67:1c:22:24:7e:cb:81:af:e9:
         e0:37:fc:ad:b7:0e:49:e2:4e:61:45:d2:4e:63:c4:f0:cd:b2:
         94:fd:28:d3:29:56:fd:fb:fc:d2:cc:3e:aa:32:c0:50:76:bb:
         c7:ca:01:bb:5c:bc:b6:9f:41:24:bf:bd:6c:69:13:e3:e6:1d:
         dd:51:7b:ab:29:3f:88:1b:f1:7c:a7:ca:24:3a:2e:42:85:c6:
         61:37:24:24:ea:b7:3a:a4:fa:68:99:9c:89:01:b1:bc:06:7c:
         64:d2:e4:5c:9e:5f:de:2c:6e:59:c7:28:53:88:48:c6:53:0d:
         7d:97:d1:c2:53:9a:35:5e:88:3d:98:1a:98:a7:67:27:9d:e1:
         8c:b0:ef:c0:d9:37:f0:d5:11:52:2a:bb:bb:77:78:da:ef:cb:
         5d:be:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:38 2024 by rpki-client on console-ams.rpki-client.org