Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
File:                     ef3ec938-7b45-4c47-91d2-9f7d18411519.cer (raw, json)
Hash identifier:          s5eF+WxNNvT4RiA2S/P9zdIdkAkYmXcAoh8pcAjsnLc=
Subject key identifier:   91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847D3FD23CD2FEA4BFBBECC2600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 62707
                          IP: 23.166.224.0 -- 23.166.226.255
                          IP: 142.202.192.0/22
                          IP: 173.243.224.0/22
                          IP: 208.80.40.0/22
                          IP: 2602:fe12::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:cd:2f:ea:4b:fb:be:cc:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:64:c5:13:27:77:a4:d2:83:91:82:b7:6e:
                    12:09:ba:69:20:fc:42:25:82:bc:17:92:50:c8:ef:
                    e7:93:73:49:18:01:3e:a3:15:1e:d7:d4:ef:06:a7:
                    0f:12:33:c6:1f:70:1a:5b:dc:94:41:e7:de:c9:7e:
                    30:6d:bf:b0:0c:4b:ef:ca:68:9f:2b:0a:03:42:b3:
                    fa:fd:63:2d:45:b8:9c:6e:fd:0e:4d:3b:f0:b4:cb:
                    0b:35:9f:ce:4c:f5:52:ad:eb:9f:00:40:1c:2d:da:
                    d6:b3:ce:4e:d4:9a:3a:71:2a:5b:49:b5:e9:de:e4:
                    b7:7d:8d:9f:5f:0a:58:87:0e:4e:51:42:dc:e4:52:
                    a8:dc:5f:c3:d5:0c:03:3e:3e:ed:e8:ee:ec:e8:a4:
                    5a:78:34:62:e2:1e:f1:bc:81:8b:48:e2:3d:61:f5:
                    d8:5e:86:0d:94:67:6b:e0:50:18:74:75:ff:b8:26:
                    0e:04:da:fc:01:9c:a5:e1:d6:5d:89:5b:0d:c5:21:
                    4d:7e:59:b4:fc:65:a4:03:4d:9c:61:bd:8c:2a:33:
                    c4:83:a0:1d:98:c7:8a:b5:aa:f9:57:ec:7d:a7:70:
                    a7:f2:84:2c:b3:b3:ce:db:3d:a1:01:3d:1a:31:e9:
                    2d:33:41:20:54:61:6a:b4:95:60:be:61:57:a5:c3:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.224.0-23.166.226.255
                  142.202.192.0/22
                  173.243.224.0/22
                  208.80.40.0/22
                IPv6:
                  2602:fe12::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62707

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:42:f8:e7:9f:87:c7:83:6f:e8:1b:9c:a7:2e:62:7b:7f:
         7b:36:e3:9d:f3:c8:2a:21:db:7a:dc:5a:a8:e0:80:9b:cf:69:
         8a:5a:43:e4:0f:dc:cb:2d:2d:8d:c3:06:2d:e0:3e:11:8a:58:
         c1:b5:13:cc:02:b2:e3:e8:fc:24:66:a2:67:2c:98:8e:e7:1d:
         83:c1:ea:b0:a5:d0:da:dc:f1:ac:a7:6f:f6:e4:9d:35:a3:b2:
         01:83:16:9d:1e:6b:5b:a7:f5:06:5e:27:43:a9:72:85:13:8f:
         a5:f6:48:56:74:ce:73:74:fc:ca:8e:49:79:c2:98:15:9f:0a:
         32:19:02:7d:b6:30:d1:75:39:54:60:aa:7f:29:c1:09:f0:e0:
         ba:fe:1a:1f:68:93:20:b3:9a:c3:b0:6b:5f:90:74:b2:52:55:
         31:8e:95:8c:36:ec:cf:00:a8:04:ab:e5:6b:c8:c1:31:0d:16:
         79:58:dd:8e:78:ac:ff:e7:be:b5:06:95:9b:4d:35:d0:d9:00:
         2d:bf:8b:db:90:df:f6:65:e4:6a:93:fa:55:07:f0:58:c9:e5:
         7a:3c:bf:ea:3e:93:d1:51:8d:ce:fd:64:bc:65:7a:94:6d:1b:
         c9:0f:2f:fb:cf:29:d6:25:b3:93:8a:23:cd:88:7b:5c:2a:4b:
         40:23:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:39 2024 by rpki-client on console-ams.rpki-client.org