Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
File:                     f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer (raw, json)
Hash identifier:          n3lXb4VrBg+TP2ONOoGnu+tHP/xvbWYQXTRI088gKzs=
Subject key identifier:   D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584511ADF90432058977512FD0D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Mar 2024 01:45:21 +0000
Certificate not after:    Fri 05 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 40501
                          IP: 66.85.88.0/23
                          IP: 216.235.80.0/20
                          IP: 2602:ff40::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:11:ad:f9:04:32:05:89:77:51:2f:d0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  2 01:45:21 2024 GMT
            Not After : Jun  5 00:45:21 2026 GMT
        Subject: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:63:d6:5e:40:5d:9d:1b:4b:19:5d:b3:35:
                    5b:ff:ab:33:e1:bf:54:db:64:63:7f:e2:1d:b0:53:
                    23:74:de:0a:dc:9b:bf:e2:aa:6a:64:47:c0:3b:ef:
                    e9:3f:f5:70:e2:4d:fa:fa:f7:e2:06:1b:5d:c4:02:
                    8f:12:94:31:eb:12:37:56:5c:bd:f3:13:7f:a1:e4:
                    4c:4c:e1:fb:79:42:e3:2b:62:1b:e0:a6:f6:bf:d6:
                    14:7e:49:a6:5f:74:e9:12:92:d0:50:44:17:9f:4c:
                    e9:d3:f6:66:d7:01:95:35:55:85:f1:74:85:02:ae:
                    6d:78:d5:24:92:0d:48:38:c7:55:51:58:87:1e:81:
                    72:59:ae:f6:03:83:ac:a9:24:9d:e5:2e:5a:91:86:
                    3f:19:ad:b5:ec:99:b9:dc:4d:e0:00:ef:55:5c:6c:
                    34:d7:10:11:11:d9:e4:c0:7f:21:d2:fb:67:64:5b:
                    0f:67:64:4c:7e:af:0c:12:b5:61:c8:9b:5c:7c:35:
                    2f:c8:3b:f2:f1:05:fb:6f:91:6f:37:10:bb:21:bd:
                    9f:cd:36:28:d3:a2:e8:5d:d2:ca:aa:a0:8f:6d:c4:
                    b0:28:f0:e7:59:cf:fd:97:41:f7:36:78:d3:8e:db:
                    d0:e4:31:b0:82:41:7a:71:89:5e:e8:57:cc:9b:23:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.88.0/23
                  216.235.80.0/20
                IPv6:
                  2602:ff40::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40501

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:1b:79:b0:1b:1b:c6:7f:0c:bc:af:db:4b:06:ec:8b:68:
         61:d3:21:21:9e:27:f4:f2:b1:22:cc:bc:87:1e:88:3c:9e:f1:
         46:82:e7:c7:01:c4:f9:81:0d:43:33:96:29:68:51:74:f6:6d:
         05:ab:0e:6d:22:cb:7d:f5:3b:9d:90:39:14:07:dd:2e:c0:a2:
         4d:b2:04:1e:f9:d4:13:7c:a0:47:d3:91:de:33:69:7d:4e:35:
         6a:29:74:a1:8f:09:51:b6:f0:e5:00:66:d2:f0:90:68:08:ee:
         db:3d:bf:ff:67:2c:52:2a:8c:7e:ec:fc:ae:eb:e3:94:f0:b2:
         13:65:b9:44:6b:2f:89:c6:41:24:3a:30:e5:d4:be:e2:16:68:
         6e:5a:8d:4e:13:7c:2d:dd:57:8c:88:4b:df:e4:c5:6b:fe:6f:
         a5:d7:5e:b0:16:e1:8c:22:fb:f2:3a:65:aa:c4:a6:e3:b6:db:
         b7:78:8f:2d:67:f1:4a:48:82:2f:13:4b:6b:f8:8f:17:79:2f:
         d6:47:91:2f:8d:e9:b4:4c:de:27:81:77:83:d5:f8:0b:09:15:
         c4:f5:7c:28:77:2f:c9:65:03:ed:c3:b4:5f:d0:b6:bd:ba:19:
         50:90:c1:b2:64:3d:db:f9:c3:b5:6e:8b:a1:84:56:1f:94:03:
         c4:85:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:41 2024 by rpki-client on console-ams.rpki-client.org