Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42.cer
File:                     f97ba947-3a13-4edd-9188-5bbc74f15b42.cer (raw, json)
Hash identifier:          +n9mTSpYr1+YemNnBJx/RA/ksMlJgD/8Eizn6lNmYxk=
Subject key identifier:   A1:AF:32:9D:D0:0A:05:71:5B:36:4B:78:58:0B:09:4E:EC:04:A8:4C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584768300221F8A864FA02E9D900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/f97ba947-3a13-4edd-9188-5bbc74f15b42.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 11:00:45 +0000
Certificate not after:    Tue 05 Jan 2027 05:20:47 +0000
Subordinate resources:    AS: 401364
                          IP: 209.178.202.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:30:02:21:f8:a8:64:fa:02:e9:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct  2 11:00:45 2024 GMT
            Not After : Jan  5 05:20:47 2027 GMT
        Subject: CN=f97ba947-3a13-4edd-9188-5bbc74f15b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:16:bd:36:ff:63:9b:98:f9:ca:44:19:c8:
                    9c:2f:06:11:27:eb:f5:c7:8e:04:d9:52:08:12:c3:
                    c3:33:38:e1:c2:a3:e5:f0:53:b5:af:0d:f8:3c:3b:
                    a9:3b:42:ac:3b:b2:5a:d2:a4:02:82:3d:9f:64:bb:
                    84:0c:76:50:37:3e:c2:36:8b:37:d0:dc:e7:16:d2:
                    b7:ec:f7:13:a6:14:eb:7c:23:75:7e:cf:84:c1:9e:
                    12:52:a4:a7:80:94:4c:0b:a0:e5:90:47:63:4b:5a:
                    72:c3:53:39:77:a8:6d:7e:1b:7d:96:5e:53:9f:db:
                    35:57:01:5d:03:3f:30:01:7b:63:50:7a:23:eb:16:
                    f5:2a:4e:7f:78:83:24:ae:ea:73:9e:08:c3:4b:f4:
                    cc:23:7d:b4:d4:00:37:56:8b:0d:2e:18:65:3d:72:
                    c1:24:ad:68:77:2a:4d:db:61:32:49:bd:34:9c:47:
                    9d:e1:9b:1b:c8:3a:21:60:be:5c:06:22:23:36:7d:
                    ba:20:91:08:f8:b0:e8:fa:84:06:1f:f4:c4:a8:5e:
                    bd:17:6b:dd:97:b8:32:32:0e:06:ec:23:0e:5d:c5:
                    58:ea:de:16:2f:70:93:42:7f:36:97:d7:43:ab:1c:
                    72:60:72:54:69:1c:05:75:45:c5:21:89:c5:27:86:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AF:32:9D:D0:0A:05:71:5B:36:4B:78:58:0B:09:4E:EC:04:A8:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f97ba947-3a13-4edd-9188-5bbc74f15b42/f97ba947-3a13-4edd-9188-5bbc74f15b42.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.202.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401364

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4e:8f:5c:2e:a2:c8:5e:7b:ee:15:da:8e:8a:6b:72:28:f7:
         8e:21:9c:da:ac:43:76:26:9a:f3:f2:c2:66:5d:75:3e:66:30:
         fb:8f:8f:47:41:3c:67:b8:1c:74:31:ba:f0:52:4f:3f:73:4d:
         cd:8f:e2:cb:47:2c:a5:82:3f:7e:e0:4c:4c:45:ae:d8:44:9b:
         ef:d0:c2:cc:47:63:8f:07:30:65:c3:14:81:cc:0a:af:33:e1:
         27:f5:a5:12:63:39:b4:9b:f7:9e:2c:2d:cb:11:20:86:aa:f2:
         4b:52:61:d1:2a:2e:b7:00:9d:0f:77:54:6c:b7:c0:4f:0d:8e:
         cc:37:68:b2:7b:e6:9f:6b:44:8d:54:d6:d6:89:79:f4:cf:ee:
         e1:38:3a:19:87:f7:bc:86:3c:e7:f5:62:f5:de:8f:d6:e0:28:
         b6:03:81:6c:5e:43:a5:39:b8:22:c8:8a:fa:8e:30:bd:d5:0d:
         ca:10:e5:00:e3:a1:a7:ee:b8:14:12:57:29:8e:44:4f:2e:24:
         15:b2:c8:37:3d:ca:42:4c:2c:2c:6c:4e:92:07:8c:97:90:68:
         2c:b8:8a:84:a7:8a:64:e4:d7:a5:62:a4:9d:ee:84:01:af:91:
         26:03:60:7c:fe:db:e1:6b:b1:e5:f5:7a:a7:24:1f:41:a0:80:
         20:f3:f3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:42 2024 by rpki-client on console-ams.rpki-client.org