Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer
File:                     fb27f567-301c-4322-b0da-4c0b69ffc3ae.cer (raw, json)
Hash identifier:          dM3IbN9i5A4reBd+yrLNrCEnBZuDQTMg+XPC2/8RVc4=
Subject key identifier:   96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844F88DD24AED659BD0312B1D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Feb 2024 01:45:22 +0000
Certificate not after:    Wed 27 May 2026 00:45:22 +0000
Subordinate resources:    AS: 7954
                          IP: 104.254.52.0/22
                          IP: 207.167.116.0/22
                          IP: 2605:e380::/32
                          IP: 2620:8d:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:8d:d2:4a:ed:65:9b:d0:31:2b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 22 01:45:22 2024 GMT
            Not After : May 27 00:45:22 2026 GMT
        Subject: CN=fb27f567-301c-4322-b0da-4c0b69ffc3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:f9:62:80:d8:b6:fe:3f:17:39:ac:7f:75:
                    a9:80:ef:b7:1e:17:4c:92:73:4c:78:d6:c7:18:79:
                    3a:4a:42:2c:cc:70:8d:65:1d:5c:7e:2b:e5:ba:b9:
                    db:8e:15:78:38:a8:0f:5c:79:f5:73:ba:29:1d:8e:
                    d6:2e:7a:30:cc:70:6f:31:2e:37:d8:90:8c:ac:92:
                    a9:f9:05:90:e0:7f:79:97:f3:9e:ae:28:92:f2:c7:
                    ce:09:3c:c9:55:be:33:8e:57:99:d5:fa:26:c0:ff:
                    38:11:5d:6e:dd:0c:b3:6d:d8:23:64:7a:95:6e:19:
                    96:48:56:2e:15:cf:1e:a2:6c:84:cf:2e:ab:bf:f2:
                    aa:b7:69:8c:7c:62:3e:96:38:0a:7c:1b:b5:a7:ad:
                    0a:f3:f4:c0:be:77:7c:7b:5c:22:57:df:ec:6a:69:
                    1a:17:d2:37:5c:dc:f3:55:a9:0c:5b:0c:0b:a3:59:
                    9c:21:c3:7a:42:b5:2f:ac:5f:79:f1:7d:e5:cc:73:
                    81:96:78:1b:a0:dd:d1:a7:f7:1e:e9:0f:05:eb:68:
                    14:cd:6b:63:94:e6:0d:55:c3:43:ed:a1:33:cf:a8:
                    43:ce:1a:d1:8c:b0:64:63:86:ce:90:52:70:d3:f5:
                    ab:41:dc:6d:ef:33:e5:54:8f:a9:7b:50:d1:99:41:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FB:75:F3:CE:6D:97:A6:25:2B:7E:15:10:7A:7A:3D:F1:09:88:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fb27f567-301c-4322-b0da-4c0b69ffc3ae/fb27f567-301c-4322-b0da-4c0b69ffc3ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.52.0/22
                  207.167.116.0/22
                IPv6:
                  2605:e380::/32
                  2620:8d:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7954

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:5b:2e:cb:d8:3b:e9:f8:eb:05:0a:42:4c:2f:0c:91:46:
         ef:14:e2:dc:ed:cc:fa:6f:a3:4c:99:b1:21:c7:73:3d:f9:ea:
         dd:89:13:be:3c:2a:df:f6:4b:0c:df:25:1c:e6:df:63:ee:39:
         69:3f:32:31:ab:3b:98:ae:b1:48:1d:af:d2:51:aa:a3:a4:4e:
         c8:0f:d5:d2:a4:26:3f:9f:f4:31:f9:a2:09:84:5e:e7:66:8d:
         e5:4f:3b:29:a4:c1:a7:b7:d5:e0:6d:c5:24:c1:5d:e6:fd:90:
         11:f1:66:0b:67:d4:b1:b4:51:b2:85:35:31:13:a7:c8:f1:3d:
         94:ae:38:61:c7:77:b5:ef:f9:52:0d:a9:49:e5:a8:39:81:5a:
         8d:13:ae:76:99:e5:d8:33:80:5a:cf:7b:fa:30:bf:81:5c:da:
         df:11:13:ca:1a:22:f1:28:8a:97:3f:c0:b2:ff:ef:f5:7f:71:
         f3:da:49:70:5c:7a:81:ad:37:2d:0f:4a:27:ca:98:f4:02:56:
         79:71:22:be:8d:fc:57:d1:14:ac:93:96:df:c3:66:80:b3:b9:
         1f:2e:61:bb:e7:24:7e:4f:b7:7e:53:2e:8b:fd:64:7e:27:d7:
         e0:f9:5f:ba:ba:c2:ed:84:da:51:ce:85:0a:e9:19:69:bd:ae:
         c6:9c:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:23 2024 by rpki-client on console-fra.rpki-client.org