Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer
File:                     47727e8f-5ea0-4ad7-a853-5cade93acd74.cer (raw, json)
Hash identifier:          n9dwQrJK2ZvAEvAgD0FoLm13ziZU5MlvjVWzD5ll7+M=
Subject key identifier:   23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845681B67F129204F6CFFDAD080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Apr 2024 00:45:22 +0000
Certificate not after:    Mon 06 Jul 2026 00:45:22 +0000
Subordinate resources:    AS: 64272
                          IP: 23.134.64.0/24
                          IP: 2602:fecb::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:1b:67:f1:29:20:4f:6c:ff:da:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr  2 00:45:22 2024 GMT
            Not After : Jul  6 00:45:22 2026 GMT
        Subject: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:f8:2d:2e:fb:63:3d:ed:73:41:46:7f:ef:
                    34:cc:64:26:da:67:4b:2e:52:33:a3:72:d0:08:65:
                    60:ea:0a:5d:f7:5b:da:6b:f3:76:3d:7e:21:6c:ec:
                    6a:26:b5:54:11:c2:33:2e:79:40:85:41:67:81:c2:
                    69:3c:d5:83:95:f6:bd:9a:b3:c2:c2:ae:40:43:f5:
                    47:5f:63:60:8d:f0:77:6e:83:32:93:cf:09:d6:bd:
                    0f:b2:91:ae:69:36:55:d0:78:9a:8f:c1:6c:2a:d5:
                    92:04:ee:b7:9f:5a:1d:7b:e2:de:5f:16:58:73:0b:
                    c3:8d:18:73:5b:5a:99:e5:78:d7:eb:98:2c:ac:74:
                    6f:1d:a7:39:66:d0:27:d4:3f:75:8c:84:91:d2:ec:
                    0c:78:ba:58:d5:7a:2e:6a:f7:d1:44:88:f4:c5:f4:
                    5d:5c:d1:21:bf:21:4c:a1:f9:97:53:70:de:e6:72:
                    87:b7:81:85:9a:aa:78:04:e4:46:ee:f5:3f:d1:9b:
                    3c:ab:f0:c0:1b:c4:b0:d4:9b:51:d5:32:61:25:e1:
                    c3:a6:19:82:12:56:fe:95:34:07:a1:52:e2:0d:b2:
                    4c:b8:2a:38:3f:0c:d1:45:72:84:60:6d:97:de:d9:
                    9a:ff:36:90:ad:ad:5d:f5:69:4b:f6:9c:0c:37:24:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.64.0/24
                IPv6:
                  2602:fecb::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64272

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:cb:ee:7f:a4:4f:93:63:8b:c8:7e:45:72:98:f8:ab:33:
         51:86:85:82:50:a8:82:46:49:5e:d2:d3:05:e1:42:ac:78:a5:
         7a:ad:d6:26:4c:2f:5f:fd:68:37:e6:4f:51:65:83:48:b1:93:
         bb:7e:a1:71:47:ff:3b:39:ed:5d:97:59:21:72:15:be:77:b9:
         67:20:e7:37:83:8e:56:fd:95:19:a3:4c:76:70:4a:7b:ed:e5:
         8f:5e:cc:9e:62:fc:04:79:0d:6e:1e:e2:28:c4:21:3a:eb:e3:
         70:4e:64:0c:37:b0:24:cd:d3:bf:05:19:18:3c:01:ef:dd:6d:
         ac:dc:bb:8d:a9:62:33:3f:07:df:24:1e:08:fa:85:dc:cd:e8:
         88:5e:95:51:46:6f:a4:59:da:63:b3:d0:32:04:ec:4e:16:0f:
         74:d2:01:80:ae:04:2f:69:36:53:3c:88:26:44:f9:bc:b9:a3:
         ab:33:a1:ab:5e:56:13:ac:ea:e7:6f:12:9b:b1:ae:28:c2:ff:
         d4:04:03:0e:0f:7a:bf:db:91:08:da:df:09:4c:98:68:de:e1:
         1e:12:59:73:95:2d:4f:00:7c:7b:79:b3:12:fe:a9:f6:41:df:
         a4:25:f4:e6:91:ad:b5:75:48:5b:56:5e:0c:4d:ee:7b:b5:02:
         d6:d6:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:11:56 2024 by rpki-client on console-ams.rpki-client.org