Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer
File:                     8ce84fb2-c539-46e7-8212-12b9730afeba.cer (raw, json)
Hash identifier:          8a4dP7DmKNH/aGkqlXkVb/UYp7gt/zL06QxlPsC5khA=
Subject key identifier:   D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E4834FF8403FAE1F99DF9780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 06 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 23.247.181.0/24
                          IP: 2606:8940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:f8:40:3f:ae:1f:99:df:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  6 19:06:39 2025 GMT
        Subject: CN=8ce84fb2-c539-46e7-8212-12b9730afeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:2e:bb:51:17:5f:cf:4b:1f:f8:29:55:bb:
                    3f:05:90:c6:89:c9:fb:3e:1f:7d:fc:51:05:84:9b:
                    a9:a3:9d:96:b9:09:3c:e4:9e:7a:ce:8e:aa:36:18:
                    45:f5:48:bf:ce:eb:f1:d5:d0:0a:27:0f:4f:61:ba:
                    d1:cc:03:26:28:98:ec:9d:01:b1:67:23:c0:96:b3:
                    17:09:d3:ca:79:74:26:90:fa:c9:33:e4:1a:cb:7d:
                    b8:23:65:77:d3:6d:76:49:40:f6:58:06:64:98:1f:
                    61:19:6c:dc:07:98:54:9b:d2:fa:23:2d:06:5e:78:
                    2d:87:c6:27:f7:ff:0d:28:5a:90:0b:e1:33:f5:eb:
                    32:f2:a0:ae:5b:8c:98:47:53:d8:97:f1:2c:f5:c0:
                    32:1f:2e:83:8e:b8:3e:8a:dc:8d:c0:09:ec:b6:e7:
                    43:0d:3f:4f:16:10:e4:34:bc:b7:63:5b:1b:45:bb:
                    a2:7a:9c:74:7a:26:e4:9d:c2:17:50:c3:02:cd:66:
                    58:b5:78:01:d1:9e:a6:25:ff:c9:04:23:3d:9c:20:
                    92:0a:94:32:fa:3e:4e:a2:bc:7a:80:0d:ab:4f:78:
                    d7:d3:42:0c:9d:69:9d:87:e4:df:5d:65:25:a9:c1:
                    81:a5:db:cc:43:fd:93:e7:00:40:c1:7a:14:d6:84:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.181.0/24
                IPv6:
                  2606:8940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:6d:9a:16:1c:05:0f:96:0c:46:0c:44:5b:b4:e1:e4:27:
         6d:49:43:d3:0e:f5:18:14:b5:dc:85:6b:b0:5b:4e:13:96:26:
         28:86:a0:ec:20:c4:07:35:68:31:6b:ab:d4:a5:2b:2d:8f:24:
         07:56:7d:b5:bb:43:ad:e6:37:84:0d:c8:4e:b2:88:e5:f1:1f:
         f4:74:49:3d:1a:13:51:6d:19:4a:ca:e3:23:ef:3b:e2:71:b6:
         04:59:c0:18:18:0f:32:1c:18:96:ea:69:c0:9e:7a:62:57:43:
         ad:d7:87:a7:a8:ff:91:f8:7c:37:2c:15:0f:f6:40:72:32:f1:
         6a:2a:96:60:e4:2c:27:e4:a3:2f:b5:e1:a1:e4:6a:7e:1b:77:
         68:0d:f7:8a:68:df:cf:33:52:ba:93:0f:5c:83:40:38:f8:83:
         c8:70:d1:67:25:83:a2:cb:eb:31:42:61:6e:61:46:11:db:e4:
         8b:32:65:f5:17:18:92:5d:1e:82:1f:e1:69:32:93:76:1a:34:
         b9:21:4f:2c:42:fe:21:42:58:2d:79:7c:3e:c5:25:7d:5f:80:
         71:64:ab:66:8a:d9:b3:d2:b2:26:cc:e6:da:1c:50:65:03:25:
         42:22:e0:7d:55:50:cd:d4:59:be:c7:20:53:a4:71:9b:52:c4:
         ea:a3:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:57:54 2024 by rpki-client on console-fra.rpki-client.org