Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
File:                     9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer (download)
Hash identifier:          PUxNp7c8JbLQhEThbCb38xkb8p8+K/ld6Q4pb/X7UOM=
Subject key identifier:   8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D8A1BCE9E8B90A03620CD76D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Mon 23 Feb 2032 14:47:15 +0000
Subordinate resources:
    1: AS: 400312
    2: IP: 23.131.168.0/24
    3: IP: 216.170.96.0/22
    4: IP: 2602:fbf0::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:1b:ce:9e:8b:90:a0:36:20:cd:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 23 14:47:15 2022 GMT
            Not After : Feb 23 14:47:15 2032 GMT
        Subject: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:70:55:af:4e:95:55:86:4d:4d:1e:cb:f7:61:
                    86:87:90:a6:54:d8:7b:ed:1e:9f:7f:0c:aa:ba:f5:
                    79:dc:34:bb:ea:0e:d3:f0:b4:45:6b:da:ab:17:df:
                    fa:a2:2c:20:e5:69:f5:5e:d2:a1:a2:42:45:53:f4:
                    f9:c3:9c:76:48:9f:b9:89:9f:31:3d:f8:d0:16:4d:
                    fd:6c:d3:f8:28:c2:9e:ee:35:57:3a:d3:6f:c5:23:
                    bf:69:30:bd:8c:b2:3e:f5:85:fa:6c:50:90:b8:fb:
                    65:84:f6:cf:c9:bf:f3:79:fa:3f:9e:8f:03:d8:9a:
                    1f:a3:69:db:6f:34:23:42:fe:1f:ed:c6:d5:37:87:
                    22:0b:45:7f:a9:56:79:da:90:e5:8c:5f:d1:a1:24:
                    38:5a:85:e6:52:d9:a6:df:e9:fa:81:c6:d3:91:ca:
                    25:25:b5:f4:a4:ca:6a:f4:c5:b8:53:15:7f:7c:15:
                    a6:e2:92:13:5d:0f:fa:59:c4:c6:d4:1a:64:0b:58:
                    2c:dd:3d:e0:b8:0c:d0:d0:25:36:b3:00:78:1f:e7:
                    03:da:57:05:18:bf:3c:f3:2f:e6:53:1f:9f:bd:98:
                    3b:fc:fb:3e:fe:d9:66:8c:21:a8:b5:6a:eb:7f:63:
                    57:51:28:17:ec:39:f1:31:c6:be:2d:68:5e:f4:63:
                    b6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.168.0/24
                  216.170.96.0/22
                IPv6:
                  2602:fbf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400312

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:88:7e:0a:86:40:a5:90:f2:fe:1e:ac:3a:db:f9:a3:d7:93:
         08:88:aa:57:b2:1e:33:b9:c5:e3:36:92:a7:19:ea:84:95:3f:
         50:94:77:a8:9c:33:0c:4a:4a:cb:a5:4e:ce:b5:d9:cc:d9:e4:
         20:50:f7:64:54:41:1e:e1:51:84:6b:34:58:de:38:f5:08:c2:
         1b:3e:3c:0e:18:96:76:90:8b:c6:b2:85:26:d0:dd:01:aa:31:
         61:2d:93:ea:35:d1:d4:7f:b8:c5:d7:a5:46:6c:0c:e4:c1:9a:
         d6:90:d2:45:89:57:99:48:2a:c8:1a:5d:ec:e5:18:f0:f5:a9:
         76:30:83:82:b6:c4:e3:50:e3:22:94:07:fa:c1:d5:20:f1:4a:
         e4:54:69:7e:a8:cc:74:d9:b8:84:2c:fe:85:a5:a5:0e:1c:8c:
         f3:d9:36:50:62:5f:f2:30:96:5e:03:a7:39:c3:3a:c8:5a:bf:
         2b:98:bd:7b:db:c1:fc:dc:77:f9:8d:03:5c:c1:a2:a9:ae:b3:
         84:cf:59:a2:c0:3c:74:1d:60:01:3b:e0:3f:6c:d5:de:83:a2:
         7d:84:26:dc:c9:d7:65:82:5f:7b:c4:92:9b:ab:1e:99:60:f3:
         ad:15:46:dc:7d:81:be:d9:b0:f4:9d:a1:9f:6e:1c:c6:d4:3e:
         5f:8b:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 6 18:59:43 2023 by rpki-client.