Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer
File:                     de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer (download)
Hash identifier:          VUxaWRmEo1KURZV2kpIJoW5dhiwdIcyfeqfBDSnfRtY=
Subject key identifier:   F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D76A78346244EAD667B49C600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Sun 28 Mar 2032 13:35:03 +0000
Subordinate resources:
    1: AS: 400564
    2: IP: 23.134.136.0/24
    3: IP: 2602:fb9f::/36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:76:a7:83:46:24:4e:ad:66:7b:49:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 28 13:35:03 2022 GMT
            Not After : Mar 28 13:35:03 2032 GMT
        Subject: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:95:a0:af:58:b6:d4:5e:23:8d:5f:e7:82:
                    88:97:c6:83:e9:ef:9c:e0:f1:dd:0b:79:64:43:5f:
                    c1:a4:c3:f8:96:13:ff:71:aa:ea:6f:9b:08:ff:1a:
                    a7:96:c2:f7:1e:a1:cc:8f:73:ca:28:6b:c5:a5:bc:
                    bc:fc:d7:49:4e:1c:f3:2f:29:97:32:65:d9:82:e3:
                    e0:97:c5:5b:09:91:d2:b2:20:f9:60:b0:ac:8e:10:
                    a3:95:19:31:d7:61:42:99:8c:13:82:2c:82:c8:30:
                    56:01:55:7b:53:c6:e7:00:00:60:07:38:ed:f6:b2:
                    71:1d:6f:cd:0a:e4:4c:40:4c:77:dc:e7:52:8b:8e:
                    ee:9f:64:d8:01:6a:ab:26:70:02:06:4d:7a:d4:c8:
                    d6:cd:2d:0d:e4:4c:14:53:81:94:3b:8e:21:5a:ee:
                    a6:2c:0c:63:fb:1e:6a:15:5f:81:fc:8e:e1:ac:63:
                    ff:70:bc:15:f0:01:58:06:4c:fa:f6:43:26:c0:d8:
                    44:d9:78:e0:35:6d:57:a5:6f:61:ed:1b:3a:ee:ea:
                    51:ad:97:6f:d6:18:c4:c0:86:2f:61:32:6b:d4:ca:
                    31:5d:69:9f:11:d6:8b:6b:58:89:75:90:5b:f0:af:
                    e2:c2:a1:04:1d:cc:90:6c:a9:53:27:46:5f:0e:ca:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.136.0/24
                IPv6:
                  2602:fb9f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400564

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:6a:2b:09:ef:a6:f6:08:ea:ad:6f:c2:7f:0b:05:40:62:
         92:b0:c3:9e:de:01:d1:ae:c7:a6:a0:61:e9:5f:36:f5:ff:c4:
         09:be:cb:6e:8b:34:89:73:b8:77:8f:91:6f:84:d9:7f:58:a2:
         dc:d7:8c:24:ba:11:c7:f6:b8:9b:cf:60:e3:74:79:69:e3:f2:
         6d:e8:b9:0e:5e:b2:fc:ba:43:f0:38:1d:9f:87:db:0c:d8:48:
         11:5a:52:d9:1f:bf:c1:4c:c2:b8:e6:d6:27:97:e6:82:23:20:
         11:02:2d:f2:01:96:97:c1:6f:d7:18:2f:50:ee:2d:56:89:30:
         3e:f8:4b:e0:f7:89:20:98:88:8d:32:96:74:b6:06:f0:30:5c:
         48:c4:11:48:4c:77:19:31:86:55:a9:7c:40:94:2a:ac:99:66:
         f7:2d:cd:68:91:6a:b1:4e:d8:68:3f:e7:1f:8c:cc:8f:05:cb:
         ee:b1:5f:4c:02:56:82:f3:71:f3:4e:4e:d9:dc:42:b6:99:bd:
         64:fd:32:28:45:fa:e0:0a:97:52:e7:cd:17:9a:1f:8f:02:0a:
         82:2e:7e:d1:44:4f:7a:4b:14:fa:c1:ad:f1:f3:63:05:93:c5:
         d4:de:0b:c7:d2:52:a4:fb:c9:8f:23:b6:be:20:34:7b:47:17:
         02:a0:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 2 13:34:51 2023 by rpki-client.