Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
File:                     fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer (download)
Hash identifier:          KoT4lhtx2hHDU56OY05NEN03SMi4JgmPyUFD4D1oe6k=
Subject key identifier:   1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583E2F10AF5A9F6BAC2A069F4740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Wed 24 Mar 2032 13:54:21 +0000
Subordinate resources:
    1: AS: 40249
    2: AS: 400547
    3: IP: 23.137.40.0/24
    4: IP: 149.112.30.0/24
    5: IP: 2602:fb78::/40

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2f:10:af:5a:9f:6b:ac:2a:06:9f:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun  9 16:54:07 2022 GMT
            Not After : Mar 24 13:54:21 2032 GMT
        Subject: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8b:db:38:91:9d:8d:5c:6b:76:7d:df:e9:12:
                    66:35:d4:ac:6e:0e:1a:53:0b:05:b5:90:12:82:e6:
                    c6:87:18:81:8e:a4:e5:ad:9b:50:8b:38:ed:8c:d0:
                    4e:cc:0d:c3:e7:b4:b1:24:d7:84:82:c7:d2:1a:f5:
                    e5:f4:f7:18:ce:1b:e9:7e:cf:90:0a:86:b3:73:17:
                    e8:b1:cc:18:06:f9:00:c8:2a:5e:91:9a:e4:f2:0a:
                    d3:ce:db:3c:31:ab:43:cb:96:f5:39:2b:9c:14:56:
                    37:4a:82:34:21:9b:16:94:aa:33:fb:d7:f2:79:b4:
                    1a:97:98:e0:49:f8:cc:18:85:3c:32:81:56:2d:67:
                    a0:90:08:c0:c9:53:a1:55:6e:0e:6d:d3:cb:ea:94:
                    9e:f2:f1:7f:a0:c3:92:61:50:49:93:6f:89:21:06:
                    e6:d9:a6:88:39:03:23:14:27:b3:64:9c:9a:2f:63:
                    9c:de:c0:6c:95:fc:46:21:fb:4e:c5:2d:62:63:a0:
                    e8:e1:22:ae:df:99:d7:22:59:a1:78:ab:96:e2:b3:
                    f2:c4:54:67:e9:85:2c:2f:a7:13:5a:c1:3a:d1:e2:
                    bf:6e:b3:d5:ad:82:39:21:82:9c:b4:dd:d7:20:c0:
                    2d:d5:6a:02:f4:ee:a3:61:b9:bc:c4:21:39:58:b3:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.40.0/24
                  149.112.30.0/24
                IPv6:
                  2602:fb78::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40249
                  400547

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:29:82:19:73:ce:b3:6e:25:73:e1:41:cf:27:d3:77:24:
         e4:fa:de:db:2b:c3:79:c5:62:9c:ed:84:c2:ee:9d:22:a0:ff:
         e7:16:fa:e0:72:d0:47:3a:56:48:1b:92:c0:8d:ec:f6:bd:b5:
         0f:e2:fc:7d:0c:84:bc:d9:af:a0:a4:d8:95:42:6c:ca:9f:24:
         96:26:89:4a:2a:02:26:87:78:a0:5f:47:2f:c5:5a:4f:90:0f:
         8d:ea:cc:93:61:50:2f:bd:da:bb:91:7a:96:33:db:7a:4c:cd:
         2c:b5:56:20:32:e8:02:46:b2:b3:bd:23:be:ff:30:14:ee:6b:
         a2:22:0b:1d:c3:8a:61:fb:04:1c:10:eb:aa:30:f6:c6:3c:44:
         65:49:e5:1e:08:fa:94:ee:ea:1e:aa:c7:4b:78:da:34:0f:7a:
         b3:48:df:84:76:44:eb:40:24:99:d0:83:aa:95:74:13:a2:14:
         53:75:82:5f:80:e6:1d:d0:09:42:9a:47:37:c5:db:a4:15:3b:
         25:b2:58:0b:06:34:4a:eb:ac:5f:e0:62:63:57:16:54:2c:b0:
         34:4b:be:49:53:cc:fe:f8:bf:9c:14:fe:81:da:0f:11:d8:09:
         8a:2e:4b:16:64:25:43:46:f4:3f:8b:0b:6c:67:e4:89:38:9b:
         84:be:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 30 09:41:43 2023 by rpki-client.