Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
File:                     0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer (raw, json)
Hash identifier:          I08COrhRMslDeWvUksvWC9L3oZKCG98WeKESG/R7M1w=
Subject key identifier:   62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584264FB82B0585FB011D518F080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 30 Jun 2023 19:32:52 +0000
Certificate not after:    Thu 02 Oct 2025 19:32:52 +0000
Subordinate resources:    AS: 26703
                          IP: 66.102.208.0/20
                          IP: 2605:2240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:64:fb:82:b0:58:5f:b0:11:d5:18:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 30 19:32:52 2023 GMT
            Not After : Oct  2 19:32:52 2025 GMT
        Subject: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:73:b3:db:5e:87:db:50:a1:69:76:64:e9:
                    08:24:f0:47:45:d6:ba:d6:48:e7:77:80:9b:78:67:
                    37:1f:5e:a4:f9:b5:a3:9a:89:34:10:27:de:67:60:
                    1f:61:d1:53:92:e4:a3:7c:60:79:0c:b5:9b:e6:c5:
                    8c:49:36:12:6f:a8:18:bd:99:d1:9f:d3:ba:2a:11:
                    c1:b3:67:6f:e3:8c:5a:31:b4:cd:ac:cd:3c:a9:2e:
                    d2:2a:8d:26:cc:27:eb:1e:59:62:05:13:b9:d7:da:
                    e3:b8:68:96:b6:8e:70:6b:f8:f0:ed:06:a3:45:9b:
                    45:ae:97:08:2b:3c:d9:33:ac:52:50:14:a5:9c:1f:
                    96:cf:37:98:2a:89:12:84:26:a4:17:c0:57:e3:93:
                    b4:31:6d:21:80:4f:81:a5:4e:82:27:af:26:bb:3d:
                    97:bd:8e:32:31:04:dd:14:bc:87:4b:c7:b0:3e:0a:
                    37:c5:31:8a:0d:17:11:88:b0:3a:65:f3:b1:36:95:
                    c4:0b:c6:ef:1e:0c:6f:de:a6:14:ec:11:dc:2c:82:
                    c0:d7:5e:47:33:54:5d:1b:64:f3:10:14:1c:fb:2c:
                    70:e4:c6:4f:b0:68:e3:4f:51:6d:f6:1e:8b:b5:bf:
                    ae:1d:cb:10:93:cf:eb:f7:93:d2:c2:6f:e1:e3:fd:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.208.0/20
                IPv6:
                  2605:2240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26703

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:ba:6f:f7:95:43:aa:43:be:f0:ff:06:b6:46:4e:62:f6:
         0e:08:5d:db:ed:a7:9c:a1:7a:4f:c8:f9:e4:3b:a0:ec:ec:25:
         17:4b:a7:0d:07:fa:a1:6f:ad:4a:70:4b:89:c6:e3:8b:96:f0:
         cf:42:f7:83:e7:0c:6a:0b:fd:7e:a9:90:30:64:f3:1a:e6:59:
         9d:4a:cf:ee:b7:16:7c:ea:0a:1b:cb:27:9e:80:03:d2:f2:79:
         ff:fd:4a:58:02:dd:b4:a6:07:11:35:f9:a3:93:83:e0:3e:5d:
         7a:32:dd:c8:1c:27:b2:b0:0a:6b:61:8b:d2:86:34:5b:65:9e:
         4c:89:6b:7e:e4:be:a5:89:f4:14:e0:d8:ec:e8:f1:cd:cc:a3:
         d0:1b:be:3c:ad:f6:5a:1d:b9:09:2e:a6:57:e6:bd:d7:f8:3a:
         f5:ec:74:cc:a1:74:1a:20:1a:23:b1:1d:a6:0b:0e:d7:35:b8:
         97:53:17:a7:cb:dd:9a:3d:e6:ba:9a:23:6c:8e:3e:38:b6:c9:
         c1:7b:70:09:e1:69:ab:ca:0c:b4:4e:3e:15:6d:59:4f:b6:17:
         9e:2f:94:c8:4b:21:a5:0d:33:fd:87:a1:99:01:3c:90:9b:ab:
         62:1d:af:17:99:8a:16:e8:99:4d:25:9e:40:3f:da:5f:45:82:
         32:dd:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org