Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
File:                     138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer (raw, json)
Hash identifier:          7P+MCYCqHQH4+LAFIzLpHGqtUwCTnvRpyxl1Cki9Myg=
Subject key identifier:   FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285843BF2883B51F6A0B94FA9E4300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 19:33:14 +0000
Certificate not after:    Tue 21 Oct 2025 16:37:52 +0000
Subordinate resources:    AS: 397702
                          IP: 23.164.216.0/24
                          IP: 2607:46c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bf:28:83:b5:1f:6a:0b:94:fa:9e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  1 19:33:14 2023 GMT
            Not After : Oct 21 16:37:52 2025 GMT
        Subject: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:0b:1e:08:8e:b4:fa:03:ea:8f:7c:88:b5:
                    9b:44:de:37:df:c0:e5:a3:3c:c8:55:79:d2:5e:e5:
                    7c:4b:22:25:71:e5:b0:ed:9a:2b:28:e2:f8:10:57:
                    d1:6a:a7:d7:d6:d4:bc:cc:a2:de:dd:e0:87:4a:c3:
                    b9:04:b5:3a:0d:cc:e4:2a:4b:4e:3b:d8:25:6d:0c:
                    3f:0c:7c:e5:2d:75:a5:fb:c2:ea:29:7a:26:2c:8c:
                    70:ca:8b:29:6a:3d:30:e2:5a:e3:f5:94:65:37:1a:
                    68:04:06:ec:ac:cd:8f:d9:47:2a:17:13:cf:b4:30:
                    25:4f:b3:c3:5a:ff:7c:b7:c9:49:fa:9c:55:6d:5c:
                    ff:ef:82:ad:79:b6:4b:da:a2:86:48:81:f1:45:ec:
                    ea:5e:94:11:c2:cb:62:ad:ff:a4:04:cb:a7:35:34:
                    7d:34:8f:94:2a:57:fe:1c:26:58:f5:f5:3d:f3:d7:
                    1d:ad:4f:ce:6c:5d:51:cd:91:24:98:75:65:d0:04:
                    20:6f:41:ed:86:cc:a2:08:6e:3f:7a:cd:52:37:0e:
                    67:c2:ac:23:08:bb:f6:97:f6:9d:77:a9:5c:2b:e3:
                    29:f3:0d:7a:bc:78:52:32:85:67:26:29:c0:3f:04:
                    ce:92:04:89:d5:e7:d5:1c:5b:6d:fc:ad:ae:87:2a:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.216.0/24
                IPv6:
                  2607:46c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397702

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:83:bb:39:8e:95:16:43:8e:64:04:ee:ba:9e:23:06:4d:
         17:3e:59:93:67:b0:d2:af:8a:c2:72:88:4c:8b:f6:9e:ca:43:
         95:d8:db:f7:9b:0a:bb:62:80:bf:06:a1:4d:36:90:94:51:bd:
         ff:b0:93:cb:8b:b4:b9:34:1e:da:13:1c:ea:0b:3a:cb:e7:71:
         19:d7:97:38:4c:40:d2:79:04:4e:5c:d7:f6:78:c5:51:6b:45:
         5d:5f:1c:5d:d9:6a:45:2c:df:ac:6f:15:67:46:db:69:77:fe:
         e5:1d:87:67:49:17:e8:3a:b9:f5:77:d3:83:7b:3d:d1:ba:3d:
         81:e4:c3:be:21:da:de:f0:63:33:43:9f:82:c4:64:ac:e9:d6:
         77:2f:ce:84:6f:f5:0d:1a:35:02:c5:e8:f5:1c:25:34:be:68:
         bb:7e:4b:ca:97:2a:9b:c4:55:bb:c3:8f:a3:9b:dc:98:6e:72:
         7f:4e:65:cc:3b:5c:16:38:54:d7:42:77:4d:a9:b8:89:c4:0a:
         d3:f4:47:12:17:67:21:c7:8e:b3:02:f5:aa:3b:72:34:44:84:
         6a:97:91:1c:2a:65:45:46:79:2b:00:79:d6:b0:aa:c3:f3:75:
         d9:48:19:46:4a:c6:d9:84:64:c0:df:85:a5:d1:e6:b5:8f:02:
         b1:86:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org