Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
File:                     237e8029-86f4-41b0-ab75-535531b02fb3.cer (raw, json)
Hash identifier:          ztrAMtRljXdDR0iqTWcVANSxxJqRkGk4b1H7wiHFPdg=
Subject key identifier:   F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847D8F6D7068D7D46B02A6A1D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 20:31:54 +0000
Certificate not after:    Sun 14 Feb 2027 20:31:54 +0000
Subordinate resources:    AS: 30713
                          IP: 209.221.64.0/18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:f6:d7:06:8d:7d:46:b0:2a:6a:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 11 20:31:54 2024 GMT
            Not After : Feb 14 20:31:54 2027 GMT
        Subject: CN=237e8029-86f4-41b0-ab75-535531b02fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:69:f6:03:56:72:6c:d7:48:be:52:48:40:
                    c7:43:73:c8:c6:bd:ac:89:44:59:7f:77:36:64:0f:
                    8a:de:23:7b:41:de:cc:a0:42:57:d5:49:fa:d5:15:
                    7e:35:8c:a3:2e:a5:ba:4f:74:9e:bc:9e:21:b2:87:
                    e0:92:46:9b:e5:c8:dd:11:44:ac:c7:1f:63:a7:90:
                    a9:f6:c4:8f:b2:c5:1e:9e:3c:d3:7e:0a:ce:99:1d:
                    85:cc:9f:6d:16:c6:8b:95:e2:fc:e6:8f:84:ad:58:
                    1e:30:3c:27:f3:e3:4d:f8:cb:5e:b5:a6:e6:fd:8c:
                    ed:1d:60:f2:2f:ea:56:19:8c:cc:61:ae:62:c3:1e:
                    d9:e3:eb:08:0a:ed:72:a7:1d:0a:7a:41:73:55:7b:
                    7d:7c:fe:7d:2e:fa:25:6c:34:c5:2a:d2:5a:0e:f0:
                    d6:0a:b1:b6:e6:fd:5f:e1:10:bd:5a:e9:7c:d8:bb:
                    15:a1:88:a0:e8:e3:e3:8d:71:dd:ed:8c:1c:cf:5a:
                    13:00:88:2b:21:61:a5:2b:22:2d:45:8c:82:16:8e:
                    47:70:e0:3f:96:d8:4a:4f:c4:de:17:b7:0d:48:e7:
                    4d:cf:98:28:87:a8:17:9d:94:83:df:01:5b:8a:35:
                    1b:86:35:1a:48:69:b2:53:f0:83:55:f3:b1:d7:52:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.64.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30713

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:bf:b2:63:1b:4f:14:78:e1:44:c8:d0:b4:49:c6:49:7b:
         54:04:3b:2a:9a:33:f2:2b:01:01:24:11:d5:07:bd:de:37:b1:
         fd:e3:69:e7:b8:15:ac:14:77:09:89:e7:4b:8b:0b:8c:0c:5b:
         ba:5e:1c:dd:91:ec:15:03:92:1e:57:68:7b:b0:cb:f5:9e:89:
         27:53:fc:5b:2c:f7:58:46:c8:eb:15:e1:db:14:ff:e0:a8:c3:
         4e:2d:25:7a:c6:42:65:8f:46:6e:75:ee:43:3e:ff:19:b2:34:
         8d:85:03:33:22:e5:d7:74:06:f3:bf:7f:3a:1a:9f:1e:e6:ed:
         8f:d2:45:b0:9f:1a:2a:b6:82:5a:3a:8e:9b:82:ba:c7:95:a1:
         8a:bc:a4:de:d5:1f:ec:3e:48:1d:1d:98:36:90:ad:61:e4:96:
         07:c4:45:a7:d5:81:d0:4f:2a:b4:70:91:89:b3:c2:c6:40:65:
         d1:71:f3:02:55:e5:9a:18:8c:e8:e4:68:d3:c6:a0:15:85:d5:
         d0:3a:9c:06:72:51:92:62:e1:35:ae:1c:80:d5:f0:2f:11:80:
         cc:ef:ce:9f:91:e6:9d:49:b1:19:2b:c4:aa:b6:30:ee:47:b3:
         0c:92:e4:57:3b:41:30:49:54:ec:1e:3d:cb:d6:47:e5:f5:a2:
         3f:55:12:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org