Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.cer
File:                     2ce6405b-c85b-4c9e-8e9b-14a468b42aae.cer (raw, json)
Hash identifier:          xkvEsdTd+d0JmLX/5K26q+OFQuIIvqr+c9pRvBF6vd0=
Subject key identifier:   79:9C:52:5D:AC:7A:2F:00:8C:67:A9:56:99:4E:A7:BA:EC:CC:4A:A9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F17BA8DD4C706391BB050C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Nov 2024 15:18:55 +0000
Certificate not after:    Tue 23 Feb 2027 15:18:55 +0000
Subordinate resources:    AS: 399394
                          IP: 205.151.162.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:7b:a8:dd:4c:70:63:91:bb:05:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 20 15:18:55 2024 GMT
            Not After : Feb 23 15:18:55 2027 GMT
        Subject: CN=2ce6405b-c85b-4c9e-8e9b-14a468b42aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:70:7d:0c:8d:83:d6:fc:e5:bd:54:d1:1e:c1:
                    07:b5:46:c0:e5:9d:5f:fc:10:c6:80:bf:a5:27:8a:
                    d5:38:ec:bd:02:de:9e:a6:5d:12:9c:e4:7b:5c:72:
                    61:8e:3f:c0:11:fe:20:1c:fa:45:11:68:59:5a:bf:
                    77:2d:8e:a5:e9:41:df:bd:36:c0:53:dd:34:7a:d9:
                    ec:cb:d2:0c:b5:cb:5a:47:b7:8b:11:b2:83:fa:1b:
                    5e:5f:ab:67:2f:c5:4b:7d:05:94:4e:8c:6b:67:08:
                    ea:a1:31:d0:f1:b7:53:0c:24:b9:45:85:d6:6d:02:
                    9a:7c:fa:7a:e5:32:40:18:95:6d:01:c0:fd:2b:fb:
                    cf:03:44:bb:f4:9f:1d:01:7b:29:2b:ee:83:9e:41:
                    0d:0f:2d:c4:9d:1e:17:38:d3:02:99:50:0b:36:ec:
                    31:40:48:62:d9:a7:85:d2:36:75:28:0e:8c:82:92:
                    43:e4:8a:f3:c0:36:ea:b0:ec:2d:b3:3c:28:50:fe:
                    38:9e:88:8c:4c:1b:76:69:ef:02:3d:9d:20:51:48:
                    77:cf:e9:7b:70:88:56:8a:dd:5e:cb:8d:ac:7b:61:
                    a7:5f:49:99:ff:2d:25:6e:d0:d0:ab:62:03:fd:35:
                    bc:31:8c:cb:fc:b4:ef:ae:fc:b8:56:7a:43:b8:93:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9C:52:5D:AC:7A:2F:00:8C:67:A9:56:99:4E:A7:BA:EC:CC:4A:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.162.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399394

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:aa:1e:6b:15:06:97:fa:81:45:6c:9a:64:4b:e4:29:42:
         d8:3c:ff:6e:13:29:d6:b7:2a:92:51:c5:2f:90:78:fb:10:4f:
         57:64:d3:e5:88:bb:fd:83:f2:fd:da:c0:4c:f4:e7:62:a7:3f:
         bd:e1:c6:b7:eb:b0:0e:5a:82:83:39:32:fe:84:9b:6f:1b:38:
         6a:91:46:1b:68:f5:45:48:71:7d:15:91:ba:76:4b:2d:11:f2:
         6c:78:1c:47:0e:e2:a9:c1:e8:11:14:f2:56:44:16:f3:50:e5:
         cf:71:f7:4f:0f:d3:fd:2f:e0:8e:09:87:42:af:0f:22:0b:57:
         93:2c:1a:18:88:70:b8:14:22:c8:96:d8:c6:17:44:64:50:bf:
         46:29:6d:2a:af:e7:ab:4c:08:1d:d5:4a:be:9f:b7:0c:1b:ca:
         02:6c:03:43:3e:ad:95:d4:5a:aa:02:f7:7d:fd:e5:81:ee:7a:
         d3:27:2f:f8:68:f0:e1:33:88:34:49:36:a6:7d:9b:af:be:c3:
         04:fe:f9:e2:e5:43:f1:46:7e:0f:76:43:06:be:07:b2:0e:16:
         f6:0c:95:b2:c6:c5:7d:5f:d7:19:66:30:38:c6:6b:77:59:5f:
         cc:98:22:5a:21:58:8c:18:ed:4d:0d:6e:ae:da:26:fb:9e:09:
         46:6f:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org