Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d.cer
File:                     4632e5fd-374e-430f-9af3-308c1ec6c72d.cer (raw, json)
Hash identifier:          MGA2f5XcZVNH+nXDpIt0TYzWJgwJNA5J6BvnOULG0dg=
Subject key identifier:   8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B3AFE844212982F4BF7FE240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 12:04:05 +0000
Certificate not after:    Mon 01 Feb 2027 13:04:05 +0000
Subordinate resources:    AS: 395261
                          IP: 23.155.128.0/22
                          IP: 45.59.96.0/22
                          IP: 104.247.100.0/22
                          IP: 136.175.68.0/22
                          IP: 2607:4980::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:af:e8:44:21:29:82:f4:bf:7f:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 29 12:04:05 2024 GMT
            Not After : Feb  1 13:04:05 2027 GMT
        Subject: CN=4632e5fd-374e-430f-9af3-308c1ec6c72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:6b:51:4f:11:9a:01:ab:c2:63:34:a8:51:
                    52:fd:f1:e2:9d:83:8f:eb:dc:13:df:fc:93:20:6d:
                    ab:12:2e:16:93:a2:6e:10:b8:dd:ee:73:6b:82:62:
                    81:ee:6c:51:4e:1d:56:8e:67:9b:91:18:83:63:a9:
                    d6:db:ae:8e:6d:5c:bf:79:55:87:42:ef:b3:53:07:
                    03:4b:9c:fc:6f:59:79:82:fe:38:8f:62:51:e1:04:
                    f5:f8:59:f4:e5:fe:7c:d4:40:c6:1f:52:c3:65:9e:
                    f2:6e:6c:03:9b:b3:fd:51:9c:d3:fb:58:6d:db:1b:
                    14:ed:8e:73:2f:e6:2d:6c:b1:8f:d5:01:7c:64:3d:
                    30:d7:a0:ce:40:23:53:3b:e0:51:a5:72:14:c4:7f:
                    d6:27:3e:86:22:b8:64:dd:ae:8b:74:c9:74:aa:04:
                    ae:ea:29:d6:cc:00:51:44:4e:af:c2:bc:6b:2d:0c:
                    1c:56:21:5e:bc:77:80:a4:6d:a9:8f:5c:46:50:20:
                    32:8e:db:60:46:53:15:1f:81:80:84:d8:3b:d3:a8:
                    b4:3f:e1:b9:9b:3b:a5:dc:4a:cd:6c:1f:28:30:5a:
                    9a:61:f7:e2:a6:08:23:94:ec:06:43:7a:a5:19:93:
                    13:a4:1a:f1:86:b1:58:99:78:69:58:13:48:14:8c:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:E9:8C:D0:6A:A4:EE:96:EB:AE:99:01:C5:47:9D:8B:AE:0F:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4632e5fd-374e-430f-9af3-308c1ec6c72d/4632e5fd-374e-430f-9af3-308c1ec6c72d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.128.0/22
                  45.59.96.0/22
                  104.247.100.0/22
                  136.175.68.0/22
                IPv6:
                  2607:4980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:43:17:d0:7e:9d:e8:ed:36:f9:49:94:38:88:b5:7b:87:b7:
         22:9f:f3:a3:a8:b9:c5:29:80:f4:0f:6f:e8:e9:f3:16:b8:af:
         71:80:b8:53:4e:19:23:97:29:b3:52:74:15:8e:64:e6:55:2b:
         a6:9e:f7:a3:4d:72:cd:b8:d8:7b:bc:59:9a:a7:1f:1c:c2:3f:
         3e:93:ed:d1:c1:ab:e1:82:4a:bb:af:b6:33:83:84:18:18:9a:
         24:e6:ee:5e:43:1e:3b:35:22:7f:c8:1f:b0:a1:22:75:24:fc:
         04:88:60:19:2e:37:df:21:33:5c:d3:9a:f0:00:be:e5:f1:b6:
         4d:11:20:ff:00:92:30:bb:e0:86:93:47:f0:3f:a0:e8:fa:a3:
         c6:43:32:c4:d4:e4:5b:db:4d:e0:e1:80:e7:0c:42:9e:b2:9d:
         01:4d:86:8b:3e:bb:8b:73:a6:ee:00:52:6d:2e:0c:37:1e:93:
         5a:a6:06:11:67:57:35:ee:35:29:7a:27:9a:26:a7:be:84:74:
         c8:e5:62:1f:f0:3c:01:dd:71:e8:47:74:da:50:30:b7:d8:68:
         36:c7:99:b1:34:03:6d:34:d8:d0:dd:3f:20:c2:0e:33:82:91:
         f2:b7:2a:66:17:50:53:2d:8f:1b:98:2d:5b:e3:65:15:a9:e6:
         c3:8e:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:02 2024 by rpki-client on console-ams.rpki-client.org