Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1.cer
File:                     4731b471-c045-455f-9d0a-57941b9a76e1.cer (raw, json)
Hash identifier:          Lz++kvQAXDZEFGbdftsreyuYL3lTQO+Tvst/GwnfhLs=
Subject key identifier:   7C:8F:7A:14:70:20:38:96:ED:C5:7A:C9:3E:1E:64:BE:BA:7A:0C:1F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CB6954C17C2DFD0D8EBCF800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/4731b471-c045-455f-9d0a-57941b9a76e1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 00:01:16 +0000
Certificate not after:    Wed 10 Feb 2027 00:01:16 +0000
Subordinate resources:    AS: 400202
                          IP: 23.128.232.0/24
                          IP: 165.140.48.0/22
                          IP: 2606:8dc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cb:69:54:c1:7c:2d:fd:0d:8e:bc:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 00:01:16 2024 GMT
            Not After : Feb 10 00:01:16 2027 GMT
        Subject: CN=4731b471-c045-455f-9d0a-57941b9a76e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:37:01:25:63:3e:10:9d:f8:98:98:9b:8c:
                    4a:39:f9:5f:a4:15:5f:27:2a:4c:2f:63:99:1f:57:
                    bc:43:0f:89:58:1d:39:4b:80:50:52:f1:71:30:53:
                    96:5d:a5:85:b4:49:63:a1:4d:0d:1e:2c:d0:ee:13:
                    1b:dc:31:4e:6d:06:1a:8b:9b:b4:0c:ba:d7:9a:ca:
                    76:45:6d:32:0c:58:c9:2d:6f:8e:fe:b0:ad:4a:71:
                    bb:97:21:ff:c5:b2:67:60:75:4e:63:ef:18:19:ef:
                    1f:ef:9b:a6:83:a5:aa:9b:d2:a3:2b:7b:94:67:9f:
                    95:15:b6:a6:f3:00:f8:a9:56:12:4a:55:04:7f:ce:
                    a5:0b:57:e3:9e:90:b6:7a:06:ac:65:dc:a9:4c:ad:
                    c0:59:7f:6f:da:dd:55:ff:e7:c3:d3:63:98:e0:f9:
                    02:b2:0c:3e:46:82:03:85:f8:4b:37:6c:b6:9f:29:
                    80:0f:d7:38:c9:56:36:ac:72:4d:20:fb:7b:e0:f5:
                    61:c2:e0:dc:46:18:78:91:ce:51:b7:25:ec:92:af:
                    a4:e1:63:ba:91:54:5e:33:f7:df:5a:63:ea:55:cb:
                    88:20:76:cb:c0:78:9f:3f:75:73:a5:53:0b:e9:8f:
                    37:4f:78:c2:cd:02:88:e5:de:a2:a4:c2:5f:ec:78:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8F:7A:14:70:20:38:96:ED:C5:7A:C9:3E:1E:64:BE:BA:7A:0C:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/4731b471-c045-455f-9d0a-57941b9a76e1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.232.0/24
                  165.140.48.0/22
                IPv6:
                  2606:8dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400202

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:f6:f9:b3:07:58:b9:4d:08:1c:30:be:5e:a0:dc:7d:4f:f4:
         19:3e:5c:0e:f9:42:ff:13:de:61:3e:d2:1e:c1:0b:4f:02:1c:
         a4:7c:62:e3:47:6b:d4:87:6c:d4:e1:bd:c0:f5:ac:77:2e:0c:
         ef:53:a9:b1:7a:25:a8:73:61:29:e2:c4:3f:ef:62:40:78:3a:
         2b:89:37:cd:39:72:f3:57:99:2e:f6:ff:ea:f0:b5:22:23:d2:
         e5:8b:5c:c5:72:36:ec:cf:9c:7e:39:7f:03:e4:5a:b6:cc:31:
         ba:5c:7a:1a:14:c1:f6:cb:39:19:52:17:33:34:bb:77:a4:04:
         2f:e0:38:dc:48:f0:2d:c9:bc:34:59:00:8e:c6:35:66:fd:3d:
         1a:1d:2c:13:03:d6:b9:41:23:94:5a:f3:c8:60:b0:67:7f:88:
         d2:31:9b:19:f4:d9:5c:70:9f:bc:e1:f8:f6:f3:3f:8d:b1:d4:
         3b:cf:85:75:fe:5d:51:76:ac:c0:71:9e:38:85:b7:d0:8d:30:
         fa:09:63:53:b3:7a:11:8c:be:c0:08:59:20:db:c7:bf:7b:15:
         cd:51:78:07:76:68:22:1b:e6:1c:92:e2:31:18:99:8e:9d:71:
         80:2b:23:cc:35:70:e6:a7:c3:69:d5:d4:c4:bc:bf:68:ba:95:
         8b:b7:6c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org