Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/54f65bbf-cfcd-4a19-b840-b27bc1c714f5.cer
File:                     54f65bbf-cfcd-4a19-b840-b27bc1c714f5.cer (raw, json)
Hash identifier:          /TFv6OzR+qaMYtn2QIvwahVkwc4KvrDPKYDDvAwUfjE=
Subject key identifier:   8F:1C:F9:B2:29:DD:50:6F:28:A7:C7:8C:C3:EA:D5:69:34:23:95:B2
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CD5ABAD185B3DF5ABB51F580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/54f65bbf-cfcd-4a19-b840-b27bc1c714f5/54f65bbf-cfcd-4a19-b840-b27bc1c714f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/54f65bbf-cfcd-4a19-b840-b27bc1c714f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 16:43:28 +0000
Certificate not after:    Wed 10 Feb 2027 16:43:28 +0000
Subordinate resources:    AS: 393440
                          IP: 104.218.168.0/21
                          IP: 142.54.192.0/21
                          IP: 162.255.216.0/21
                          IP: 204.13.24.0/21
                          IP: 2606:b80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:5a:ba:d1:85:b3:df:5a:bb:51:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 16:43:28 2024 GMT
            Not After : Feb 10 16:43:28 2027 GMT
        Subject: CN=54f65bbf-cfcd-4a19-b840-b27bc1c714f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:70:e9:0e:80:e4:39:32:e9:e0:7f:79:1e:28:
                    9a:a1:d9:fd:e1:aa:84:57:d4:21:1a:06:68:d1:d2:
                    1b:87:90:65:7a:51:c5:3e:6a:54:cf:b0:75:f6:7e:
                    00:95:04:1c:d2:ab:db:81:23:62:f6:d6:17:9f:40:
                    1d:9d:a6:36:e7:2e:27:82:6f:04:a0:06:cf:99:8a:
                    4d:10:65:69:99:d6:0e:d9:c9:ce:d5:59:fb:b9:12:
                    1e:9e:2e:ce:d3:3e:a4:2b:50:51:92:d1:b2:0a:8a:
                    a8:d1:01:15:bb:65:3a:3f:89:6b:06:09:2c:6b:fd:
                    64:6e:ab:80:a3:10:ba:3e:53:34:1c:74:d4:12:1f:
                    da:24:c4:b7:d2:93:f3:ef:c0:c9:d2:42:82:3e:c9:
                    9e:85:ec:22:9d:12:25:42:a1:84:45:82:5d:a3:37:
                    b9:cf:99:04:b9:d3:cd:ad:cc:08:74:16:78:ac:88:
                    65:95:e7:f7:c6:7c:20:29:ff:d0:d5:20:22:9c:f8:
                    77:b3:6b:02:4c:cc:f8:b9:69:6f:30:69:d7:05:62:
                    ce:c5:f6:61:4a:9d:3c:5b:23:12:17:81:fb:2a:e1:
                    f6:6f:53:45:85:5c:c4:c4:b4:80:e7:bc:eb:d2:df:
                    86:73:d9:15:20:77:14:aa:92:b8:07:a9:fb:ce:48:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:F9:B2:29:DD:50:6F:28:A7:C7:8C:C3:EA:D5:69:34:23:95:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/54f65bbf-cfcd-4a19-b840-b27bc1c714f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/54f65bbf-cfcd-4a19-b840-b27bc1c714f5/54f65bbf-cfcd-4a19-b840-b27bc1c714f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.168.0/21
                  142.54.192.0/21
                  162.255.216.0/21
                  204.13.24.0/21
                IPv6:
                  2606:b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393440

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:70:a1:fc:98:75:27:f1:14:dc:68:e9:58:44:8d:c4:28:
         5e:d0:ee:c9:03:4b:0f:ee:62:cc:f7:ec:44:e0:eb:fe:e2:ef:
         b8:70:2a:44:a6:1c:66:d1:19:54:1d:53:d2:a0:ea:c5:9f:58:
         21:dd:3c:49:31:c8:cc:b8:9d:61:a5:4e:06:91:b7:75:4f:ce:
         44:ca:b0:a9:4d:2f:29:40:0e:1d:ee:da:bb:fd:cd:0f:3b:b3:
         66:78:ee:5b:87:97:07:9a:8b:aa:98:b2:d3:49:e5:2b:3d:c9:
         7f:2d:c9:bd:8f:df:5c:21:42:20:be:e5:cd:93:11:1f:f7:22:
         7a:75:33:5d:71:6a:6c:85:d8:84:81:da:07:03:18:9a:02:53:
         2b:32:17:15:67:79:19:de:02:69:00:83:69:cb:77:b3:ab:42:
         94:f5:9c:91:18:c6:a5:3a:3a:59:b0:5e:53:a0:07:a0:8c:96:
         a0:7d:bc:fb:08:6d:01:be:95:14:7a:f3:34:cc:8a:e4:9b:05:
         03:b0:df:f0:95:6b:ec:32:93:b1:f8:93:49:ad:8c:84:5c:0a:
         9e:c8:43:92:74:d9:2a:a4:f3:6e:ae:ec:5b:9c:c1:1e:21:fa:
         1a:23:bf:cf:08:13:cc:24:49:7f:5d:e5:71:63:b3:ba:3a:3c:
         98:df:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:03 2024 by rpki-client on console-ams.rpki-client.org