Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
File:                     6fd900fb-7b81-4099-bb11-824fdecd0a86.cer (raw, json)
Hash identifier:          csp6x1F1Tv3ZBG4YEEDyG+dr4nQ0m/4gNwHFTbToHd8=
Subject key identifier:   3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858488F08F89032DF9BEC07362EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Jan 2025 01:45:33 +0000
Certificate not after:    Wed 21 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 16950
                          AS: 62501
                          IP: 23.164.24.0/24
                          IP: 2620:c0:a000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:08:f8:90:32:df:9b:ec:07:36:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 16 01:45:33 2025 GMT
            Not After : Apr 21 00:45:33 2027 GMT
        Subject: CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:b3:58:6f:2e:59:36:3f:b8:fd:d7:e5:f3:
                    28:81:3b:f8:35:c5:7f:fc:6a:dd:c5:a3:0c:70:38:
                    30:a9:dd:59:2b:00:47:2c:71:db:60:10:df:9d:b2:
                    ac:12:04:e8:4f:86:e8:8f:7a:06:eb:eb:a9:f5:1d:
                    74:df:16:9a:0a:19:0a:a4:83:51:93:b3:1a:47:70:
                    19:84:e8:b2:1f:ef:04:ff:7c:47:53:de:25:76:c4:
                    a5:9c:64:06:4a:2e:b1:40:b5:cb:6b:2c:49:2f:16:
                    d0:cf:af:83:99:ad:c5:a4:c5:6d:97:f2:56:27:68:
                    20:2a:45:61:d3:60:f5:5b:c1:12:be:43:f4:1f:93:
                    04:f0:58:86:ad:2c:de:0e:3a:a9:2f:dc:43:0c:91:
                    84:2b:c6:60:ff:c4:3f:d4:06:75:c1:d8:b6:29:95:
                    e3:69:6d:32:27:44:2f:ef:df:07:cd:51:ba:da:e0:
                    9e:3b:ef:d2:82:42:6d:1e:68:bb:7f:e0:4d:3f:85:
                    c4:fb:8f:ae:bd:db:cd:d1:ab:f6:8f:da:5d:3f:5e:
                    36:50:50:52:f6:fc:3b:c7:d0:92:86:7e:d9:91:d7:
                    86:56:06:b8:72:99:7e:98:7a:ff:16:af:e1:8d:91:
                    64:ba:61:b8:ce:7a:6c:5c:df:f9:fb:32:6b:b3:80:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.24.0/24
                IPv6:
                  2620:c0:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16950
                  62501

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:5b:61:e3:32:ae:b4:c2:ca:00:6b:1d:ef:67:19:07:e0:
         51:23:c7:af:c8:c6:3d:4b:ee:c8:95:01:fc:d0:7e:8e:6e:74:
         26:a9:65:08:7e:fa:b3:a2:e3:7e:fc:df:28:5e:36:78:82:d3:
         cb:05:3c:fb:38:83:e9:69:48:1e:b8:f8:52:9e:cf:40:69:3d:
         ac:d9:2e:5f:f3:d4:07:fe:9e:81:05:d1:f8:5c:4f:be:6f:ff:
         d4:32:52:3b:bb:b5:a9:7d:eb:b1:76:63:dc:e7:f3:0a:67:0f:
         ba:df:dd:5b:74:54:57:f5:fb:1b:09:9f:11:d8:f9:12:72:1d:
         66:25:03:5a:2d:22:6e:a2:7c:84:21:b3:fb:21:bf:66:ac:27:
         88:38:e1:b6:0f:a8:5c:eb:bb:f7:a0:40:c6:10:df:78:db:20:
         e3:d2:d3:69:23:0f:b5:8a:5e:38:08:4d:2a:3d:f3:04:b7:f4:
         08:dd:dd:00:46:25:92:e2:3d:a5:e9:35:0a:6c:e5:fc:98:a3:
         f3:7f:bd:13:be:61:85:ed:8d:93:13:85:d9:13:de:c0:24:83:
         4b:0c:c5:2f:33:ff:39:70:bb:89:73:08:32:d9:57:37:80:ce:
         97:e4:08:04:32:83:1e:78:54:6f:65:17:88:77:16:4e:66:fd:
         ec:32:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:40:14 2025 by rpki-client