Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
File:                     994eeb97-12ef-4721-824f-9ba41ba67983.cer (raw, json)
Hash identifier:          lwe+kFq2j2W+3JgDkP3Qx5XD4wFjDIfKKwLuLInrXJ0=
Subject key identifier:   1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285849242D69ECDD54D14F1F559199
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Mar 2025 11:54:26 +0000
Certificate not after:    Mon 03 May 2027 00:45:33 +0000
Subordinate resources:    AS: 23539
                          IP: 23.138.176.0/24
                          IP: 143.223.82.0/23
                          IP: 147.185.188.0/24
                          IP: 209.163.114.0/24
                          IP: 2605:4f40::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:2d:69:ec:dd:54:d1:4f:1f:55:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 10 11:54:26 2025 GMT
            Not After : May  3 00:45:33 2027 GMT
        Subject: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:77:72:eb:10:4d:6b:6c:93:bd:58:a5:14:
                    e3:62:ac:a4:55:aa:df:86:4a:fb:f4:d8:4f:27:e1:
                    d6:7f:52:8b:f5:f0:90:aa:fd:b0:55:05:c1:52:ad:
                    7a:49:ce:c3:2f:95:0c:22:93:9f:ac:3d:4c:18:8e:
                    a3:a7:27:b5:c2:73:3e:08:a7:28:2a:17:b7:13:35:
                    cb:54:47:ed:b4:f3:26:99:a4:89:2c:53:aa:b2:c2:
                    f9:75:cc:f8:a2:bc:8b:f0:eb:64:df:93:d8:be:e7:
                    d9:c9:ae:1c:16:f2:a7:e5:67:53:29:d7:09:67:e1:
                    79:9c:88:d6:3d:45:cd:56:25:07:dc:03:4d:59:79:
                    35:00:6f:74:ed:a3:4c:c8:f8:6d:c4:c2:36:5f:26:
                    88:42:30:1b:fe:52:96:58:94:c4:e1:12:ec:c6:7c:
                    3d:47:fe:11:21:ce:77:37:db:a8:52:68:b6:60:61:
                    b5:0b:d4:48:c4:40:75:18:ea:37:88:5a:14:99:1d:
                    52:3b:5d:3c:cc:a5:56:fb:f3:7d:ff:46:ea:4e:16:
                    66:1c:96:c0:de:33:e8:1c:49:0a:22:2d:10:38:1e:
                    e1:41:10:a4:35:d4:e9:ee:91:6f:d0:a7:6d:e6:b3:
                    ce:db:f9:a7:fa:77:88:0b:da:c3:e8:ce:ce:84:2d:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.176.0/24
                  143.223.82.0/23
                  147.185.188.0/24
                  209.163.114.0/24
                IPv6:
                  2605:4f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23539

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:90:0a:b6:87:1c:b9:e3:35:9e:27:4a:5a:52:93:af:6a:ef:
         e8:6e:b9:cf:d4:e2:01:94:21:16:0a:cb:5d:4b:ad:2a:1f:e1:
         da:84:e0:8e:69:68:64:3b:75:57:0b:03:b7:a3:10:b1:c8:32:
         58:27:55:60:16:f7:76:5f:51:46:10:6b:9d:e3:4a:ef:9f:e1:
         5c:4c:7e:13:a5:7a:7a:50:25:16:fb:ba:f0:9c:42:f5:ce:77:
         a2:c4:fd:0e:96:24:46:03:52:7e:2a:8f:b5:05:6a:3d:ac:82:
         f5:75:03:90:c6:e7:02:6a:ba:75:38:42:57:63:fb:cd:95:b5:
         49:e5:5e:37:5c:34:83:2a:bc:52:38:68:5a:0b:e9:c5:fd:32:
         09:2d:1a:0d:6f:5f:10:37:ea:e9:f3:05:00:77:46:d8:a8:bc:
         69:6a:2d:1a:3a:6c:16:6c:75:44:07:bf:d2:22:c1:1d:0a:be:
         0c:d9:f5:c4:44:f4:94:79:99:85:ef:89:43:d9:9f:7b:0c:61:
         c4:5d:19:5c:1b:53:30:6b:59:06:7a:44:55:9a:be:08:84:21:
         1f:49:09:5b:16:d9:80:f3:b3:4a:a2:71:17:25:82:98:18:34:
         d0:83:f5:9a:3a:fc:0a:9d:a1:c6:97:de:1b:74:5c:c8:6e:02:
         c6:3a:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:58:58 2025 by rpki-client