Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer
File:                     8cf8807c-494e-41ab-842c-c0672d6283b1.cer (raw, json)
Hash identifier:          BaBOHivLDwCOY49OqMH9wVdoyj8VJN6T8RAfabhCswM=
Subject key identifier:   99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584644A76DABCC495472728C7F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Jun 2024 00:45:20 +0000
Certificate not after:    Wed 23 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 22251
                          IP: 208.68.24.0/22
                          IP: 2604:5ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:44:a7:6d:ab:cc:49:54:72:72:8c:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 20 00:45:20 2024 GMT
            Not After : Sep 23 00:45:20 2026 GMT
        Subject: CN=8cf8807c-494e-41ab-842c-c0672d6283b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:03:ab:bb:c3:a0:00:f3:20:61:2b:a3:b1:
                    94:90:2b:a5:44:b9:36:2d:fc:db:38:59:2a:77:ca:
                    aa:9a:f6:9d:59:75:7c:88:81:69:39:29:0e:b0:36:
                    56:8c:99:3b:e4:86:ef:15:33:ff:59:23:83:39:b9:
                    47:06:f4:46:2d:fe:ac:f1:8e:49:ce:43:6f:fc:c9:
                    ed:8c:83:83:c1:87:ab:be:90:21:d9:c5:fe:50:8b:
                    bf:14:91:0f:a3:76:c4:47:b0:b3:1b:56:ca:d5:bd:
                    19:c0:23:e1:06:52:55:ce:da:99:81:6a:3a:8d:9f:
                    15:9c:ea:f9:df:24:36:e8:b4:49:49:cd:34:22:f5:
                    e0:82:f8:16:15:99:3b:db:f9:07:b3:2c:c9:d3:6b:
                    e1:94:d3:e7:67:ad:e2:b4:a2:68:0b:2a:50:66:8b:
                    42:8d:9d:29:e3:e1:18:a1:47:50:4b:a2:e2:0d:69:
                    b5:88:4c:ba:4f:d1:f1:db:35:ef:74:3f:20:92:b8:
                    e0:1b:9f:e4:a9:53:4f:ad:79:00:4e:28:1a:8f:90:
                    c4:aa:0a:4d:1b:62:39:f9:2c:ba:e7:c1:33:af:ac:
                    84:39:22:1f:b0:b6:82:fc:21:a9:7e:27:8a:1d:c8:
                    59:00:2d:03:f2:da:23:0a:4a:a2:24:a0:16:e1:f9:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.24.0/22
                IPv6:
                  2604:5ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22251

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:72:fa:65:c0:df:6a:c3:de:13:de:c4:8e:05:22:4e:9d:ce:
         93:53:56:e1:c0:18:2f:ae:7e:a2:a2:63:70:4d:2a:c6:cc:a1:
         2b:c9:66:d2:85:e6:33:cd:14:fc:32:94:6f:88:87:1d:97:05:
         24:29:cb:11:33:41:80:29:d7:d1:5e:d1:dc:6d:ba:b0:c4:ac:
         42:fb:29:90:0b:a5:90:35:ad:bc:bf:c2:2f:89:df:3e:18:49:
         b1:d7:d5:d9:7b:04:d2:3d:19:d1:cf:15:08:8b:13:3e:d8:ec:
         08:18:bc:e9:00:22:e5:87:60:6a:fe:56:2b:e0:22:cb:5b:ca:
         3b:0e:ef:01:cf:4f:f5:94:3b:e1:d8:3d:21:ee:2f:a1:d3:f3:
         38:11:8e:a4:52:06:43:e8:d5:30:25:9c:94:ee:d4:69:97:f0:
         59:ea:7f:8c:aa:a8:49:79:c9:60:42:7b:c4:07:d7:cd:b2:5e:
         9d:5f:71:d1:f0:ce:34:42:1b:4e:bb:b7:82:24:6c:07:46:36:
         63:e8:e3:45:ae:20:11:0b:38:d2:a7:be:2e:b6:41:9b:8e:f4:
         fe:be:07:f4:97:0c:7a:ef:cc:68:8f:04:e5:bf:4d:47:e3:c3:
         60:ec:a0:26:d0:83:7d:4e:bb:31:e7:8f:8e:3a:2b:b6:90:5b:
         8f:52:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 07:15:44 2024 by rpki-client on console-ams.rpki-client.org