Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer
File:                     b4251da6-e12c-464e-918b-9c9e6f10c032.cer (raw, json)
Hash identifier:          sfvjXBCfxSFVc3wCGVeGs/aC55+7Ozph2lBpKu5h/tQ=
Subject key identifier:   28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843C558C0B8364376EE7AC68F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 04 Nov 2023 00:45:16 +0000
Certificate not after:    Fri 06 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 62965
                          IP: 198.97.201.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c5:58:c0:b8:36:43:76:ee:7a:c6:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov  4 00:45:16 2023 GMT
            Not After : Feb  6 01:45:16 2026 GMT
        Subject: CN=b4251da6-e12c-464e-918b-9c9e6f10c032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:44:cd:13:fb:35:22:d8:e8:0d:3c:d6:d3:
                    a1:9e:72:bd:73:57:96:31:8b:d2:29:d3:74:33:bf:
                    40:ad:07:fa:5f:14:46:a0:c2:77:d9:47:8e:8d:fe:
                    9d:6f:60:7a:63:26:22:02:9e:d2:1d:55:eb:fe:f3:
                    e2:6c:34:6e:53:a9:97:91:6e:5a:2d:ed:f9:51:eb:
                    09:6a:ac:24:0d:59:ea:73:13:05:2b:aa:a3:d0:85:
                    a8:17:23:ba:dd:64:66:e6:09:95:d1:18:58:20:03:
                    74:30:54:c0:aa:aa:f7:21:df:92:65:ee:0d:f5:6a:
                    28:f6:a6:23:f3:93:81:54:6c:f3:52:14:ef:14:76:
                    f5:4f:07:e2:58:aa:61:16:7b:05:10:fd:04:af:c9:
                    1f:8f:0c:20:bc:09:f7:71:19:d4:89:2e:7b:e4:33:
                    fc:23:b7:a9:ca:31:82:d8:01:b1:06:19:6d:24:27:
                    dc:53:6c:f0:a2:43:5b:92:95:e5:2c:27:9a:2b:c7:
                    91:c2:71:63:68:9f:c3:07:19:1d:44:ed:ef:d9:9d:
                    32:7b:73:a5:e3:39:b4:eb:a9:c7:95:8d:2a:5a:2f:
                    d7:cc:27:d0:1c:38:14:b0:7a:f8:a5:02:16:9e:7d:
                    85:9c:10:7f:30:41:0b:bd:2d:c0:34:e5:75:51:58:
                    81:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.201.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62965

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:ff:45:2d:cf:91:41:a5:b6:e5:fe:d8:fe:d0:99:d4:f3:
         3b:27:bc:93:ac:d1:3f:85:e5:ec:a3:3e:ec:44:d0:d4:c5:4f:
         c4:f2:c3:bf:fc:29:18:94:a8:3c:b5:53:27:91:2e:92:52:de:
         d2:f5:0f:71:11:42:d8:62:71:dc:29:8c:9d:4b:78:54:cd:0b:
         a6:55:08:ce:8f:ee:e2:b8:f4:95:9b:d6:7e:97:75:7a:6e:e2:
         17:05:c6:0f:59:f4:ae:f2:fb:74:4a:5d:61:8f:c2:ad:38:91:
         8c:72:66:65:fc:cb:2c:06:bb:a9:7c:a2:e3:3b:a5:3c:7b:0e:
         4c:df:f1:3e:86:4e:d1:ad:aa:1c:fe:78:8a:4e:1d:1b:91:64:
         a6:a3:aa:42:eb:70:91:cc:a4:89:1c:2b:e6:87:79:0b:00:d4:
         61:49:0f:f8:96:3b:55:a4:e7:7f:69:64:e4:b0:6c:24:2d:6f:
         2f:3c:e7:91:67:d4:39:69:76:8a:a9:e4:be:8a:d2:37:2a:bf:
         31:ff:69:e6:eb:22:87:27:99:36:7f:a6:00:6c:cd:75:57:3a:
         83:85:fd:fa:49:eb:d7:79:e5:b7:35:e5:e3:cf:02:92:24:e9:
         90:0b:af:22:ca:aa:84:73:ee:71:b2:dc:69:36:b4:2a:b2:2b:
         ca:3c:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 07:16:01 2024 by rpki-client on console-ams.rpki-client.org