Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer
File:                     b9304eb0-eda9-4524-affd-0a6aa181a658.cer (raw, json)
Hash identifier:          1eMmbJj7oWYQtt9ElfDunv3gfuGHeG05Ly18c+IQ8yI=
Subject key identifier:   B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858470ADE0D1A9EB4D5939D535900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 30 Aug 2024 00:45:26 +0000
Certificate not after:    Thu 03 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 397283
                          IP: 206.168.173.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0a:de:0d:1a:9e:b4:d5:93:9d:53:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 30 00:45:26 2024 GMT
            Not After : Dec  3 01:45:26 2026 GMT
        Subject: CN=b9304eb0-eda9-4524-affd-0a6aa181a658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c4:9d:6a:42:ca:3a:cd:25:d3:37:02:96:14:
                    f1:97:ce:48:08:b9:7f:45:e2:da:d0:5a:64:bf:4a:
                    e0:dd:a2:4f:9a:2c:e6:e6:a4:52:66:a7:7f:f1:73:
                    f9:78:b4:b4:32:ca:d0:69:5b:af:30:a5:0b:ce:88:
                    92:b6:c1:f6:cb:22:5d:1c:ff:99:90:e9:63:c9:21:
                    d9:8f:b3:39:15:21:2f:ef:93:e8:1c:22:ae:b5:57:
                    e1:e9:5f:94:c5:4a:40:10:8c:3a:8d:a2:cc:bd:24:
                    1d:7a:d8:1d:22:fc:e2:fc:a2:43:1c:87:7c:e4:33:
                    03:fe:fe:6d:78:13:85:27:b5:ae:84:f4:a3:6e:11:
                    d9:28:82:52:a1:8c:8d:71:e4:1d:2e:9d:01:ec:7f:
                    ac:8e:df:9a:21:fa:ee:9a:57:61:8b:19:72:8c:64:
                    6e:90:5b:e2:92:73:c5:09:90:b7:77:64:87:02:c0:
                    5c:90:41:e6:68:60:21:59:aa:91:4f:f4:65:1a:7c:
                    6c:55:7e:a0:d1:ff:70:10:36:60:ce:0b:99:fd:8d:
                    8c:74:a4:0a:39:00:41:2f:08:70:b1:3e:27:77:32:
                    3d:7d:9a:d4:1a:31:f8:78:82:cd:34:d7:55:7c:58:
                    ad:86:94:a1:7b:37:61:71:30:3b:ad:c1:26:8e:4e:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.173.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397283

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e0:31:d4:9a:ad:f0:12:67:a7:6b:00:fa:67:a1:99:b2:98:
         c8:36:fb:a0:ae:ea:f3:a2:c5:7f:05:07:ab:ec:87:07:c4:eb:
         57:07:e8:47:ba:c7:7f:65:55:98:9d:1e:be:02:b7:1d:15:fb:
         28:08:e3:ba:31:fc:77:f0:c4:cc:da:80:1c:7a:98:18:8b:50:
         b8:b4:b8:76:df:e5:fe:96:59:d0:e0:9e:b0:95:5c:b6:62:c7:
         4c:a4:42:53:ac:f2:7f:67:4a:6f:1e:05:b0:7f:45:a8:50:73:
         7b:79:2d:dc:db:33:4b:b0:32:d4:bb:9f:48:da:3c:25:48:94:
         7e:ee:75:30:ac:55:bb:72:5f:29:43:ac:72:69:3b:57:d6:a3:
         d5:51:ee:80:e8:75:bd:6f:6a:8c:be:28:1d:fb:80:0e:f0:f4:
         9b:35:43:c6:46:ef:86:5c:e0:a6:d0:cb:52:9d:75:8a:9f:8a:
         47:9d:23:05:bd:e3:6f:05:c1:80:2d:49:f9:f9:6a:de:ed:77:
         80:7e:4a:60:f8:42:3f:ab:c2:7e:14:74:6b:ef:02:9b:c2:2e:
         8e:dc:32:1d:66:da:33:f5:72:52:2f:e1:b5:54:95:31:6c:b8:
         3e:e6:00:f2:e3:8c:79:41:c7:ad:5e:9b:ec:86:d2:9a:5d:df:
         ec:de:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:57 2024 by rpki-client on console-ams.rpki-client.org