Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer
File:                     5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer (raw, json)
Hash identifier:          eiQFtezdT8Q50gRwF9yYbz4RqlSq5WDQPBootfbRzEs=
Subject key identifier:   16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858480D6C501CE4321FCFFE5A1680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 30 Nov 2024 15:30:38 +0000
Certificate not after:    Fri 05 Mar 2027 15:30:38 +0000
Subordinate resources:    AS: 401481
                          IP: 23.128.252.0/24
                          IP: 2602:f7ab::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0d:6c:50:1c:e4:32:1f:cf:fe:5a:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Nov 30 15:30:38 2024 GMT
            Not After : Mar  5 15:30:38 2027 GMT
        Subject: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:1b:63:34:9e:01:1d:d3:21:4b:c1:6f:49:
                    80:81:0b:56:b5:9c:18:fc:84:2c:86:b3:12:f2:bf:
                    9d:a1:87:ab:87:c3:00:53:24:8f:77:40:43:90:5d:
                    ad:27:55:ed:3f:f4:71:99:56:be:e1:b3:a9:3e:34:
                    ca:18:fe:02:14:d4:d3:32:a7:c7:82:2a:47:e7:2d:
                    db:c1:52:90:1f:13:57:30:a3:1e:e5:c4:d6:79:75:
                    47:0b:48:9e:b4:29:94:37:00:81:ad:3d:89:3a:00:
                    8b:29:90:e2:e1:22:d6:ab:b0:09:88:9b:08:a9:65:
                    5b:f6:b4:08:da:02:94:3a:5f:4d:15:d2:ab:cb:57:
                    f5:99:6c:f8:5a:80:b4:16:c0:42:31:c2:14:08:4d:
                    46:9c:ee:b5:fb:1b:cc:fa:69:05:dd:56:3c:78:f4:
                    f1:04:a6:19:04:96:cc:a5:d4:fe:10:ae:a4:96:1e:
                    13:7d:1e:c0:fb:6a:77:91:95:2d:0c:91:d9:c3:a0:
                    fb:45:71:5b:54:f6:c4:c9:ae:b2:9b:fd:f9:cf:8a:
                    f5:42:12:08:cf:71:30:e6:79:8c:1a:da:01:aa:0c:
                    66:79:c6:e1:6e:1c:25:c6:73:e2:2b:3e:40:39:00:
                    75:f3:37:ec:c6:ce:99:16:7d:3b:03:ec:dd:65:0a:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.252.0/24
                IPv6:
                  2602:f7ab::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401481

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:55:13:4a:26:64:b8:96:f6:e8:b7:ff:af:1d:a3:3a:9d:c7:
         c9:c5:2b:ab:d0:e0:26:ba:6a:a4:f1:d9:87:bf:35:8a:79:4a:
         77:9e:aa:e2:d2:bd:bb:45:6a:4b:a8:49:fe:87:09:a4:6c:b9:
         58:3b:b9:30:da:63:2d:a2:99:3e:e0:fe:b2:8e:42:d8:fd:86:
         ca:b8:73:cb:71:84:9e:88:ae:d9:6c:cb:3e:e4:36:70:00:18:
         c9:27:f1:53:b0:c9:8c:73:81:8d:6f:75:0f:0f:18:bb:19:ef:
         27:6d:5a:db:11:72:db:d4:66:f5:4e:82:c8:fe:4e:cf:a4:81:
         f1:9d:d7:d8:ff:16:4c:cb:e7:08:44:51:0e:99:27:e2:e6:fd:
         15:96:f1:46:28:a9:0e:a2:7b:8b:03:f3:9d:36:8f:e5:5b:06:
         38:f5:2f:e8:73:b8:de:c7:e3:58:c5:de:eb:bb:75:f6:5d:25:
         61:2f:c7:70:38:6d:46:46:8c:a3:df:81:67:a6:1e:cf:9d:d1:
         d8:50:c2:d3:db:9f:9c:b5:fa:7c:6d:7f:3a:85:0c:f8:f7:ee:
         b8:3b:fc:43:14:a1:cf:2a:91:e6:68:38:ee:6d:fc:99:8c:a9:
         74:b4:cb:64:82:32:3a:c1:ee:b7:d7:42:27:13:9c:cd:05:f8:
         c2:48:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org