Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27.cer
File:                     87d73aae-debf-43be-9698-ca01eb327c27.cer (raw, json)
Hash identifier:          vZ6MpQ7xo/09vNiNKfZVEzsZli+Ox0qv5MacLEQzEcw=
Subject key identifier:   EC:41:D8:DA:6C:CE:94:76:28:D3:EE:88:72:85:24:66:CD:11:47:33
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584902DB3AD5B906F49088EED440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/87d73aae-debf-43be-9698-ca01eb327c27.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 13:27:10 +0000
Certificate not after:    Tue 01 Jun 2027 12:27:10 +0000
Subordinate resources:    IP: 23.134.172.0/24
                          IP: 2602:f6e6::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:db:3a:d5:b9:06:f4:90:88:ee:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 26 13:27:10 2025 GMT
            Not After : Jun  1 12:27:10 2027 GMT
        Subject: CN=87d73aae-debf-43be-9698-ca01eb327c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:66:10:2a:aa:88:0a:10:6e:83:28:c1:5a:
                    e2:d7:7d:8c:48:7a:d7:30:21:10:df:5e:02:3d:ac:
                    0e:e7:9d:c2:54:ea:3b:b3:65:60:87:6f:f6:59:d0:
                    0a:cb:99:fe:64:57:36:2c:1d:dd:64:50:7b:48:06:
                    df:04:11:03:5b:11:2f:1f:9f:dd:1f:06:b1:9b:89:
                    7f:22:48:2f:85:11:63:2e:4d:a1:41:2f:34:d7:ff:
                    fe:44:a2:d4:6f:71:fc:48:e5:6f:7f:2e:77:6b:62:
                    1c:12:e8:59:6a:4c:0f:ef:10:df:dc:2f:9b:e2:d3:
                    19:77:6e:0e:d4:f4:27:2b:5a:cd:2b:7a:b3:cd:28:
                    fa:1b:73:50:d7:73:4b:b8:df:38:9a:b0:63:aa:31:
                    36:20:7d:59:ae:58:25:20:b0:4a:3d:fa:1b:8c:39:
                    dd:ff:de:90:75:2f:ee:82:e7:cf:dd:0c:3a:17:7c:
                    3e:dc:14:13:ea:36:6f:5e:7e:9d:7b:36:0f:e6:ef:
                    ec:b0:54:a7:41:1d:1a:ca:2a:19:f4:60:49:ac:a5:
                    82:8f:68:30:29:8a:14:43:01:c1:a9:b9:45:ed:cf:
                    38:60:c4:16:29:73:34:84:e2:8d:22:e8:50:47:b9:
                    97:be:b0:b0:e8:5b:09:6b:2c:b0:2a:15:0d:5b:2f:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:41:D8:DA:6C:CE:94:76:28:D3:EE:88:72:85:24:66:CD:11:47:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87d73aae-debf-43be-9698-ca01eb327c27/87d73aae-debf-43be-9698-ca01eb327c27.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.172.0/24
                IPv6:
                  2602:f6e6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:63:91:56:96:42:3e:7f:a4:06:f5:72:fb:0b:6b:ca:6c:
         fc:e0:4c:3a:04:a2:ff:92:e5:bb:af:64:04:c5:5f:e9:f7:50:
         8d:37:9f:19:76:7f:60:db:b5:b0:19:e3:ff:eb:9e:b7:2f:df:
         b0:c0:a0:57:55:26:1e:8e:c2:7c:cb:6e:9e:11:7f:41:82:02:
         82:2d:0b:3c:f2:45:15:fd:54:b3:bd:96:1f:1d:dc:90:03:c5:
         09:ca:42:33:86:5f:43:3f:22:c9:08:d0:13:5c:49:87:48:ae:
         d2:4b:28:76:c1:98:e9:b8:a2:25:a1:e1:68:08:f5:f0:02:11:
         b5:76:cc:3a:22:fc:c2:ae:32:6f:60:ae:1b:39:53:bd:08:b2:
         38:5f:b1:af:c2:36:31:41:fa:a7:db:a6:00:b4:ba:c2:53:66:
         02:f3:b6:48:6e:1b:f4:f7:23:7d:50:b1:40:dc:47:27:c9:80:
         71:27:af:92:a1:a5:b1:9b:19:12:34:99:21:c5:cb:67:06:ba:
         65:76:53:a6:8d:f9:67:ba:c4:03:16:7c:7e:bf:d6:fd:8c:91:
         63:22:43:8b:57:aa:b4:d2:66:76:ca:f1:03:2b:9e:67:6d:90:
         01:a6:e3:6e:d1:95:a9:7e:06:fe:12:09:21:63:27:3e:65:dd:
         46:84:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:42 2025 by rpki-client