Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
File:                     d884379a-447d-445c-b465-3fe894aa66ec.cer (raw, json)
Hash identifier:          vOEYjZPr5LUSW+wyf6FGxtiBE/SFBujCrwJMPVGJjBQ=
Subject key identifier:   09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848F528EFA244B44390CDD3ABC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 15:42:25 +0000
Certificate not after:    Thu 27 May 2027 13:58:13 +0000
Subordinate resources:    AS: 40712
                          IP: 23.134.244.0/24
                          IP: 2602:f6e2::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f5:28:ef:a2:44:b4:43:90:cd:d3:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 21 15:42:25 2025 GMT
            Not After : May 27 13:58:13 2027 GMT
        Subject: CN=d884379a-447d-445c-b465-3fe894aa66ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:b1:54:9a:26:5b:b2:03:f1:63:6c:39:08:
                    d1:cf:2f:67:1c:21:b3:67:48:23:65:f1:91:fc:7f:
                    73:ad:42:74:18:70:2e:01:b3:6c:cd:50:37:34:6a:
                    5a:29:64:ea:98:09:d2:8d:d1:00:45:e3:9c:07:1d:
                    9e:4b:f4:6c:99:1f:04:68:fe:fd:8a:49:eb:5c:2a:
                    03:ea:11:db:38:f2:5e:18:14:f7:ea:76:7b:68:b4:
                    45:da:55:90:fb:74:b7:d3:50:ef:c9:17:53:87:74:
                    db:a3:45:db:e3:02:af:41:64:df:65:45:29:cc:eb:
                    bc:05:dd:03:6d:d1:56:70:a8:6a:4e:a3:58:8b:29:
                    e0:7e:96:0c:c1:a9:3e:37:27:9d:8f:46:aa:7e:30:
                    ff:f2:96:ad:88:47:19:e1:55:7a:a3:06:cc:90:86:
                    94:2e:fc:3e:02:8f:db:46:3b:86:2b:a7:9c:1f:c1:
                    04:34:c0:91:8c:0a:1f:4a:e1:5b:4f:bf:ec:18:5d:
                    6e:ed:cd:cb:25:8c:bf:f3:a0:ba:ad:ae:4e:b4:6c:
                    20:21:d0:1b:90:23:3d:b0:98:c9:e2:b7:3a:a0:4e:
                    ec:d7:da:ed:1e:4b:62:03:3e:ac:c9:4d:70:eb:ac:
                    a2:3b:de:1d:1f:75:3b:a4:bc:84:13:9e:f9:0c:51:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.244.0/24
                IPv6:
                  2602:f6e2::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40712

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:6e:79:33:bd:61:39:8b:55:07:47:4f:e0:e6:83:19:6e:
         94:ed:2b:b0:d9:c0:ed:f6:82:bb:a3:b3:66:e4:70:f2:4c:a6:
         7e:08:cb:25:c5:f3:ec:8a:8b:51:78:4e:ab:55:1a:1a:ae:44:
         12:8e:81:c2:05:02:1f:1e:83:dc:6c:96:46:7a:ef:14:81:b8:
         6f:3b:08:68:06:50:92:d2:1e:9f:9e:26:1f:a0:18:be:61:e6:
         b4:62:96:22:a4:99:56:a2:c5:3d:b2:1d:59:ff:22:e9:be:ce:
         e8:ae:8c:96:c5:30:5e:fe:b8:13:bb:10:fb:5b:ec:7a:b2:33:
         ac:a7:02:a8:28:fa:45:d5:a4:18:92:60:7e:52:25:b7:02:64:
         2f:ea:15:94:99:d1:ff:5f:89:d7:ef:8f:6c:be:70:f8:b2:45:
         8e:fc:f8:98:b8:61:35:75:b5:ba:50:17:29:bc:6e:cf:b1:e7:
         a1:3a:a8:1d:b1:91:ea:1b:93:70:12:4d:11:6e:6b:c4:8e:eb:
         4e:92:11:02:11:9d:41:6f:9c:df:ee:87:5c:89:7a:04:29:95:
         83:ca:09:4f:c2:1a:87:95:f5:87:7f:a6:60:b6:61:91:f7:e9:
         9c:9b:97:34:3a:5c:59:95:4c:58:d8:22:cb:b8:21:e1:7a:19:
         05:ec:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:11 2025 by rpki-client