Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc.cer
File:                     75f09b45-a279-4225-8dba-d5661fbb05fc.cer (raw, json)
Hash identifier:          lb4VzSyb1OwpO8n15NAILMXj8Dhi+rA6N0InuNgO0Gc=
Subject key identifier:   37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845E7977939DDD96AEAAD723300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 May 2024 16:43:00 +0000
Certificate not after:    Thu 20 Aug 2026 16:43:00 +0000
Subordinate resources:    AS: 3699
                          AS: 13332
                          AS: 63216
                          IP: 162.223.192.0/21
                          IP: 198.89.96.0/21
                          IP: 198.89.108.0 -- 198.89.115.255
                          IP: 198.89.120.0/21
                          IP: 2607:f258::/32
                          IP: 2620:58:8800::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:97:79:39:dd:d9:6a:ea:ad:72:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 17 16:43:00 2024 GMT
            Not After : Aug 20 16:43:00 2026 GMT
        Subject: CN=75f09b45-a279-4225-8dba-d5661fbb05fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:fc:23:7f:82:b9:87:f0:d4:09:5b:0a:f9:
                    22:69:77:4c:1d:dc:69:a0:1d:e2:80:c4:97:bc:3c:
                    27:b2:db:6a:33:14:f8:c9:8f:7e:c3:ec:ed:8e:58:
                    68:84:56:2f:d1:e1:16:06:4c:d0:d4:68:77:7f:d2:
                    44:55:63:63:de:56:58:c5:02:09:d7:81:60:14:d6:
                    e7:8f:fc:df:89:1e:dd:5f:e9:cb:22:5a:0c:5f:5e:
                    94:0c:cf:23:bb:05:e9:a2:69:31:52:d2:f3:ed:68:
                    b4:2e:33:ec:ee:f8:71:c9:88:e1:a8:b2:1a:75:2f:
                    dc:44:05:f7:ca:f9:6d:82:f2:7a:fd:09:7b:db:4c:
                    e5:f4:4a:33:64:16:ee:76:ff:ab:68:58:27:d0:33:
                    99:40:9c:58:d1:74:93:a2:d7:36:f0:45:3d:a6:98:
                    a3:1c:b3:98:d0:50:e8:f7:96:3b:b7:92:95:ae:c9:
                    0f:d0:ee:dd:9d:e5:15:ad:07:d3:62:37:a3:fe:ae:
                    06:30:d4:50:95:58:07:55:4c:e8:0c:28:77:46:54:
                    36:a6:49:35:a7:b8:00:66:50:e8:b0:3d:fa:70:29:
                    da:85:06:11:5d:b4:e4:a4:80:50:02:d2:8b:9b:7d:
                    42:99:e6:83:49:aa:84:e2:d5:db:44:17:4d:f2:8e:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:1E:51:27:EA:A2:96:1E:37:9A:7C:F1:F7:60:5F:21:84:A1:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75f09b45-a279-4225-8dba-d5661fbb05fc/75f09b45-a279-4225-8dba-d5661fbb05fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.192.0/21
                  198.89.96.0/21
                  198.89.108.0-198.89.115.255
                  198.89.120.0/21
                IPv6:
                  2607:f258::/32
                  2620:58:8800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3699
                  13332
                  63216

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3c:f2:b3:82:80:77:34:2b:1b:45:66:f8:3b:fe:a0:49:14:
         13:13:3c:cc:d9:b1:7d:af:ea:fe:f5:90:43:a2:4d:55:0e:ab:
         7c:3e:b5:b7:68:18:71:7b:2f:fc:99:35:eb:ce:55:f6:e4:01:
         1a:c5:4c:e1:e1:dd:4d:54:68:81:39:7c:a8:2e:5b:16:99:40:
         ab:4b:43:46:80:0f:7a:28:c3:2f:43:de:e5:42:07:72:15:6f:
         54:eb:9a:cb:4b:18:8a:0e:c4:3f:9a:80:e4:5e:50:cb:70:2d:
         7b:1b:d5:41:26:08:56:a6:44:e8:a1:23:cf:62:0b:f9:2d:1f:
         2f:67:1f:13:11:f9:fc:7f:7e:29:ed:54:49:bb:a9:e7:e4:9b:
         1c:d9:a3:b2:c7:39:36:19:74:4f:d4:48:ee:09:ec:e2:f4:ce:
         57:43:2d:75:28:dc:ed:af:db:c0:e0:51:5f:95:fc:f4:96:16:
         70:06:22:16:4d:f1:89:bc:53:1a:9a:9c:5e:ba:54:3b:e1:e5:
         9a:00:3a:94:d3:4c:77:cf:94:1a:01:14:ff:63:c4:5e:92:a4:
         6b:c7:6f:d0:36:3b:75:8e:b4:3f:9e:ba:9e:cd:38:43:5c:2d:
         a5:d7:5c:73:e2:76:34:04:7f:88:60:33:82:87:5d:d5:d8:7b:
         a6:0b:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:32:05 2024 by rpki-client on console-fra.rpki-client.org