Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aac57ccb-98fc-48f6-a965-2a45610836f5.cer
File:                     aac57ccb-98fc-48f6-a965-2a45610836f5.cer (raw, json)
Hash identifier:          9EJP1+1l3xhiFQY5ozMz352huEMtkJWFzl/pjIter0s=
Subject key identifier:   A2:23:E7:84:EB:AA:67:77:DF:8E:FC:F6:AF:DD:F9:6C:B4:92:0E:F2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858439B787CE1CDF34D68E6ADC580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aac57ccb-98fc-48f6-a965-2a45610836f5/aac57ccb-98fc-48f6-a965-2a45610836f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aac57ccb-98fc-48f6-a965-2a45610836f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Oct 2023 00:45:15 +0000
Certificate not after:    Thu 22 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 399306
                          IP: 23.177.16.0/24
                          IP: 209.209.73.0/24
                          IP: 2602:fcb1::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9b:78:7c:e1:cd:f3:4d:68:e6:ad:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct 20 00:45:15 2023 GMT
            Not After : Jan 22 01:45:15 2026 GMT
        Subject: CN=aac57ccb-98fc-48f6-a965-2a45610836f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:24:9e:58:d8:a8:61:1f:6b:dc:64:06:a7:
                    c7:2b:d4:6a:2a:1f:97:f0:50:eb:6d:f8:8e:da:02:
                    a3:5c:99:52:f4:e8:98:cf:f4:83:11:6e:62:5d:63:
                    d6:4f:bb:9b:c8:1e:09:00:d3:b4:e1:29:41:b6:c0:
                    7b:ba:98:af:a6:10:cb:16:1a:9a:79:38:d2:52:2c:
                    be:f7:a1:c6:45:4f:4b:98:87:50:bf:bd:b4:73:4f:
                    99:05:4d:a9:ba:45:00:a7:79:9b:f2:84:50:8b:6f:
                    45:f4:a6:32:b6:9e:de:93:c6:6c:fc:b9:0d:ec:91:
                    9f:cd:b8:a8:79:5e:9e:5f:3b:51:dd:8d:9f:cd:d7:
                    f0:72:86:ef:2a:c7:ad:a9:8e:57:4c:ca:7b:3c:7d:
                    2e:0a:c7:4c:8c:00:d5:96:dc:56:9c:58:e1:e5:7e:
                    e8:71:10:b6:4a:b2:23:b6:ae:86:70:9b:ee:42:32:
                    95:93:8a:9a:aa:c5:98:80:8c:52:7f:09:aa:8e:ce:
                    46:e5:74:5c:43:0c:4b:4b:c5:26:43:39:76:b6:5a:
                    f4:b6:c6:de:f6:f1:38:2a:fc:6a:d5:2d:15:5d:cf:
                    d3:5e:80:9f:a2:cd:04:cd:1e:c7:c6:6a:1a:68:0f:
                    f1:55:64:8e:a7:61:04:7a:93:4e:c6:9a:8b:38:cb:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:23:E7:84:EB:AA:67:77:DF:8E:FC:F6:AF:DD:F9:6C:B4:92:0E:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aac57ccb-98fc-48f6-a965-2a45610836f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aac57ccb-98fc-48f6-a965-2a45610836f5/aac57ccb-98fc-48f6-a965-2a45610836f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.16.0/24
                  209.209.73.0/24
                IPv6:
                  2602:fcb1::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399306

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:97:5f:4d:ea:ad:4d:ad:84:f1:23:60:a4:82:ef:42:51:
         cc:48:df:91:98:97:cc:b5:ce:bd:a6:d8:70:32:36:eb:d6:6f:
         f0:be:6a:c5:f6:21:d8:6c:85:bf:0a:0e:ef:31:fe:5b:e9:af:
         13:f7:00:3d:ce:5c:7c:0b:22:70:6e:7e:63:22:71:4d:50:6a:
         a3:0e:96:47:7f:c7:21:a5:65:0d:e2:67:df:35:bb:98:7a:90:
         6a:bb:a3:de:65:f7:5c:e7:33:29:ab:11:3d:b9:0b:bd:61:63:
         56:c7:47:08:5f:a0:7d:be:ba:9a:6f:02:8f:1b:d7:79:a4:df:
         fa:aa:fb:c7:f1:70:6c:4e:a1:7d:71:f3:5e:97:45:f4:6a:4d:
         e7:c9:7e:a4:01:36:48:22:fd:5f:60:4d:3a:ec:9c:90:fe:4c:
         a6:91:70:65:bd:84:7b:94:a3:fe:c9:b2:f8:65:d6:cd:52:5a:
         48:db:e3:50:6a:75:dc:86:a5:7a:62:12:41:9c:41:62:7d:3f:
         d6:65:c0:18:5e:56:f9:aa:0a:ac:1c:fa:9f:65:a5:95:cc:c1:
         bc:3a:81:1e:82:77:de:47:cb:de:29:f6:d1:6c:91:6e:79:42:
         6d:0c:a6:f2:fc:f4:4e:0d:26:b5:c8:b8:64:3b:97:a0:62:32:
         cf:f1:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:30 2024 by rpki-client on console-fra.rpki-client.org