Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
File:                     d184e471-080a-4e54-bf94-60dd0c8beb48.cer (raw, json)
Hash identifier:          2eikbZ9Xo6aJbheqUNDs26WUEBSsHZMc3+8QfKNYuKY=
Subject key identifier:   82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843BA2E0350A166239CD3C37230
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 02 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 18531
                          AS: 22926
                          AS: 25928
                          AS: 393809
                          IP: 23.166.64.0/24
                          IP: 45.40.0.0/20
                          IP: 66.232.160.0/19
                          IP: 67.43.112.0/20
                          IP: 72.14.0.0/19
                          IP: 74.118.200.0/21
                          IP: 96.47.192.0/20
                          IP: 192.68.255.0/24
                          IP: 208.70.36.0/22
                          IP: 208.84.188.0/22
                          IP: 2602:fea0::/36
                          IP: 2602:ff53::/36
                          IP: 2607:f5e8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ba:2e:03:50:a1:66:23:9c:d3:c3:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct 31 00:45:15 2023 GMT
            Not After : Feb  2 01:45:15 2026 GMT
        Subject: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:3c:32:14:a5:f0:1d:ce:37:b5:1e:bf:38:
                    e8:77:b9:d8:be:53:94:7d:20:5c:6e:91:c6:9a:8e:
                    fa:84:76:28:89:f3:d3:25:d6:4a:b1:bd:a7:5d:a6:
                    3f:7b:a5:81:32:33:f4:d6:fe:19:57:bb:df:f0:78:
                    fb:1c:aa:9b:e5:39:b6:f3:02:f2:0f:74:78:d4:c2:
                    88:9f:14:f9:a2:45:8c:6a:70:f9:4c:44:35:e2:8a:
                    f6:d8:e5:92:00:30:47:f3:0f:3a:0d:5f:ef:12:7a:
                    f1:20:0f:aa:a3:e5:a7:97:22:51:3b:ab:9e:29:2d:
                    42:d5:a1:94:de:19:14:20:9b:f7:eb:b2:c5:e0:af:
                    a0:7b:f2:e2:d8:73:1e:3e:00:61:d4:35:f4:10:ba:
                    75:84:e3:ab:84:cb:4d:31:a4:38:35:6e:e4:aa:86:
                    5c:f8:13:da:ee:1c:54:a6:ce:f1:2b:d4:47:50:f7:
                    a9:89:f9:69:50:ed:c9:16:d8:e5:d1:75:6c:9b:02:
                    cf:c9:8a:d8:6c:7b:e0:8b:fc:c9:7f:60:e6:7f:11:
                    08:33:9f:85:9a:83:ba:33:1f:19:e7:98:98:37:a1:
                    62:e4:6e:8e:bb:ac:3c:5d:86:c2:7b:28:a7:06:19:
                    f0:5b:60:46:8d:a8:38:1b:cc:ad:ad:2d:cf:6c:b3:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.64.0/24
                  45.40.0.0/20
                  66.232.160.0/19
                  67.43.112.0/20
                  72.14.0.0/19
                  74.118.200.0/21
                  96.47.192.0/20
                  192.68.255.0/24
                  208.70.36.0/22
                  208.84.188.0/22
                IPv6:
                  2602:fea0::/36
                  2602:ff53::/36
                  2607:f5e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18531
                  22926
                  25928
                  393809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:d4:1e:9f:95:48:ed:42:4b:eb:d3:bd:8f:43:e6:21:59:
         eb:93:29:3f:bc:dc:e3:9e:11:ff:49:95:b3:db:3b:cf:35:78:
         cd:f2:64:b2:9f:b2:ba:20:28:2c:e5:0c:e5:1e:ec:e6:39:ed:
         11:bc:18:4a:dc:4f:c5:d8:80:5a:1e:90:d9:15:96:58:5b:50:
         95:39:bb:3d:3f:c3:9c:17:f0:f9:8e:9c:9c:8c:6a:5f:d6:3c:
         2d:4e:3b:f9:1b:11:e9:93:3a:3e:1a:3e:86:b6:52:07:80:cb:
         b9:42:54:97:c4:6a:f9:a0:5b:3a:ca:44:f8:ab:5d:55:5b:84:
         22:10:ca:f4:7b:df:89:f0:5a:3a:d7:07:e7:f2:c6:bb:59:87:
         92:ce:8d:b9:35:fd:87:a7:a7:28:39:62:85:3b:8f:e0:c2:09:
         66:4f:ca:ce:85:a7:33:9c:60:68:e1:f2:f1:cd:75:84:72:7b:
         74:4a:05:ea:6c:20:f2:d2:60:57:6b:a9:fb:44:f9:04:4f:c3:
         7e:c0:29:9d:72:8f:83:a1:49:0f:6f:b5:f3:ff:a5:57:14:af:
         6c:b6:bc:0c:cf:f0:39:86:dc:49:04:02:8e:00:e9:f4:45:e1:
         7f:55:a5:c0:f7:37:d4:39:c8:bf:17:20:84:0d:12:8e:e7:2c:
         86:27:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:33:41 2024 by rpki-client on console-fra.rpki-client.org