Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
File:                     d651f6e5-66de-4793-8c12-2261d5e62118.cer (raw, json)
Hash identifier:          zsUg57vKDH70IOVKrzMGLoo1beuk12tILYbsYb5YhqA=
Subject key identifier:   02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844219718EED3C398B559615A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Dec 2023 01:45:15 +0000
Certificate not after:    Wed 11 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 26721
                          IP: 23.130.128.0/23
                          IP: 23.168.0.0/24
                          IP: 162.218.232.0/21
                          IP: 209.40.64.0/20
                          IP: 2606:6380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:21:97:18:ee:d3:c3:98:b5:59:61:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec  7 01:45:15 2023 GMT
            Not After : Mar 11 00:45:15 2026 GMT
        Subject: CN=d651f6e5-66de-4793-8c12-2261d5e62118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fa:ff:4e:8d:98:4d:3d:7a:98:2a:b1:eb:0e:
                    c8:c0:17:63:b9:59:8b:f4:2e:21:42:54:db:e5:57:
                    94:ce:e1:32:ea:6d:96:7d:46:c9:12:c6:ee:2a:6a:
                    57:65:bd:c8:14:6a:e5:e3:e8:b1:ca:ca:c7:9f:8b:
                    db:27:96:a8:b3:86:d1:f4:5f:00:e4:3d:69:b3:ad:
                    20:b2:dc:9c:1b:fc:e4:dc:87:33:f0:93:e8:98:e0:
                    66:eb:ce:04:1e:39:5b:22:23:59:de:11:bb:46:91:
                    d7:aa:a1:f8:ba:25:fe:6b:87:bf:9a:1d:31:bf:f8:
                    86:da:c3:4e:ed:61:c5:78:f7:31:b1:d7:bc:64:90:
                    a3:1a:7a:90:39:25:10:bd:c5:43:e9:63:db:b3:41:
                    9d:61:1d:74:1b:a8:9d:c6:55:4a:8d:14:af:99:24:
                    d0:e4:4a:dd:cc:e1:c9:0a:36:0d:e5:b2:4b:01:80:
                    34:fb:8f:ad:c7:83:10:2e:ba:0d:ee:57:88:6a:03:
                    6e:2c:58:9c:93:7e:25:57:4a:dc:06:9e:3b:77:53:
                    fc:ee:46:a0:aa:d4:c4:31:81:69:e5:02:6c:05:78:
                    8a:9b:e1:50:f0:b6:b1:65:b7:d0:d1:d6:26:a6:23:
                    66:1c:0a:ab:2a:96:9c:0e:12:9f:ef:c3:81:1c:a8:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.128.0/23
                  23.168.0.0/24
                  162.218.232.0/21
                  209.40.64.0/20
                IPv6:
                  2606:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26721

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:35:29:72:0e:1d:c3:d1:e8:29:05:cc:fc:77:a7:49:47:
         ca:23:0a:28:fe:41:59:1d:e4:b8:d5:a7:60:e3:e9:b0:91:4b:
         d4:c5:0f:ef:d5:12:bb:77:2a:8c:a7:46:65:58:7f:8b:d5:c4:
         b0:f2:ab:9f:66:4e:5d:e1:18:d5:5a:d8:38:0c:94:6f:1c:b6:
         3d:74:bc:10:3d:92:08:16:c6:ce:e9:16:4e:29:18:a1:e2:0b:
         0b:43:fc:6f:82:55:f8:2e:da:98:60:76:ce:c2:60:48:7a:73:
         26:a2:8f:62:2f:07:3e:0d:33:73:87:c8:ab:b6:f1:a2:1a:49:
         19:d0:1e:78:19:fb:14:fa:d2:46:40:cb:dd:c1:d8:2d:40:81:
         32:67:9f:f2:be:ab:e0:05:b9:55:f9:b1:13:b0:7e:3c:ab:74:
         e3:f9:da:b9:3e:9c:72:30:a8:df:ea:24:31:42:a3:a6:1c:a6:
         48:e3:3b:57:20:1a:a1:f5:ff:39:3f:3c:7e:63:46:35:45:03:
         c7:c2:99:ce:10:7c:0a:1b:2d:14:42:e5:48:cf:9c:a2:f1:29:
         02:d9:9d:bc:0d:a8:9d:46:aa:49:39:de:5c:94:8a:d9:98:50:
         ba:7b:61:4e:c7:db:e8:57:69:ed:cd:dc:33:98:65:5d:36:95:
         10:e3:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org