Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
File:                     551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer (raw, json)
Hash identifier:          xBpp+5UEgLHwG9rH0SeP7OvG2EN8rkq6YmvNePyFFGY=
Subject key identifier:   E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority key identifier: 27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5
Certificate issuer:       /CN=99f8fed2-292b-4722-b928-fee7bf0a5910
Certificate serial:       010D0C9F432858449B0C3A84906B06D345B2BBF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml
Certificate not before:   Fri 19 Jan 2024 13:54:04 +0000
Certificate not after:    Thu 23 Apr 2026 12:54:04 +0000
Subordinate resources:    AS: 7224
                          AS: 10291
                          AS: 16509
                          AS: 19047
                          IP: 72.21.192.0/19
                          IP: 204.246.160.0/19
                          IP: 205.251.192.0/18
                          IP: 207.171.160.0/19
                          IP: 216.137.32.0/19
                          IP: 2600:9000::/28
                          IP: 2605:b940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9b:0c:3a:84:90:6b:06:d3:45:b2:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f8fed2-292b-4722-b928-fee7bf0a5910
        Validity
            Not Before: Jan 19 13:54:04 2024 GMT
            Not After : Apr 23 12:54:04 2026 GMT
        Subject: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:7d:88:97:9a:55:9b:78:09:20:d8:2e:46:
                    14:2b:de:1e:7d:99:47:85:19:9f:0e:07:12:80:98:
                    7e:cc:6f:8a:70:ac:4e:af:f6:92:39:5a:24:cd:48:
                    af:98:1d:7b:a8:9e:cb:a8:c5:a6:17:e2:4e:01:12:
                    55:19:0c:26:dc:e4:0d:51:a8:bc:3f:43:03:bb:3a:
                    99:f8:77:d8:c7:d0:dd:06:de:f3:bd:48:98:85:a7:
                    10:e1:65:29:4f:c8:da:17:bc:9d:3c:b6:10:dd:f0:
                    ec:c8:e7:5f:08:76:54:a5:41:8d:c8:f3:21:e6:8a:
                    3e:39:2f:ee:e4:4f:84:5d:ca:64:71:10:45:3d:83:
                    e8:d4:db:94:40:82:b8:c3:85:fd:01:20:95:b9:68:
                    b1:18:f0:9b:c7:7a:0f:5c:5e:a5:9f:43:39:e4:46:
                    b0:f9:f8:7e:60:b3:a8:c6:e1:8c:21:37:72:0f:40:
                    f1:f6:a7:78:27:4b:b1:99:e1:fa:ee:b1:09:05:56:
                    1e:1c:fa:9f:f5:34:d9:58:76:60:62:a2:c7:8a:43:
                    73:f4:bc:af:f5:41:2b:3e:34:ec:4c:c8:45:ff:0b:
                    26:6c:9e:d9:1d:83:0f:be:85:5d:c1:83:33:eb:a2:
                    a7:aa:f3:f6:be:6f:87:c2:12:ee:87:3f:d0:1e:28:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e7518af5-a343-428d-bf78-f982b6e60505/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl

            X509v3 Authority Key Identifier:
                keyid:27:B3:C9:28:FF:25:93:68:C5:B2:68:7E:39:0F:2F:2C:E9:38:C9:F5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.21.192.0/19
                  204.246.160.0/19
                  205.251.192.0/18
                  207.171.160.0/19
                  216.137.32.0/19
                IPv6:
                  2600:9000::/28
                  2605:b940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7224
                  10291
                  16509
                  19047

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:f4:09:fb:77:84:5c:87:a2:4a:cd:30:b9:1f:72:00:0a:
         52:45:33:66:5c:7d:53:7a:35:3a:a9:31:1d:83:ad:05:70:19:
         e3:95:34:67:f7:00:c3:7c:8d:19:83:a7:50:e1:44:d1:f7:d6:
         2b:4a:a7:43:81:cf:db:55:48:09:24:2d:61:e8:21:8f:98:00:
         25:58:b1:40:44:38:fc:53:58:91:cd:0f:ab:00:f6:25:39:94:
         39:78:dd:e1:e3:60:d2:84:57:ee:81:ab:21:e4:f3:d2:b8:f0:
         fc:5c:df:b2:c9:c0:64:75:f5:9b:f2:1e:3e:ef:a9:bd:48:3c:
         31:36:1e:1d:56:a3:08:5b:5f:aa:ea:11:66:93:73:4e:31:7a:
         55:35:be:81:f7:6c:9f:a0:53:41:b4:ab:ba:df:9a:b3:df:28:
         a6:3a:49:c3:03:1b:21:e3:c0:25:23:5f:35:c4:a7:12:e8:a0:
         c5:11:a5:9b:b4:83:09:9a:23:89:7e:7e:c8:10:87:f2:21:51:
         3d:88:49:81:1f:f8:e7:9a:ca:b9:46:39:47:39:08:1f:a8:00:
         76:23:76:41:7a:73:b8:45:57:39:41:e2:b1:ea:49:0b:2e:fd:
         7e:ce:b7:d3:72:89:b3:ed:36:1a:13:de:88:f9:06:de:a4:88:
         cc:77:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 16:05:56 2024 by rpki-client on console-ams.rpki-client.org