Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
File:                     0abec8f8-ce42-427b-82b4-7accd51f9db8.cer (raw, json)
Hash identifier:          mooYa6rrz/EVOEcpjbtwGK2nVZfBWU3IiItQ1yaciCM=
Subject key identifier:   B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858466627A39A0C23D7AD01FAEE20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jul 2024 00:45:19 +0000
Certificate not after:    Mon 05 Oct 2026 00:45:19 +0000
Subordinate resources:    AS: 20182
                          IP: 142.202.20.0/24
                          IP: 168.203.5.0 -- 168.203.7.255
                          IP: 204.27.210.0/24
                          IP: 2620:132:5000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:66:27:a3:9a:0c:23:d7:ad:01:fa:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jul  2 00:45:19 2024 GMT
            Not After : Oct  5 00:45:19 2026 GMT
        Subject: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:6a:0e:4b:7e:12:63:1e:2e:ae:f1:bc:b7:
                    ae:fc:bd:69:8a:78:75:07:0b:02:cf:c4:0c:c3:27:
                    75:70:ca:1e:1a:ef:76:40:f7:04:91:ca:13:cc:c0:
                    2b:55:49:54:81:c4:8b:e5:78:81:4d:73:ed:43:b7:
                    fb:b4:ac:59:7e:ed:cc:86:f9:57:af:db:19:48:ec:
                    af:b7:34:3a:cb:c7:41:c3:de:65:88:6d:c0:2a:b1:
                    34:3c:08:39:b0:22:b7:41:96:61:bc:ee:53:5c:9e:
                    60:bb:7f:ac:ff:f7:4a:63:f3:30:55:c7:c3:de:3f:
                    f6:45:a3:0b:98:10:c9:80:5b:40:7f:5f:d9:35:cf:
                    7a:1b:92:94:c4:81:4e:41:21:50:cb:4f:db:ec:d7:
                    fb:95:73:44:51:12:15:25:a9:1c:3e:70:8e:7f:7b:
                    b6:23:7b:08:6b:65:e0:a9:d8:76:cf:4e:d4:62:11:
                    57:42:3c:18:cd:32:f9:a5:a9:24:70:68:35:8d:56:
                    4b:e2:17:82:69:ee:38:e7:1f:0d:ef:cc:12:c1:2b:
                    a4:2d:62:83:d2:26:2d:6f:4e:43:f3:57:9c:2d:51:
                    03:29:c9:5e:55:a1:30:87:76:9e:7b:7a:ba:87:4d:
                    ba:38:ff:2d:fd:64:87:b9:bd:88:30:69:df:d8:7f:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.20.0/24
                  168.203.5.0-168.203.7.255
                  204.27.210.0/24
                IPv6:
                  2620:132:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20182

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:f3:4d:0d:5e:6f:62:bd:a3:61:82:a6:ef:32:aa:c3:cb:
         60:af:cb:49:b4:f7:98:90:b2:3b:19:b4:8f:bb:eb:92:1c:3d:
         3c:a6:2c:7a:d2:e8:6c:15:f5:ac:08:5b:6b:15:03:07:a4:7d:
         92:be:73:1f:00:35:09:63:57:cc:6b:76:43:4d:d3:0d:20:f8:
         3b:98:9b:1f:02:96:26:d3:f7:72:5e:49:4e:44:57:4d:35:92:
         79:85:17:eb:d7:7a:70:10:b6:72:5a:16:30:85:3e:3e:1d:fb:
         d1:99:0c:45:f4:96:1a:6a:94:90:35:cd:01:32:bc:4a:91:74:
         2c:ba:33:a8:f4:f4:f7:7c:33:62:55:c7:de:70:6a:8e:eb:00:
         6c:7f:63:27:00:bb:05:a5:11:7d:ea:18:d4:64:2f:5d:09:19:
         15:9b:49:a2:b6:9c:84:0c:83:13:d0:41:b1:d3:25:c1:c2:ec:
         d4:b8:54:78:73:0b:8b:85:e0:df:07:ef:e7:bd:69:4b:50:18:
         9c:29:26:39:db:08:8f:93:e1:4b:13:46:72:44:9a:4f:15:60:
         df:39:4f:1e:5c:bb:45:68:94:a8:92:a4:39:61:36:c2:39:db:
         1f:02:b1:a4:a6:b5:54:3b:d8:42:da:c9:47:1b:71:aa:2b:78:
         4c:5f:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:03:53 2024 by rpki-client on console-fra.rpki-client.org