Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
File:                     835152c2-2ed8-4151-8f82-ac9407335b2c.cer (raw, json)
Hash identifier:          /QaIa9R2hVDcLMAKIpTggKCIdCgV9S4FozJ2sq9/isE=
Subject key identifier:   8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584822284B3E02F0CD28FA4EEFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Dec 2024 01:45:33 +0000
Certificate not after:    Sat 13 Mar 2027 01:45:33 +0000
Subordinate resources:    IP: 50.116.64.0/18
                          IP: 96.125.160.0/20
                          IP: 108.167.128.0/18
                          IP: 108.174.144.0/20
                          IP: 108.179.192.0/18
                          IP: 162.210.48.0/22
                          IP: 192.185.0.0/16
                          IP: 192.232.192.0/18
                          IP: 192.254.128.0/17
                          IP: 198.20.224.0/19
                          IP: 198.154.192.0/18
                          IP: 216.172.160.0/19
                          IP: 2605:f300::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:28:4b:3e:02:f0:cd:28:fa:4e:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec  8 01:45:33 2024 GMT
            Not After : Mar 13 01:45:33 2027 GMT
        Subject: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:8e:08:7a:c0:9a:68:c4:b1:b5:c8:97:3c:
                    a5:9c:48:1c:62:0f:46:da:aa:f4:2d:8c:4d:d1:45:
                    90:4e:ac:65:ad:de:5a:5c:9c:da:d9:ea:95:fa:df:
                    f4:cc:1a:b6:84:75:40:eb:4a:c8:f3:4a:5e:09:6c:
                    8f:8f:a1:bd:35:8f:96:7b:33:75:5e:e4:aa:8e:71:
                    6a:36:79:9a:8c:51:a3:6c:c1:dc:73:df:1f:e2:ea:
                    14:13:9e:16:2c:c8:a7:fc:00:3d:36:26:0c:9a:a4:
                    79:72:5c:04:15:74:32:06:8b:23:7c:47:e4:8a:4f:
                    94:80:5f:cc:ad:bc:40:cc:b4:9d:21:bf:bf:82:7e:
                    54:7e:e6:4f:42:80:5a:3f:0a:7a:47:63:db:d9:1d:
                    03:a2:29:e1:67:5e:89:59:1d:ac:ae:ab:8d:c2:dd:
                    3a:4c:01:cb:86:0c:95:78:0c:3d:76:97:55:d5:24:
                    5e:b8:82:f9:e5:d4:58:77:ee:53:01:4f:b4:61:c5:
                    83:d9:8d:b8:ee:8c:c5:a4:fc:67:8b:c5:ba:65:4d:
                    69:0a:dc:9d:3f:cc:ff:a3:a3:73:2c:00:3f:f4:98:
                    84:42:ff:ca:b5:c9:ed:49:40:65:77:77:10:6a:dc:
                    ba:d6:dc:a8:d5:02:e5:a2:75:06:28:a7:71:eb:b8:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.174.144.0/20
                  108.179.192.0/18
                  162.210.48.0/22
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  198.20.224.0/19
                  198.154.192.0/18
                  216.172.160.0/19
                IPv6:
                  2605:f300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:53:20:7f:fa:1e:f5:f1:28:e0:3c:3a:02:65:4d:a1:45:34:
         d7:f6:7a:3e:9e:b3:a5:0e:ac:0b:57:bf:6e:38:93:3e:73:6b:
         b6:35:34:c5:86:1d:62:3c:ea:6d:eb:50:5c:9c:be:dd:3c:d4:
         74:09:9a:9f:e4:28:68:e4:35:17:f6:d5:30:51:99:89:89:29:
         83:9c:d3:9f:9a:d0:8a:bb:04:37:ed:de:f3:b6:b0:cd:3f:c6:
         4f:2d:8b:a2:c7:b3:cb:4b:a6:8f:48:e9:69:50:11:be:9c:89:
         76:99:2b:97:83:c1:99:cd:b2:b6:4a:47:79:c3:f9:6b:13:fd:
         49:60:03:73:8f:91:68:0a:71:f6:e5:9a:72:47:97:ef:d1:64:
         54:a3:c0:e0:45:5e:05:30:47:a8:7c:ba:5f:4a:f9:27:6d:af:
         e8:41:f9:ac:85:38:bf:23:f6:a6:85:5f:13:10:2a:d8:09:67:
         df:9a:ce:14:05:52:3b:d3:63:df:a7:25:10:2f:28:7e:30:9a:
         8a:b9:c7:b3:86:12:97:e1:96:cf:cb:1f:ca:ef:19:2f:f8:f3:
         65:d1:dc:09:fe:fa:f2:e5:2b:21:9d:2b:8f:d4:75:50:6e:1d:
         ce:be:89:35:ba:e1:97:31:4c:58:49:34:bc:55:39:cd:20:1d:
         f9:21:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 8 13:11:36 2025 by rpki-client