Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
File:                     835152c2-2ed8-4151-8f82-ac9407335b2c.cer (raw, json)
Hash identifier:          Ozrk6Dtcq1CH+f3+BDrM0rwDJREZKDGU9sFcXI+Dmgw=
Subject key identifier:   8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858431DD7C5124D4C10A11684D000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Sep 2023 00:45:23 +0000
Certificate not after:    Mon 08 Dec 2025 01:45:23 +0000
Subordinate resources:    IP: 50.116.64.0/18
                          IP: 96.125.160.0/20
                          IP: 108.167.128.0/18
                          IP: 108.174.144.0/20
                          IP: 108.179.192.0/18
                          IP: 162.210.48.0/22
                          IP: 192.185.0.0/16
                          IP: 192.232.192.0/18
                          IP: 192.254.128.0/17
                          IP: 198.20.224.0/19
                          IP: 198.154.192.0/18
                          IP: 216.172.160.0/19
                          IP: 2605:f300::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1d:d7:c5:12:4d:4c:10:a1:16:84:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Sep  5 00:45:23 2023 GMT
            Not After : Dec  8 01:45:23 2025 GMT
        Subject: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:8e:08:7a:c0:9a:68:c4:b1:b5:c8:97:3c:
                    a5:9c:48:1c:62:0f:46:da:aa:f4:2d:8c:4d:d1:45:
                    90:4e:ac:65:ad:de:5a:5c:9c:da:d9:ea:95:fa:df:
                    f4:cc:1a:b6:84:75:40:eb:4a:c8:f3:4a:5e:09:6c:
                    8f:8f:a1:bd:35:8f:96:7b:33:75:5e:e4:aa:8e:71:
                    6a:36:79:9a:8c:51:a3:6c:c1:dc:73:df:1f:e2:ea:
                    14:13:9e:16:2c:c8:a7:fc:00:3d:36:26:0c:9a:a4:
                    79:72:5c:04:15:74:32:06:8b:23:7c:47:e4:8a:4f:
                    94:80:5f:cc:ad:bc:40:cc:b4:9d:21:bf:bf:82:7e:
                    54:7e:e6:4f:42:80:5a:3f:0a:7a:47:63:db:d9:1d:
                    03:a2:29:e1:67:5e:89:59:1d:ac:ae:ab:8d:c2:dd:
                    3a:4c:01:cb:86:0c:95:78:0c:3d:76:97:55:d5:24:
                    5e:b8:82:f9:e5:d4:58:77:ee:53:01:4f:b4:61:c5:
                    83:d9:8d:b8:ee:8c:c5:a4:fc:67:8b:c5:ba:65:4d:
                    69:0a:dc:9d:3f:cc:ff:a3:a3:73:2c:00:3f:f4:98:
                    84:42:ff:ca:b5:c9:ed:49:40:65:77:77:10:6a:dc:
                    ba:d6:dc:a8:d5:02:e5:a2:75:06:28:a7:71:eb:b8:
                    9a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.64.0/18
                  96.125.160.0/20
                  108.167.128.0/18
                  108.174.144.0/20
                  108.179.192.0/18
                  162.210.48.0/22
                  192.185.0.0/16
                  192.232.192.0/18
                  192.254.128.0/17
                  198.20.224.0/19
                  198.154.192.0/18
                  216.172.160.0/19
                IPv6:
                  2605:f300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:22:4b:df:3e:ac:7f:a0:ca:7f:0a:97:29:c5:14:78:b4:02:
         64:ba:8c:52:1d:85:1a:a7:6a:b7:e8:a0:c6:58:60:67:8f:7e:
         32:19:25:56:e7:65:3c:e3:ec:35:2b:b4:74:2d:e8:f2:c5:d8:
         12:e2:a3:54:a8:b7:30:7e:a6:98:73:c1:b4:8f:11:12:dd:82:
         65:e1:72:2d:c8:f0:df:6a:74:10:83:65:07:68:dc:9a:c7:1f:
         2e:d8:8f:d4:bc:c6:1b:f2:6e:62:68:48:b3:1b:18:08:96:e8:
         4c:98:2e:67:d8:3b:a9:33:05:88:24:42:be:28:b0:39:64:0b:
         c0:27:9e:6c:b7:59:d5:31:9d:13:19:6c:e6:e1:03:03:2c:45:
         af:c5:cc:28:d9:e0:91:a0:41:ab:60:af:aa:46:78:84:df:89:
         2d:ba:a2:32:19:19:52:31:8d:b7:7a:70:53:99:fd:96:ed:48:
         3f:ce:53:e4:d7:50:2a:40:c6:c4:98:1b:72:2f:c8:d6:23:a2:
         ef:3e:9a:a3:82:c7:2f:fc:53:4f:7e:00:0e:14:f0:89:ce:f9:
         bf:f0:68:1d:a2:2d:36:df:0c:df:eb:31:d5:62:32:2a:8f:12:
         bb:db:68:a3:d6:52:ee:60:90:88:31:f6:21:7f:71:22:0d:7f:
         cb:f1:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:46 2024 by rpki-client on console-fra.rpki-client.org