Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
File:                     ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer (raw, json)
Hash identifier:          nvm0Q1dUwFyBiT/KAe2bRL/eXLRxpWtqR3NZK3gi6vw=
Subject key identifier:   8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285848C1494630E56F04ACC6079C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 01:45:32 +0000
Certificate not after:    Sun 09 May 2027 00:45:32 +0000
Subordinate resources:    AS: 3842
                          AS: 22611
                          AS: 54641
                          IP: 23.226.224.0/20
                          IP: 23.235.192.0/19
                          IP: 66.117.0.0/24
                          IP: 66.117.3.0 -- 66.117.5.255
                          IP: 66.117.14.0/23
                          IP: 74.124.193.0 -- 74.124.195.255
                          IP: 74.124.197.0 -- 74.124.198.255
                          IP: 74.124.200.0/24
                          IP: 74.124.202.0/23
                          IP: 74.124.210.0 -- 74.124.215.255
                          IP: 74.124.217.0 -- 74.124.219.255
                          IP: 91.92.38.0/23
                          IP: 104.152.108.0/22
                          IP: 104.193.140.0/22
                          IP: 104.244.120.0/21
                          IP: 104.247.72.0/21
                          IP: 107.161.16.0/20
                          IP: 107.191.96.0/19
                          IP: 144.208.64.0/20
                          IP: 167.88.112.0/20
                          IP: 168.235.64.0/18
                          IP: 172.81.116.0/22
                          IP: 173.231.192.0/18
                          IP: 173.247.240.0/20
                          IP: 192.30.32.0/22
                          IP: 192.73.232.0/21
                          IP: 192.145.232.0/21
                          IP: 192.184.80.0/20
                          IP: 192.249.56.0/21
                          IP: 192.249.112.0/20
                          IP: 198.46.80.0/20
                          IP: 199.223.114.0/23
                          IP: 199.241.28.0/22
                          IP: 199.250.192.0/19
                          IP: 200.225.32.0/20
                          IP: 205.134.234.0/24
                          IP: 205.134.238.0/23
                          IP: 205.134.241.0/24
                          IP: 205.134.249.0 -- 205.134.255.255
                          IP: 209.182.192.0 -- 209.182.215.255
                          IP: 213.165.224.0/19
                          IP: 216.194.160.0/20
                          IP: 2604:180::/32
                          IP: 2605:f400::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:49:46:30:e5:6f:04:ac:c6:07:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb  3 01:45:32 2025 GMT
            Not After : May  9 00:45:32 2027 GMT
        Subject: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:cc:83:2d:cd:67:1b:0e:77:bd:47:76:77:
                    70:0b:bc:7d:54:65:4b:8a:b7:6f:a5:1b:be:ed:2e:
                    11:b8:0f:4d:c0:8f:80:e2:e1:60:ff:98:f0:12:30:
                    2b:54:ae:5b:0c:a0:36:ea:fa:01:3a:54:a6:12:01:
                    96:40:be:51:98:01:d3:f0:b3:d7:2e:15:a4:6c:fd:
                    76:69:13:09:11:cf:7a:7a:dd:66:51:7e:10:b5:13:
                    24:9b:bb:91:b2:6d:80:0e:68:b4:0a:ca:a7:45:af:
                    a4:c5:09:c8:14:e0:5c:6d:d3:3a:75:5b:c6:1f:b6:
                    03:1e:aa:1b:18:b2:fe:2b:a4:34:1c:be:96:79:79:
                    51:f4:0b:28:9f:59:71:4f:67:7a:7d:c1:9d:81:43:
                    19:20:f5:12:ee:85:33:cd:c4:24:73:09:97:79:d5:
                    07:12:e5:b5:43:8e:b9:63:bf:d3:63:6a:63:ee:57:
                    63:b8:a6:bc:e1:e6:da:33:99:39:1d:58:92:4b:4f:
                    00:e6:1b:3d:52:75:21:d6:7b:db:09:0e:18:3a:23:
                    ec:a5:a2:29:0f:12:f7:b2:79:fa:5c:40:2e:2c:0d:
                    25:ee:14:52:c6:ab:65:8f:29:f7:db:3b:e6:8a:fe:
                    4c:bb:ee:c3:96:89:a6:9d:81:7e:60:a6:81:13:97:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.224.0/20
                  23.235.192.0/19
                  66.117.0.0/24
                  66.117.3.0-66.117.5.255
                  66.117.14.0/23
                  74.124.193.0-74.124.195.255
                  74.124.197.0-74.124.198.255
                  74.124.200.0/24
                  74.124.202.0/23
                  74.124.210.0-74.124.215.255
                  74.124.217.0-74.124.219.255
                  91.92.38.0/23
                  104.152.108.0/22
                  104.193.140.0/22
                  104.244.120.0/21
                  104.247.72.0/21
                  107.161.16.0/20
                  107.191.96.0/19
                  144.208.64.0/20
                  167.88.112.0/20
                  168.235.64.0/18
                  172.81.116.0/22
                  173.231.192.0/18
                  173.247.240.0/20
                  192.30.32.0/22
                  192.73.232.0/21
                  192.145.232.0/21
                  192.184.80.0/20
                  192.249.56.0/21
                  192.249.112.0/20
                  198.46.80.0/20
                  199.223.114.0/23
                  199.241.28.0/22
                  199.250.192.0/19
                  200.225.32.0/20
                  205.134.234.0/24
                  205.134.238.0/23
                  205.134.241.0/24
                  205.134.249.0-205.134.255.255
                  209.182.192.0-209.182.215.255
                  213.165.224.0/19
                  216.194.160.0/20
                IPv6:
                  2604:180::/32
                  2605:f400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3842
                  22611
                  54641

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:58:4d:78:e0:53:41:8b:7b:e3:e0:b9:cd:0f:01:24:e2:
         6e:df:d8:ca:61:5f:a3:57:5f:4f:d6:31:9e:4e:32:5b:aa:6b:
         84:b0:ce:93:09:3a:39:5b:55:51:c0:8f:71:65:dd:ab:04:a5:
         42:21:bc:33:de:6b:96:42:1c:3c:80:69:30:cc:18:c5:80:d1:
         e3:d9:3f:57:2b:3c:73:e2:c2:1c:d4:ad:fc:76:72:3d:54:36:
         49:21:e1:e0:fa:82:87:14:df:a6:e1:dc:1f:ff:0b:92:d5:5a:
         9b:61:27:75:ee:87:d7:c5:7c:f6:09:b8:a3:b7:64:fa:f1:db:
         fa:86:f4:0c:f3:64:da:3a:be:a4:0a:95:7c:5d:ea:cc:7f:94:
         ee:68:1c:34:df:9c:36:17:3a:0d:fb:6e:17:c6:3a:5e:5f:5c:
         f7:f4:86:88:a7:11:41:21:af:ca:3f:50:82:1e:e1:18:ab:ce:
         ee:fb:64:d2:cd:b2:cf:8f:33:8d:e2:46:d7:7f:e1:42:c2:ca:
         21:0a:75:dd:e3:b6:48:00:4f:ec:af:9c:7e:ff:3e:b7:15:a3:
         fe:37:ee:36:fc:04:48:07:ce:c5:16:44:bc:39:af:a2:55:2f:
         53:f4:d1:36:00:bc:53:c7:d9:0c:f9:b5:36:ae:ce:c2:70:d1:
         c5:8f:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 16:11:33 2025 by rpki-client