Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
File:                     ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer (raw, json)
Hash identifier:          SnOQOXf6nmR81XoiS0RL05OI6M65gj2vz9TzZT/0vG8=
Subject key identifier:   8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285843BCF8B042DE334CC385FB7580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 Nov 2023 00:45:15 +0000
Certificate not after:    Tue 03 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 3842
                          AS: 22611
                          AS: 54641
                          IP: 23.226.224.0/20
                          IP: 23.235.192.0/19
                          IP: 66.117.0.0/24
                          IP: 66.117.3.0 -- 66.117.5.255
                          IP: 66.117.14.0/23
                          IP: 74.124.193.0 -- 74.124.195.255
                          IP: 74.124.197.0 -- 74.124.198.255
                          IP: 74.124.200.0/24
                          IP: 74.124.202.0/23
                          IP: 74.124.210.0 -- 74.124.215.255
                          IP: 74.124.217.0 -- 74.124.219.255
                          IP: 91.92.38.0/23
                          IP: 104.152.108.0/22
                          IP: 104.193.140.0/22
                          IP: 104.244.120.0/21
                          IP: 104.247.72.0/21
                          IP: 107.161.16.0/20
                          IP: 107.191.96.0/19
                          IP: 144.208.64.0/20
                          IP: 167.88.112.0/20
                          IP: 168.235.64.0/18
                          IP: 172.81.116.0/22
                          IP: 173.231.192.0/18
                          IP: 173.247.240.0/20
                          IP: 192.30.32.0/22
                          IP: 192.73.232.0/21
                          IP: 192.145.232.0/21
                          IP: 192.184.80.0/20
                          IP: 192.249.56.0/21
                          IP: 192.249.112.0/20
                          IP: 198.46.80.0/20
                          IP: 199.223.114.0/23
                          IP: 199.241.28.0/22
                          IP: 199.250.192.0/19
                          IP: 200.225.32.0/20
                          IP: 205.134.234.0/24
                          IP: 205.134.238.0/23
                          IP: 205.134.241.0/24
                          IP: 205.134.249.0 -- 205.134.255.255
                          IP: 209.182.192.0 -- 209.182.215.255
                          IP: 213.165.224.0/19
                          IP: 216.194.160.0/20
                          IP: 2604:180::/32
                          IP: 2605:f400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bc:f8:b0:42:de:33:4c:c3:85:fb:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov  1 00:45:15 2023 GMT
            Not After : Feb  3 01:45:15 2026 GMT
        Subject: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:cc:83:2d:cd:67:1b:0e:77:bd:47:76:77:
                    70:0b:bc:7d:54:65:4b:8a:b7:6f:a5:1b:be:ed:2e:
                    11:b8:0f:4d:c0:8f:80:e2:e1:60:ff:98:f0:12:30:
                    2b:54:ae:5b:0c:a0:36:ea:fa:01:3a:54:a6:12:01:
                    96:40:be:51:98:01:d3:f0:b3:d7:2e:15:a4:6c:fd:
                    76:69:13:09:11:cf:7a:7a:dd:66:51:7e:10:b5:13:
                    24:9b:bb:91:b2:6d:80:0e:68:b4:0a:ca:a7:45:af:
                    a4:c5:09:c8:14:e0:5c:6d:d3:3a:75:5b:c6:1f:b6:
                    03:1e:aa:1b:18:b2:fe:2b:a4:34:1c:be:96:79:79:
                    51:f4:0b:28:9f:59:71:4f:67:7a:7d:c1:9d:81:43:
                    19:20:f5:12:ee:85:33:cd:c4:24:73:09:97:79:d5:
                    07:12:e5:b5:43:8e:b9:63:bf:d3:63:6a:63:ee:57:
                    63:b8:a6:bc:e1:e6:da:33:99:39:1d:58:92:4b:4f:
                    00:e6:1b:3d:52:75:21:d6:7b:db:09:0e:18:3a:23:
                    ec:a5:a2:29:0f:12:f7:b2:79:fa:5c:40:2e:2c:0d:
                    25:ee:14:52:c6:ab:65:8f:29:f7:db:3b:e6:8a:fe:
                    4c:bb:ee:c3:96:89:a6:9d:81:7e:60:a6:81:13:97:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.224.0/20
                  23.235.192.0/19
                  66.117.0.0/24
                  66.117.3.0-66.117.5.255
                  66.117.14.0/23
                  74.124.193.0-74.124.195.255
                  74.124.197.0-74.124.198.255
                  74.124.200.0/24
                  74.124.202.0/23
                  74.124.210.0-74.124.215.255
                  74.124.217.0-74.124.219.255
                  91.92.38.0/23
                  104.152.108.0/22
                  104.193.140.0/22
                  104.244.120.0/21
                  104.247.72.0/21
                  107.161.16.0/20
                  107.191.96.0/19
                  144.208.64.0/20
                  167.88.112.0/20
                  168.235.64.0/18
                  172.81.116.0/22
                  173.231.192.0/18
                  173.247.240.0/20
                  192.30.32.0/22
                  192.73.232.0/21
                  192.145.232.0/21
                  192.184.80.0/20
                  192.249.56.0/21
                  192.249.112.0/20
                  198.46.80.0/20
                  199.223.114.0/23
                  199.241.28.0/22
                  199.250.192.0/19
                  200.225.32.0/20
                  205.134.234.0/24
                  205.134.238.0/23
                  205.134.241.0/24
                  205.134.249.0-205.134.255.255
                  209.182.192.0-209.182.215.255
                  213.165.224.0/19
                  216.194.160.0/20
                IPv6:
                  2604:180::/32
                  2605:f400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3842
                  22611
                  54641

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:5f:00:51:0c:2e:70:0c:d0:30:bb:f6:a6:85:bf:47:49:
         41:b0:ec:a8:0a:40:ef:04:bc:d9:3c:98:61:a0:5d:45:75:a4:
         a5:8d:3d:33:6d:0d:47:0d:a1:b4:a3:81:11:32:3a:cc:75:74:
         1e:63:b5:52:5a:60:95:71:8b:17:69:12:4a:d3:54:8c:d5:3f:
         e0:10:69:1c:1e:16:5e:2b:fa:84:f6:fc:eb:f6:09:eb:3e:2e:
         77:eb:ea:85:dc:db:58:2e:c7:48:6a:3b:fb:ef:e2:f0:29:97:
         0c:d3:8d:13:a9:d3:6a:89:03:ed:2d:3d:79:a9:f7:d8:1a:ad:
         95:9f:cc:86:da:6f:26:46:25:cc:8a:26:5b:8f:2d:d5:12:12:
         a5:7a:12:71:52:a3:94:96:5f:45:f9:f3:30:92:7b:cd:bc:cc:
         a1:06:c3:0a:7d:17:48:82:9f:d0:e1:1c:29:0b:5f:ff:f9:50:
         49:b6:02:4c:2f:d0:99:7d:19:d0:3e:d4:4d:a5:57:4c:cc:de:
         0a:52:b8:f0:28:91:94:8a:93:ba:af:84:64:ac:56:60:d0:4c:
         53:b0:01:fa:61:14:cc:c9:46:d9:7e:27:35:8c:8b:67:e2:24:
         3c:bd:1d:bc:57:2b:69:40:e0:ea:00:5f:93:a1:7b:59:dd:7f:
         33:7b:97:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:51 2024 by rpki-client on console-fra.rpki-client.org