Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
File:                     4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer (raw, json)
Hash identifier:          VRMAO36LLne1oz0nm/hRjtrgbmk+fBW/5CbjpzPka/Y=
Subject key identifier:   65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584718195728F34514E582944480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 03 Sep 2024 18:30:24 +0000
Certificate not after:    Sat 14 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 25736
                          AS: 30010
                          AS: 53952
                          AS: 54386
                          AS: 54716
                          AS: 62499
                          AS: 62760
                          AS: 63034
                          AS: 393752
                          AS: 396471
                          AS: 400330
                          IP: 23.173.176.0/24
                          IP: 149.112.11.0/24
                          IP: 149.112.27.0/24
                          IP: 149.112.39.0 -- 149.112.40.255
                          IP: 149.112.68.0/24
                          IP: 149.112.113.0/24
                          IP: 206.53.137.0/24
                          IP: 206.53.202.0/24
                          IP: 206.82.104.0/22
                          IP: 206.130.10.0/24
                          IP: 2001:504:36::/48
                          IP: 2001:504:44::/48
                          IP: 2001:504:61::/48
                          IP: 2001:504:102::/48
                          IP: 2001:504:116::/48
                          IP: 2001:504:13f::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:18:19:57:28:f3:45:14:e5:82:94:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep  3 18:30:24 2024 GMT
            Not After : Nov 14 01:45:22 2026 GMT
        Subject: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:de:c3:02:bb:3e:53:21:fa:21:63:00:39:
                    fe:01:df:dc:5d:f1:d0:1d:f5:c9:43:4a:03:b4:d2:
                    e0:73:ba:2c:dc:f2:c9:ba:da:10:46:11:3c:82:d9:
                    38:e3:fa:2f:66:5f:ca:30:0a:62:71:9b:58:b6:d9:
                    6a:51:61:44:92:58:6f:5d:5e:84:35:23:d6:05:13:
                    34:e3:89:6c:72:30:f1:a8:fa:09:c9:3f:00:dc:b4:
                    a7:6c:a6:23:5d:f9:34:23:07:3c:65:35:54:59:dd:
                    1c:cd:1f:46:eb:1c:57:ae:bb:b9:1e:14:a1:86:dc:
                    85:f0:43:a9:25:5e:57:df:c8:31:26:2d:c0:41:53:
                    dd:b7:da:ee:64:37:66:17:e8:07:da:03:93:9b:71:
                    f1:b3:4a:b0:2b:57:ab:03:db:92:b0:00:92:ff:89:
                    43:60:75:ef:df:13:24:c0:65:cc:1a:71:11:5e:4e:
                    a8:3b:6b:0b:59:35:c9:b3:0a:0c:f8:e1:04:8c:49:
                    5f:dd:2a:3b:84:f8:2c:bd:50:04:63:ea:c5:c6:58:
                    3b:8e:0a:09:60:21:2d:30:c0:7f:11:ff:d5:68:61:
                    b9:ea:2c:49:d8:62:b9:04:b5:4f:8e:dd:b3:d5:b4:
                    88:76:ac:f6:63:8e:55:88:6b:d5:3e:8e:1c:f0:df:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.176.0/24
                  149.112.11.0/24
                  149.112.27.0/24
                  149.112.39.0-149.112.40.255
                  149.112.68.0/24
                  149.112.113.0/24
                  206.53.137.0/24
                  206.53.202.0/24
                  206.82.104.0/22
                  206.130.10.0/24
                IPv6:
                  2001:504:36::/48
                  2001:504:44::/48
                  2001:504:61::/48
                  2001:504:102::/48
                  2001:504:116::/48
                  2001:504:13f::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25736
                  30010
                  53952
                  54386
                  54716
                  62499
                  62760
                  63034
                  393752
                  396471
                  400330

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:31:7c:01:90:95:6b:7b:b5:d4:99:bf:4a:82:5c:4e:f6:
         09:12:35:9d:bf:4e:86:76:13:44:83:45:ac:84:ba:dc:b8:e7:
         7b:b5:f1:95:d1:11:d1:f1:79:c8:1b:fa:eb:6b:d4:d5:d2:c2:
         b7:56:55:7c:4b:6e:fb:ae:f3:3d:59:97:d0:28:bd:93:be:01:
         bc:51:99:b5:3c:36:e2:15:f3:e6:6c:b5:05:20:41:1f:fc:0a:
         22:9b:e8:00:4c:c0:44:9e:b5:d9:d9:49:5c:1b:50:68:40:af:
         79:ac:e3:93:3a:41:16:08:53:84:db:14:6e:80:8f:74:1a:80:
         53:5a:9e:26:56:79:e4:5e:5c:63:45:06:f8:22:07:7b:56:01:
         73:a6:12:ec:33:e2:05:16:8f:14:62:f2:7a:65:8d:a1:28:72:
         c3:f2:fd:3a:37:68:b4:e1:dc:e0:27:fb:59:62:59:40:fb:9f:
         3e:13:63:76:ae:cd:44:31:f5:d5:b3:0a:80:8a:fb:8f:a4:8f:
         13:53:40:cd:23:40:87:9d:f4:e9:31:ab:21:80:c1:eb:ef:ea:
         5f:39:a3:43:df:9c:6b:55:40:a8:70:08:91:3a:13:11:f8:71:
         f6:c9:3a:51:01:8f:73:a8:7b:f9:9a:9a:03:92:f0:ee:00:95:
         24:d3:fe:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:27:57 2024 by rpki-client on console-fra.rpki-client.org