Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
File:                     9799440b-1f9c-4e88-926e-9ee073c7ee48.cer (raw, json)
Hash identifier:          XfLIfbdcoSYpF0QigKvuyDXD9z1mZOttRPB3MoFpp9U=
Subject key identifier:   AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847887ED722F55B88A4B83EBE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 14 Oct 2024 00:45:26 +0000
Certificate not after:    Sun 17 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 32163
                          IP: 24.105.0.0/18
                          IP: 64.224.0.0/21
                          IP: 64.224.24.0/21
                          IP: 64.227.216.0/21
                          IP: 64.227.228.0 -- 64.227.239.255
                          IP: 66.40.176.0/20
                          IP: 158.115.192.0/19
                          IP: 198.74.32.0 -- 198.74.41.255
                          IP: 2620:10b:9000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:7e:d7:22:f5:5b:88:a4:b8:3e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 14 00:45:26 2024 GMT
            Not After : Jan 17 01:45:26 2027 GMT
        Subject: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:9c:3e:e1:84:f6:5e:88:20:e6:36:3e:b3:
                    a3:c5:cf:a4:2c:64:c3:14:8b:64:b0:45:83:71:78:
                    6e:f7:9d:9e:cb:9e:2b:74:25:58:f4:5a:d3:75:21:
                    75:a1:b7:a9:26:4f:06:46:f2:49:18:6a:aa:7c:96:
                    fa:06:a3:6f:67:00:2c:52:1b:e8:4e:d4:94:d0:22:
                    07:43:ed:cc:d4:fe:d6:6d:0c:13:6a:3c:b7:ee:5c:
                    11:6a:b5:79:7d:72:ce:23:e4:0f:7f:ac:cf:12:63:
                    c8:71:3e:e6:93:d2:23:b6:4a:0f:6a:dc:a7:31:39:
                    4c:ed:3a:b9:52:ab:e4:90:e0:dd:c4:54:22:d2:bf:
                    b8:a7:02:07:ec:de:39:4e:4a:ce:c9:19:50:fd:65:
                    2f:10:1d:78:16:25:0c:00:30:82:00:65:22:26:ef:
                    2f:79:29:e2:69:30:88:d1:a6:10:9c:3d:0f:54:13:
                    64:f8:7f:ec:40:32:87:9e:ff:ce:62:49:89:91:53:
                    3b:73:05:eb:d4:82:45:78:ff:b2:fb:6f:ba:77:7c:
                    1e:4b:d3:b9:50:d8:ff:15:9d:60:17:71:01:5f:95:
                    15:59:29:70:52:06:89:62:bd:db:5b:f3:c1:c0:97:
                    b8:61:bb:90:2f:0f:55:54:aa:fd:e9:67:21:fe:a1:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.105.0.0/18
                  64.224.0.0/21
                  64.224.24.0/21
                  64.227.216.0/21
                  64.227.228.0-64.227.239.255
                  66.40.176.0/20
                  158.115.192.0/19
                  198.74.32.0-198.74.41.255
                IPv6:
                  2620:10b:9000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32163

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:09:f4:9c:0e:d9:cf:22:9d:64:f8:a0:72:d7:73:0d:5e:34:
         50:9b:eb:55:38:ed:b9:23:08:a9:54:d1:60:45:63:b6:bb:72:
         bd:91:8b:3b:a2:33:7e:dc:0b:d3:31:a9:0f:31:9f:2c:45:09:
         4f:a8:5c:fe:7d:33:48:a3:21:0b:6b:07:a2:5e:b7:49:7c:b6:
         eb:a2:f0:58:b4:d1:73:28:53:06:e0:5b:48:0c:c3:68:ea:c6:
         db:e8:50:47:70:57:ea:82:50:b4:d9:6f:e9:70:18:0c:90:f1:
         1c:ed:ee:6b:21:4c:39:db:eb:14:00:49:22:fe:d5:ea:36:56:
         bf:7d:b0:77:74:b1:2b:96:e9:46:3f:92:c3:33:35:4f:8a:4a:
         ac:b6:c7:f0:dd:f2:75:00:47:4f:d6:41:dc:44:6d:e3:d2:ba:
         ba:5b:77:ae:30:c6:97:c1:1c:fb:d6:86:f3:d6:7a:a7:2f:31:
         be:29:dc:a0:06:4f:06:d6:7e:74:f8:35:2f:0a:02:33:ba:09:
         71:ce:8a:40:88:1c:36:23:77:dc:6b:42:49:73:a3:66:21:05:
         e6:00:fe:51:e0:ba:4c:4f:ee:55:27:b0:6e:de:da:5b:43:f8:
         38:13:77:af:e9:4d:74:c3:30:0a:c2:84:9a:f4:4b:c1:84:8c:
         13:10:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:01:50 2024 by rpki-client on console-fra.rpki-client.org