Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
File:                     e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer (raw, json)
Hash identifier:          Vnv77qRUxLtKFMCJm/P2uTjK2D8Kmw9bC7xkJASsKAc=
Subject key identifier:   AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858460CD1C17679E93CAB102F34A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 31 May 2024 00:45:20 +0000
Certificate not after:    Thu 03 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 6540
                          AS: 30644
                          AS: 39967
                          AS: 396998
                          IP: 23.183.240.0/21
                          IP: 64.52.81.0/24
                          IP: 104.152.140.0/22
                          IP: 134.195.42.0/24
                          IP: 136.175.222.0/23
                          IP: 141.193.68.0/24
                          IP: 148.59.74.0/24
                          IP: 163.123.192.0/22
                          IP: 172.111.32.0/22
                          IP: 205.178.176.0/23
                          IP: 205.178.182.0/23
                          IP: 205.220.224.0/21
                          IP: 206.71.159.0/24
                          IP: 209.127.214.0/24
                          IP: 209.237.140.0/23
                          IP: 216.126.207.0/24
                          IP: 2600:3500::/28
                          IP: 2602:fd00::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:d1:c1:76:79:e9:3c:ab:10:2f:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 31 00:45:20 2024 GMT
            Not After : Sep  3 00:45:20 2026 GMT
        Subject: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:41:8e:a1:cc:95:46:aa:ea:df:c8:b0:16:
                    b8:fc:ec:9e:e9:ba:05:2a:d2:15:12:70:9d:f4:9f:
                    ab:59:cb:b5:a2:29:0e:84:4b:57:04:c6:24:84:25:
                    74:58:01:31:e6:2e:16:2a:d8:25:3c:c7:60:6e:be:
                    c4:42:b3:f9:fd:d6:02:7c:b1:a2:05:5f:ef:70:15:
                    97:ac:8a:83:4a:69:e5:ee:06:d4:51:01:7d:b5:f6:
                    32:0c:e3:81:43:1f:84:c2:00:3c:fa:3e:db:9e:d0:
                    9a:52:e6:dc:c2:78:18:5a:c6:9f:61:c3:ca:77:f5:
                    92:b9:16:51:1a:fe:d5:59:11:bb:b2:2c:94:6d:9f:
                    4c:7e:53:22:d4:29:aa:c8:a3:9b:39:a4:a8:ec:6a:
                    15:67:38:8a:18:3a:ab:35:bc:c9:02:8f:be:7f:57:
                    b4:63:5c:fe:8a:60:89:ed:e4:81:a6:a6:38:20:f4:
                    7f:c7:16:6d:a4:a4:42:56:4f:56:81:38:ab:cb:f1:
                    0b:2d:b5:19:c2:ac:b1:7c:3c:a6:2a:df:cc:ec:1b:
                    31:22:57:d3:d5:e5:c7:43:84:b7:76:88:c3:af:bb:
                    e8:b1:42:68:1b:47:7e:a4:1e:04:04:88:7a:4e:e9:
                    9a:29:4e:af:fe:58:7b:b8:7d:3f:7c:10:fb:86:4f:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.240.0/21
                  64.52.81.0/24
                  104.152.140.0/22
                  134.195.42.0/24
                  136.175.222.0/23
                  141.193.68.0/24
                  148.59.74.0/24
                  163.123.192.0/22
                  172.111.32.0/22
                  205.178.176.0/23
                  205.178.182.0/23
                  205.220.224.0/21
                  206.71.159.0/24
                  209.127.214.0/24
                  209.237.140.0/23
                  216.126.207.0/24
                IPv6:
                  2600:3500::/28
                  2602:fd00::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6540
                  30644
                  39967
                  396998

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:51:3f:0d:eb:5f:40:1d:22:d5:24:be:5b:08:2c:2e:dc:83:
         11:57:ee:1e:06:d2:d8:11:15:d2:43:27:48:3b:7d:4f:28:22:
         c1:cd:ad:d2:4b:b4:21:0a:d2:01:3d:7e:47:d4:41:97:10:f2:
         ec:11:9a:a8:d0:72:ed:28:57:a1:bd:56:2c:b8:d0:8b:54:f7:
         9d:7c:44:ea:c4:9b:35:01:82:b9:b6:a5:fd:84:40:19:87:6a:
         fd:b3:b4:ef:82:dd:58:30:d4:ad:43:57:0b:a7:9c:34:d0:f0:
         76:36:4a:3a:aa:ba:71:88:25:7c:92:87:33:19:f7:e1:36:44:
         4e:1f:6b:7b:e4:59:7e:14:93:a3:24:f8:37:30:ed:73:ca:d6:
         45:9d:de:8e:a5:96:7b:5a:7f:66:4a:12:2c:33:24:55:f6:17:
         10:a5:b8:c5:41:08:0d:5a:08:c5:98:5e:47:c8:24:b1:ce:1b:
         98:55:1d:ee:b5:e0:38:ef:0f:88:ba:f7:7c:e7:35:70:02:8b:
         b7:83:9b:c9:62:e4:cb:65:55:80:da:85:d6:ae:67:e4:cb:44:
         cc:8c:4c:ac:61:55:cb:05:3c:fe:ea:5f:cf:6a:94:40:e6:f5:
         f0:b2:6d:18:8c:2c:3f:c1:7f:c5:d2:eb:c2:ad:60:53:86:a6:
         08:63:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:17 2024 by rpki-client on console-fra.rpki-client.org