Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
File:                     2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer (raw, json)
Hash identifier:          UPtOttyw2bgEb3GnmfH0ep1wrSg7pfgCeCvdVvrtCdc=
Subject key identifier:   FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority key identifier: 00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57
Certificate issuer:       /CN=04b24da1-11ab-48ad-a03f-6b7832a569c8
Certificate serial:       010D0C9F43285846A9F941CE37AE9DF851946C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
Manifest:                 rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
caRepository:             rsync://repo.rpki.space/repo/Netiface/1/
Notify URL:               https://repo.rpki.space/rrdp/notification.xml
Certificate not before:   Fri 26 Jul 2024 07:46:51 +0000
Certificate not after:    Thu 29 Oct 2026 07:46:51 +0000
Subordinate resources:    AS: 33042
                          AS: 36680
                          IP: 23.176.184.0/24
                          IP: 2602:f915::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a9:f9:41:ce:37:ae:9d:f8:51:94:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b24da1-11ab-48ad-a03f-6b7832a569c8
        Validity
            Not Before: Jul 26 07:46:51 2024 GMT
            Not After : Oct 29 07:46:51 2026 GMT
        Subject: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:73:17:b0:a9:60:00:cb:b0:42:e3:eb:30:
                    0d:e2:e8:33:1d:e3:02:4e:2a:5d:3f:5e:9a:e5:75:
                    ba:55:e1:44:b4:d7:17:6f:6a:46:01:93:c1:fa:2d:
                    74:b2:70:3f:2f:d0:3a:81:f7:9a:36:1f:c2:bd:43:
                    7a:a4:9f:88:65:66:39:2e:3c:1c:84:17:68:b9:b5:
                    50:bf:dd:05:d9:13:12:cf:87:93:f0:07:6e:7c:49:
                    ca:11:fc:5b:d0:79:08:33:a2:00:75:28:91:54:af:
                    ce:e4:b6:44:ae:fe:ef:a4:83:1f:69:20:f1:7f:02:
                    8c:e9:0e:f0:d7:fd:54:4c:a5:ab:57:bb:a1:eb:3c:
                    30:8f:cf:94:1f:90:9f:94:72:9f:bb:6c:81:b3:34:
                    23:89:d6:77:16:3d:b0:20:33:a8:ba:62:e9:7c:7a:
                    83:89:17:6c:4f:02:9e:cb:1e:9e:78:f7:8a:a4:39:
                    29:e2:3e:21:a1:18:9d:85:7f:df:49:d0:91:fa:75:
                    79:d7:9f:45:87:95:73:db:64:96:8a:d3:ab:15:d0:
                    24:b9:02:e5:a8:6f:d6:da:69:bc:c9:2c:83:61:b9:
                    72:3c:8d:4d:bd:41:19:5b:13:93:53:5c:7a:fe:b5:
                    69:7c:13:e0:dd:29:0d:3d:71:0e:4e:02:92:50:a3:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
            Subject Information Access:
                CA Repository - URI:rsync://repo.rpki.space/repo/Netiface/1/
                RPKI Manifest - URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                RPKI Notify - URI:https://repo.rpki.space/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl

            X509v3 Authority Key Identifier:
                keyid:00:D5:D8:DA:5E:21:5C:F4:FF:40:42:B5:19:B4:50:5C:22:4B:D1:57

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24
                IPv6:
                  2602:f915::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33042
                  36680

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:86:11:20:a4:0e:e2:b9:20:28:8c:85:41:0b:7b:01:36:
         84:4c:ee:56:f7:1f:8c:d4:29:ab:87:a2:07:05:02:f0:9f:ab:
         95:3e:72:7e:03:b9:ae:bb:94:3c:a4:11:b9:0e:f6:64:71:6f:
         48:76:bf:7a:72:03:c2:5e:19:85:a3:e2:bb:cb:09:03:5c:89:
         9e:df:99:47:14:95:b7:13:93:df:22:2d:c0:2a:9f:a6:d2:5d:
         be:72:c9:8d:68:20:15:ad:05:5e:5e:8f:d0:38:4f:25:d9:8b:
         6c:e9:7c:51:00:a9:11:41:78:f6:3a:ae:60:8a:d4:fc:10:f9:
         d9:ad:0b:e8:4d:2b:e7:0d:9e:1d:47:01:9a:e2:07:26:21:ee:
         3c:ff:a1:57:a9:fd:db:89:2a:a8:93:dd:6d:13:80:af:83:cb:
         66:59:b4:93:3c:95:ab:e1:17:bf:1f:19:fe:c0:79:91:8c:c6:
         ae:0c:6f:10:1b:05:e1:df:fe:af:52:ca:fa:48:62:fe:02:0b:
         4e:a7:f6:b7:e1:93:74:15:1f:b3:dd:c4:2a:9f:d4:a2:2d:74:
         22:3f:2f:4b:30:43:d2:3c:a4:bf:ca:a6:90:ef:55:f2:26:f1:
         45:1b:99:c2:73:21:46:7a:73:66:67:be:e0:39:c1:b5:81:b4:
         8a:0b:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org