Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
File:                     26ce408d-5581-483d-90b3-5119fc830064.cer (raw, json)
Hash identifier:          EF0jniHGjMSLPQcfyKBls3Uvut8KMs2qtTPwQD3gbjw=
Subject key identifier:   65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858486C059C429D297437CEF74AA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Jan 2025 12:45:30 +0000
Certificate not after:    Tue 05 May 2026 14:08:12 +0000
Subordinate resources:    AS: 19577
                          AS: 33733
                          IP: 23.147.168.0/24
                          IP: 208.85.8.0/22
                          IP: 2602:faa5::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jan 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:05:9c:42:9d:29:74:37:ce:f7:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan  3 12:45:30 2025 GMT
            Not After : May  5 14:08:12 2026 GMT
        Subject: CN=26ce408d-5581-483d-90b3-5119fc830064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:a6:72:0a:92:62:5c:8a:f1:57:85:4f:f3:
                    b7:aa:cc:f9:c1:29:81:95:c9:8c:1f:4d:26:8c:f8:
                    bf:52:b9:4e:fc:f4:55:b5:15:5c:a6:39:8a:bd:1f:
                    6d:1a:d2:4a:fa:e8:df:97:db:02:a7:e3:30:2b:02:
                    db:43:ed:e7:f0:98:2a:f0:67:36:db:2f:6d:30:93:
                    60:65:02:2f:13:cf:94:64:fe:a2:a7:b9:55:b4:e2:
                    b1:c1:08:df:45:b6:ef:44:03:89:d2:80:bd:2a:53:
                    c9:6a:94:fe:89:99:a0:64:cc:1d:d2:77:bf:b3:bf:
                    eb:95:73:dd:5a:67:ed:7f:23:dd:c7:48:69:1c:19:
                    05:21:41:e8:72:b0:39:74:64:8d:74:f2:b1:05:09:
                    34:ae:98:3c:05:6e:c6:3d:4e:91:9b:28:ec:96:53:
                    38:aa:af:d9:e8:51:c5:f3:f8:8e:d7:f7:5d:65:d4:
                    f2:07:29:55:34:27:1c:da:d0:d8:00:e2:3c:c1:08:
                    6a:d4:75:a8:94:09:64:28:72:6e:38:3e:87:da:46:
                    2d:a0:66:82:fa:44:63:9b:e7:9c:e6:91:81:d5:51:
                    d5:44:23:82:1a:be:6c:6a:6e:3d:8c:c3:1c:87:c8:
                    55:8f:4e:de:23:22:b9:35:a2:50:4e:15:83:ff:e3:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:21:7C:6E:F2:43:AA:49:DB:58:1E:FE:47:99:1D:54:9D:A8:92:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.168.0/24
                  208.85.8.0/22
                IPv6:
                  2602:faa5::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19577
                  33733

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:93:03:91:6a:84:77:ed:cc:79:cf:59:29:4c:ab:ff:58:
         01:e2:5b:b1:73:15:4d:56:f0:01:12:46:2a:38:3c:f4:62:e6:
         38:5a:f3:31:52:fd:e2:b0:e7:c2:75:b3:b0:14:73:97:25:08:
         ea:d5:15:b3:33:38:66:c5:2e:a0:9b:10:ec:de:74:71:9b:0a:
         a0:49:34:ea:15:7e:e4:26:78:dd:f0:6b:ad:64:ee:bf:86:c2:
         ed:fb:75:7e:20:89:c8:a8:83:b8:e7:a0:92:c7:e5:58:99:d4:
         07:ff:c6:03:37:f2:32:74:8b:6d:64:af:76:f3:6e:0e:14:fd:
         72:a6:4f:0a:7a:a0:72:27:40:56:fe:34:f8:3b:df:32:42:a2:
         44:78:66:9a:e4:c6:0b:fa:54:4a:f3:c3:1c:43:82:c8:a5:8f:
         36:c2:13:63:74:d4:ff:e3:e1:09:a4:6c:e8:9d:92:0c:ab:a8:
         26:36:6f:0c:1d:3b:ce:ce:03:19:96:b0:41:fb:44:5c:6e:70:
         0d:a2:23:3c:63:37:6e:c2:55:1c:0b:3f:f1:27:07:bf:35:e5:
         74:fa:a7:62:c9:f1:4a:9e:28:5f:18:aa:54:52:26:ee:9a:3f:
         f1:b3:1c:40:58:bb:e6:e9:f0:00:0f:d5:9b:6b:b9:00:d9:ef:
         ad:3b:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 19:09:06 2025 by rpki-client on console-ams.rpki-client.org