Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911.cer
File:                     37979819-9f1b-4b22-b17f-691002d8c911.cer (raw, json)
Hash identifier:          pZrKDfrI38HuQoirTVenPPhYJY7uyojTMPdSp7EQXIc=
Subject key identifier:   7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844FB2AD52E24B3278E9B00AC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Feb 2024 00:13:20 +0000
Certificate not after:    Wed 27 May 2026 23:13:20 +0000
Subordinate resources:    AS: 12019
                          AS: 12089
                          AS: 14832
                          AS: 27166
                          AS: 32505
                          IP: 69.63.160.0/20
                          IP: 69.194.176.0/20
                          IP: 139.180.32.0/19
                          IP: 173.0.32.0/20
                          IP: 199.33.80.0/24
                          IP: 199.83.224.0/21
                          IP: 208.77.168.0/22
                          IP: 208.80.160.0/21
                          IP: 2604:8e80::/32
                          IP: 2606:8380::/32
                          IP: 2606:b980::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:2a:d5:2e:24:b3:27:8e:9b:00:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 23 00:13:20 2024 GMT
            Not After : May 27 23:13:20 2026 GMT
        Subject: CN=37979819-9f1b-4b22-b17f-691002d8c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:73:a4:f1:45:ec:dc:f2:a7:2d:f6:92:9d:
                    04:d0:3b:2c:fd:3c:7c:e9:f7:f2:6b:9e:cc:cf:3d:
                    d4:3d:3c:5f:b6:83:25:83:84:f4:b0:2f:93:29:e0:
                    0a:c8:e6:0d:ae:d2:e0:26:ee:d7:bb:d4:bc:62:7f:
                    89:a5:e4:c5:4b:c9:77:cf:58:87:79:8a:61:4f:de:
                    de:9b:51:2d:44:97:bf:5b:ff:1b:16:d3:6d:5a:58:
                    cd:03:e5:27:3c:04:4b:2e:4a:ae:92:68:19:33:d3:
                    d7:79:48:44:c0:35:d7:13:9c:34:76:3b:3c:4e:ad:
                    71:ad:0f:71:dc:a1:68:2f:f4:00:01:6b:63:d1:1d:
                    35:8d:ba:6e:01:4e:db:d5:1a:51:9a:94:c8:6f:ad:
                    b9:07:4c:32:68:7a:99:7a:f8:4f:78:bd:2a:2c:2f:
                    c2:11:10:8e:d7:c4:72:6c:4f:0b:74:51:aa:a5:e2:
                    50:b4:de:86:08:07:9a:ea:0d:4a:8b:6f:79:a4:15:
                    dc:00:1e:40:71:8f:21:bc:18:b9:e1:73:67:35:d7:
                    9c:30:6a:17:1f:df:0e:b5:b4:ff:ce:f0:74:85:d3:
                    f8:8d:3c:53:e4:97:72:7c:88:0d:6e:45:44:47:b1:
                    0c:d7:52:16:81:97:6d:d6:96:6d:cd:6c:37:4f:e5:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.160.0/20
                  69.194.176.0/20
                  139.180.32.0/19
                  173.0.32.0/20
                  199.33.80.0/24
                  199.83.224.0/21
                  208.77.168.0/22
                  208.80.160.0/21
                IPv6:
                  2604:8e80::/32
                  2606:8380::/32
                  2606:b980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12019
                  12089
                  14832
                  27166
                  32505

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:93:a4:91:9f:30:3f:51:c5:a7:85:9f:cb:a6:92:dc:67:
         a1:57:fb:14:54:f1:de:73:3f:72:08:ed:27:31:6c:c4:76:a1:
         b2:36:6e:4c:68:23:c4:63:81:ac:9f:72:59:97:f7:03:ae:5f:
         2a:e4:65:b1:b4:08:af:b6:20:b6:4d:f2:16:ce:c6:5b:4c:ea:
         96:84:56:0a:40:b6:b7:10:67:ce:81:35:8d:bd:f7:45:fb:93:
         14:4c:21:38:e0:f8:e8:a5:80:74:f6:f7:f3:76:d6:ce:11:c4:
         10:4d:d5:c1:2f:a7:e0:2a:fa:84:5d:a1:1f:d1:26:29:a6:98:
         3f:04:bf:9b:6c:29:8f:9b:3e:44:f8:fb:a0:cc:82:0f:5d:b3:
         de:bd:21:f9:db:6d:9f:87:fb:24:83:21:6c:ef:81:b4:12:53:
         5f:d3:5b:81:32:2c:91:f3:f9:bb:e0:4d:8d:d4:58:22:3d:96:
         4c:6a:17:3c:b0:81:06:88:66:d3:fb:25:7d:1d:15:f6:34:2e:
         bd:43:91:1c:b9:e5:f3:f9:bb:3c:20:b9:d4:db:a7:74:f3:1b:
         8a:0e:6a:85:32:da:6c:24:72:65:b9:e7:a3:d3:ec:33:4e:3b:
         6d:c1:6c:05:cb:8e:d4:9f:c7:65:bd:c1:f1:00:d4:69:1c:bc:
         50:de:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 18:14:40 2024 by rpki-client on console-fra.rpki-client.org