Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911.cer
File:                     37979819-9f1b-4b22-b17f-691002d8c911.cer (raw, json)
Hash identifier:          AXo7DMaER8Dn1RemA+93ASSEqS+xxfgWbFLGcB9xZd4=
Subject key identifier:   7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845F3300154B78CD5AB6A731780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 May 2024 20:24:14 +0000
Certificate not after:    Wed 27 May 2026 23:13:20 +0000
Subordinate resources:    AS: 12019
                          AS: 12089
                          AS: 14832
                          AS: 27166
                          AS: 32505
                          IP: 69.63.160.0/20
                          IP: 69.194.176.0/20
                          IP: 139.180.32.0/19
                          IP: 173.0.32.0/20
                          IP: 199.33.80.0/24
                          IP: 199.83.224.0/21
                          IP: 208.77.168.0/22
                          IP: 208.80.160.0/21
                          IP: 216.45.0.0/19
                          IP: 2604:8e80::/32
                          IP: 2606:8380::/32
                          IP: 2606:b980::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f3:30:01:54:b7:8c:d5:ab:6a:73:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: May 21 20:24:14 2024 GMT
            Not After : May 27 23:13:20 2026 GMT
        Subject: CN=37979819-9f1b-4b22-b17f-691002d8c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:73:a4:f1:45:ec:dc:f2:a7:2d:f6:92:9d:
                    04:d0:3b:2c:fd:3c:7c:e9:f7:f2:6b:9e:cc:cf:3d:
                    d4:3d:3c:5f:b6:83:25:83:84:f4:b0:2f:93:29:e0:
                    0a:c8:e6:0d:ae:d2:e0:26:ee:d7:bb:d4:bc:62:7f:
                    89:a5:e4:c5:4b:c9:77:cf:58:87:79:8a:61:4f:de:
                    de:9b:51:2d:44:97:bf:5b:ff:1b:16:d3:6d:5a:58:
                    cd:03:e5:27:3c:04:4b:2e:4a:ae:92:68:19:33:d3:
                    d7:79:48:44:c0:35:d7:13:9c:34:76:3b:3c:4e:ad:
                    71:ad:0f:71:dc:a1:68:2f:f4:00:01:6b:63:d1:1d:
                    35:8d:ba:6e:01:4e:db:d5:1a:51:9a:94:c8:6f:ad:
                    b9:07:4c:32:68:7a:99:7a:f8:4f:78:bd:2a:2c:2f:
                    c2:11:10:8e:d7:c4:72:6c:4f:0b:74:51:aa:a5:e2:
                    50:b4:de:86:08:07:9a:ea:0d:4a:8b:6f:79:a4:15:
                    dc:00:1e:40:71:8f:21:bc:18:b9:e1:73:67:35:d7:
                    9c:30:6a:17:1f:df:0e:b5:b4:ff:ce:f0:74:85:d3:
                    f8:8d:3c:53:e4:97:72:7c:88:0d:6e:45:44:47:b1:
                    0c:d7:52:16:81:97:6d:d6:96:6d:cd:6c:37:4f:e5:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:54:DD:2F:C3:04:17:D1:C0:F5:DF:64:44:03:4E:89:50:8E:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37979819-9f1b-4b22-b17f-691002d8c911/37979819-9f1b-4b22-b17f-691002d8c911.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.63.160.0/20
                  69.194.176.0/20
                  139.180.32.0/19
                  173.0.32.0/20
                  199.33.80.0/24
                  199.83.224.0/21
                  208.77.168.0/22
                  208.80.160.0/21
                  216.45.0.0/19
                IPv6:
                  2604:8e80::/32
                  2606:8380::/32
                  2606:b980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12019
                  12089
                  14832
                  27166
                  32505

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:22:47:ea:da:81:11:28:b7:e7:fb:4c:7a:f2:7c:36:41:fd:
         6d:e1:0c:a4:e7:f0:6a:d3:2f:26:6d:a7:00:df:fa:54:6d:af:
         fd:da:89:6b:6f:05:48:fc:24:fd:47:72:3d:69:d4:55:05:4c:
         b0:da:0d:86:9f:11:e4:36:99:8f:02:e5:4a:3d:49:4e:b1:48:
         de:95:72:7f:b3:cb:fb:69:98:69:33:aa:29:29:53:f2:fd:2c:
         e6:72:56:c4:4d:5e:6c:2d:25:73:f6:e2:49:42:8c:12:4e:6d:
         a7:9b:a5:9d:27:96:09:b0:f9:2c:58:bf:1a:1a:bd:be:39:37:
         fd:9b:8a:84:6e:90:03:09:a1:27:be:a5:17:be:2b:18:1d:6c:
         d6:13:86:fe:9e:5b:46:80:8d:7c:7a:47:0c:0d:12:da:9c:1d:
         dd:ae:85:cb:bb:2c:19:36:49:f8:95:cb:4c:29:b1:98:7e:1c:
         5f:3c:9e:12:ad:ec:40:74:ee:e6:bd:52:ab:90:67:53:da:a9:
         b5:f4:69:a9:d3:6a:0f:14:46:41:3e:2c:17:70:b5:65:c0:7d:
         f5:30:8b:c2:c2:2e:16:47:10:17:aa:eb:42:3b:22:0f:92:89:
         d7:87:76:57:d5:7e:76:8a:f4:d0:12:fa:b3:3b:58:0e:f9:71:
         de:a1:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:10:12 2024 by rpki-client on console-ams.rpki-client.org