Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5.cer
File:                     4e8d73da-047f-4a47-9523-47bcb685cad5.cer (raw, json)
Hash identifier:          KD3kN6HuuQ8ZGBu4OJB0fDBdauymZkXLpetXkiflvpo=
Subject key identifier:   EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F432858456D3F31F68711C53251478640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:56:31 +0000
Certificate not after:    Tue 07 Jul 2026 20:56:31 +0000
Subordinate resources:    AS: 11949
                          IP: 96.47.96.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:3f:31:f6:87:11:c5:32:51:47:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  3 20:56:31 2024 GMT
            Not After : Jul  7 20:56:31 2026 GMT
        Subject: CN=4e8d73da-047f-4a47-9523-47bcb685cad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a5:f8:0c:71:15:59:49:00:db:4b:97:dc:db:
                    c5:a7:2d:bf:e9:c4:6d:af:5a:9a:1d:d4:d4:a2:67:
                    57:9c:4d:9a:6e:f4:d5:15:b8:58:9c:72:e7:39:36:
                    a4:43:5a:3c:da:50:5e:a5:d7:8f:0c:c0:12:ef:61:
                    f3:c6:08:42:ce:10:2e:90:59:64:23:39:9a:bc:5b:
                    eb:6e:7e:26:6b:19:f6:3e:28:df:f1:84:93:cb:d1:
                    8a:4a:9a:ad:5e:37:27:4b:91:d7:3f:4d:de:6f:66:
                    11:2a:e4:89:fe:a7:bb:27:22:0c:b8:2c:0d:4f:01:
                    e6:73:7f:9e:15:f1:28:53:61:f4:3a:dc:73:d5:04:
                    71:3f:49:34:52:c3:1f:73:9d:a2:ab:34:4d:54:37:
                    a7:5b:c6:ac:20:50:e7:42:0e:f7:e8:cc:8a:4a:6f:
                    87:ec:04:74:68:5b:ca:80:bd:8a:1f:8e:a6:87:07:
                    82:fd:e6:7b:b2:6f:46:2d:5c:60:8d:83:47:8b:91:
                    11:09:3c:01:46:a1:df:4a:8b:51:f8:e1:c8:09:ef:
                    24:5d:04:06:47:82:3f:63:d2:50:d8:87:2b:90:73:
                    f7:a4:99:10:09:55:74:b8:43:f3:01:54:f6:2f:e7:
                    e0:9b:e5:c8:13:52:e6:d6:38:68:58:cc:80:bc:33:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:04:3F:22:60:B3:3D:1C:12:51:C7:BF:B7:94:5E:41:6C:31:A6:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e8d73da-047f-4a47-9523-47bcb685cad5/4e8d73da-047f-4a47-9523-47bcb685cad5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.96.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11949

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:17:5a:85:a5:07:96:22:ae:03:a6:20:c1:f8:74:a3:39:bf:
         93:74:22:bf:69:2c:1f:7b:5d:82:26:ad:b2:e7:0a:36:10:fb:
         64:dd:cb:e1:7a:80:2c:c6:51:1f:cd:56:e8:7f:2f:bb:f5:1e:
         ef:7b:3e:e8:3c:a0:43:41:a6:e6:2b:18:e7:50:e3:d2:84:25:
         af:4b:c3:75:29:0f:57:52:bb:8b:ee:8b:16:49:4f:89:4b:f9:
         ca:85:35:8b:23:76:50:2a:6c:d2:ad:41:e7:c9:d1:94:75:a4:
         d1:62:5c:7b:1c:60:1a:24:9e:fa:89:22:a5:c8:7c:6e:15:87:
         d9:34:f5:0c:2c:a9:79:0c:67:83:4f:75:19:20:50:57:ab:14:
         08:dd:8a:53:4d:36:6c:97:33:c2:e3:95:16:f5:68:76:eb:7e:
         ce:7c:fe:f9:87:bd:27:92:fd:da:8f:c4:c0:1c:be:03:48:af:
         9b:45:1c:29:85:27:7b:d4:5c:b9:17:2a:86:88:f2:e1:75:2a:
         19:c0:23:15:28:c8:d1:8c:00:02:07:b2:6f:3d:32:cb:96:a9:
         dd:e4:13:ae:cd:21:37:24:13:85:76:e0:8b:ce:62:42:eb:02:
         f7:14:74:51:1d:98:3f:08:5f:32:42:be:4b:72:3f:81:92:3b:
         48:2d:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:16:53 2024 by rpki-client on console-ams.rpki-client.org