Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
File:                     7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer (raw, json)
Hash identifier:          dD1Ev4QvMKrawAsFyU5FRgc3b6FmOQaKfQTEhbg/WuQ=
Subject key identifier:   29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845408BACB67D34720042548280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:39:14 +0000
Certificate not after:    Sun 07 Jun 2026 18:25:07 +0000
Subordinate resources:    AS: 27317
                          IP: 23.174.40.0/24
                          IP: 2607:9f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:40:8b:ac:b6:7d:34:72:00:42:54:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 18 20:39:14 2024 GMT
            Not After : Jun  7 18:25:07 2026 GMT
        Subject: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cf:94:e0:56:54:67:48:bc:bf:68:42:0c:c3:
                    61:bc:3d:d9:f6:2c:84:06:5e:ea:fd:6c:ab:9e:90:
                    7a:7a:05:99:ee:88:9b:5a:14:72:46:63:c0:20:e8:
                    a3:de:6e:4d:8a:8c:e6:1c:37:00:ea:2a:b3:e0:a3:
                    39:25:75:27:46:1c:10:71:90:c3:3a:fc:48:28:56:
                    a5:b6:5d:a9:a7:e5:13:3a:b3:a5:48:44:b5:aa:b5:
                    fa:6c:cd:89:18:21:9c:97:04:e2:31:93:2e:e8:fd:
                    93:3a:58:c0:fd:27:a8:54:b4:d0:b6:65:c8:37:d4:
                    01:4d:de:d5:05:19:66:9b:96:13:69:3b:b0:30:06:
                    55:66:ad:1c:63:ec:db:a5:ee:5f:9b:56:f9:ee:7e:
                    48:18:70:f1:d8:6b:eb:bb:c3:a6:2e:b0:43:55:08:
                    12:0d:8f:af:ca:36:97:4f:9e:bf:1a:c5:60:bc:ee:
                    62:84:81:3e:bf:f0:28:0a:9a:c6:79:78:6f:4e:b0:
                    66:73:9a:d2:d1:ac:36:50:42:0a:aa:9e:69:9d:01:
                    e7:8e:5a:6b:8a:96:a4:c2:54:c7:15:29:f8:41:87:
                    e4:b0:f6:28:af:76:b5:d8:82:7f:49:56:35:25:9b:
                    ec:af:e4:14:f9:74:83:92:39:a7:d7:cd:96:07:61:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24
                IPv6:
                  2607:9f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27317

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:28:d5:c0:ba:83:e4:e1:72:77:af:88:ee:ef:9b:c3:5e:
         b5:67:c0:ee:62:e5:00:21:68:e2:49:c0:45:84:2d:ce:f0:18:
         08:a8:8a:6d:53:4a:2c:ab:56:c3:b7:77:4f:4c:5f:9f:e5:44:
         0f:50:df:df:99:72:ac:8d:36:f0:54:3a:ac:08:7f:3a:41:19:
         ae:4e:aa:50:94:89:a4:8f:87:1b:38:a0:19:f1:2d:da:14:12:
         76:95:72:a9:08:df:60:51:39:40:51:f3:f4:09:08:a3:51:8e:
         3b:c3:d6:ef:dc:81:9d:5b:3b:00:c4:4e:05:4a:01:c4:dc:fa:
         0e:ca:cf:70:b1:59:0d:d4:e2:f4:da:d7:fc:71:6a:7e:7d:29:
         c3:58:05:93:5b:a9:e3:61:f6:5e:16:a5:9d:9c:9e:43:f6:5f:
         ce:69:a4:f3:ed:bd:59:dd:e5:0e:df:0d:a2:77:fc:0d:59:2a:
         77:09:c9:75:d4:2a:41:94:ff:33:69:0f:8f:74:14:06:0f:22:
         f2:aa:08:c0:e1:5b:2f:7c:e7:4e:87:94:75:51:22:93:46:70:
         52:eb:14:36:e1:e4:5a:76:ec:cb:01:6f:1d:f1:23:71:3f:0f:
         5f:75:03:b9:83:6b:94:5c:5a:2b:0d:3e:2b:6c:7c:15:0b:3c:
         32:70:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:17:18 2024 by rpki-client on console-ams.rpki-client.org