Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587.cer
File:                     7e2cde89-a04e-4423-9844-bcbd0aa96587.cer (raw, json)
Hash identifier:          iKCEiSG11puhthpyzMJIXmve1E/cxZ/z1raJm8u8bmQ=
Subject key identifier:   DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844E727ABFE81999D7C06BA40C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Feb 2024 20:10:48 +0000
Certificate not after:    Wed 20 May 2026 19:10:48 +0000
Subordinate resources:    AS: 20432
                          IP: 50.20.208.0/20
                          IP: 72.46.0.0/20
                          IP: 206.83.156.0/22
                          IP: 207.231.0.0/19
                          IP: 2605:ad40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:27:ab:fe:81:99:9d:7c:06:ba:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 15 20:10:48 2024 GMT
            Not After : May 20 19:10:48 2026 GMT
        Subject: CN=7e2cde89-a04e-4423-9844-bcbd0aa96587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:a0:12:f2:15:de:fa:e7:f6:69:06:cc:34:
                    92:e2:c2:e7:0d:7d:b6:6b:2a:0b:55:94:26:77:d9:
                    55:78:48:59:20:d8:58:43:a8:5a:09:e8:96:4d:a0:
                    b7:3e:a0:3d:8f:94:16:76:7b:0e:c2:61:7f:08:10:
                    c9:77:10:d1:8c:c4:e1:1d:bc:83:d8:92:5b:8a:0c:
                    38:31:f4:ba:5b:21:b1:d9:96:af:66:cf:76:bd:d4:
                    61:af:7a:d1:bb:63:7a:1f:cd:4c:ce:df:2b:a7:3f:
                    f2:38:f7:08:7b:5f:66:60:e9:cb:05:57:8a:95:55:
                    db:9a:26:82:fe:9e:84:4d:f0:34:97:bc:0f:04:b1:
                    0d:9f:9f:33:37:66:66:2d:bb:20:2c:8c:98:fb:49:
                    8f:ba:d5:a5:51:d2:56:d5:28:81:d1:be:d9:1e:5a:
                    9d:eb:a9:00:d5:39:9d:81:0f:6c:21:23:78:4d:8a:
                    0c:f3:95:d8:d7:04:91:67:b6:e9:98:89:65:ac:e1:
                    e2:b9:31:1c:43:53:3c:3f:1d:01:b0:7b:c7:5c:c0:
                    b4:5a:7c:36:6a:8e:da:7c:d1:8a:18:69:8d:93:6a:
                    df:50:55:02:da:5d:8e:ea:17:28:e5:ec:d9:2b:45:
                    25:3a:64:4d:88:be:6f:44:46:05:b8:04:02:21:fb:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.20.208.0/20
                  72.46.0.0/20
                  206.83.156.0/22
                  207.231.0.0/19
                IPv6:
                  2605:ad40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20432

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:35:ae:c0:4d:8e:08:1d:84:5e:cc:ab:f2:b1:7d:b8:9a:
         03:dc:d2:ca:ac:1a:27:22:3e:a5:27:4a:b4:c2:65:92:ba:d9:
         40:98:94:84:82:67:d2:45:11:a7:6c:78:b3:4b:7c:fe:f6:fd:
         e7:b0:f2:2c:12:3a:a7:6d:e8:20:89:d1:33:b4:ec:a7:73:20:
         a9:81:c0:cb:f9:fd:61:c0:0d:05:b0:b3:a0:cd:f6:6e:51:14:
         88:d4:63:5f:ce:f2:78:95:b2:1e:ce:2a:07:72:36:c1:0b:8f:
         d5:05:fa:b2:ac:2a:b6:60:f4:43:e0:dd:68:96:85:24:48:3b:
         6b:3a:60:fd:e3:56:a7:a8:9d:d4:7b:d0:dc:4b:46:12:bf:d5:
         36:8a:20:80:4e:0d:44:15:db:99:9e:e2:fc:6a:3c:3d:cf:f8:
         61:47:dc:01:13:31:e4:6b:9d:4b:c5:b8:8b:3c:d4:a5:22:84:
         a8:e1:32:1e:0d:8a:a8:16:6e:cd:d9:63:b3:86:fa:ed:dd:2a:
         ef:97:42:89:ed:55:93:e6:2b:2a:3f:e5:a8:dc:ce:1d:6e:ad:
         7a:7f:a4:36:7b:9e:8d:6b:2d:1e:5e:44:5e:a9:05:4c:f0:63:
         0c:66:b2:5c:12:c2:6d:3f:e2:fb:67:0b:f0:69:3d:31:e1:cf:
         b2:77:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:57 2024 by rpki-client on console-fra.rpki-client.org