Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9781ddce-8aca-4922-81fd-ceb103980136.cer
File:                     9781ddce-8aca-4922-81fd-ceb103980136.cer (raw, json)
Hash identifier:          il20EU7Oy+6N0L2/qLt1bLHMocvRUgIOMM8Yza+OnRA=
Subject key identifier:   CA:D1:7D:0A:E4:BE:24:E2:EA:DC:32:53:2C:FD:10:AB:BE:98:94:71
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844E4384D699058412DE80A2100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9781ddce-8aca-4922-81fd-ceb103980136/9781ddce-8aca-4922-81fd-ceb103980136.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9781ddce-8aca-4922-81fd-ceb103980136/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Feb 2024 18:56:53 +0000
Certificate not after:    Tue 19 May 2026 17:56:53 +0000
Subordinate resources:    AS: 16604
                          IP: 64.111.41.0/24
                          IP: 66.241.160.0/19
                          IP: 67.221.212.0/22
                          IP: 67.222.192.0/20
                          IP: 69.27.211.0/24
                          IP: 199.21.94.0/23
                          IP: 199.27.124.0/22
                          IP: 207.174.238.0/23
                          IP: 209.74.224.0/20
                          IP: 209.152.128.0/23
                          IP: 209.222.176.0/20
                          IP: 216.145.151.0/24
                          IP: 216.145.154.0/24
                          IP: 216.145.158.0/23
                          IP: 2606:1900::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e4:38:4d:69:90:58:41:2d:e8:0a:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 14 18:56:53 2024 GMT
            Not After : May 19 17:56:53 2026 GMT
        Subject: CN=9781ddce-8aca-4922-81fd-ceb103980136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:a9:9b:60:bf:c0:4d:31:3f:28:75:94:69:
                    18:c0:ea:46:9e:a0:54:df:44:80:03:cd:f7:ca:22:
                    de:b3:00:5e:08:21:33:c3:ee:a7:cf:73:4e:fe:0d:
                    30:ce:e6:07:4e:90:31:4e:eb:37:65:29:50:97:1a:
                    67:91:52:ab:ff:5b:30:47:63:f5:c7:83:46:e7:33:
                    2c:bd:1f:96:cf:82:ad:d1:25:02:a4:f0:88:66:ee:
                    ae:a2:87:56:66:2c:a9:48:a8:5d:82:40:91:b4:d5:
                    24:c0:b6:eb:a5:f0:58:99:5b:3d:9b:93:56:14:72:
                    aa:4a:9b:0e:65:30:99:7e:6a:e5:6a:be:57:df:53:
                    5d:5b:04:7b:22:34:1d:45:7f:63:9a:46:b7:da:b4:
                    1e:eb:bc:cc:de:a8:a7:19:81:1b:b1:05:c6:bb:de:
                    d9:67:1e:16:69:cd:bf:23:57:33:27:f9:c2:b0:90:
                    95:ad:6b:27:b7:86:bc:53:31:be:f9:3c:ed:42:b2:
                    1a:90:ac:28:0d:6c:51:1a:45:a4:1f:a9:96:3e:55:
                    55:94:71:bb:68:90:ee:28:0d:83:39:93:57:b9:45:
                    4a:af:5b:ef:9c:fc:47:10:46:52:29:ce:dc:35:bc:
                    54:c8:b0:09:fa:5e:cf:ce:d7:8e:aa:c1:ea:e9:d5:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:7D:0A:E4:BE:24:E2:EA:DC:32:53:2C:FD:10:AB:BE:98:94:71
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9781ddce-8aca-4922-81fd-ceb103980136/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9781ddce-8aca-4922-81fd-ceb103980136/9781ddce-8aca-4922-81fd-ceb103980136.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.41.0/24
                  66.241.160.0/19
                  67.221.212.0/22
                  67.222.192.0/20
                  69.27.211.0/24
                  199.21.94.0/23
                  199.27.124.0/22
                  207.174.238.0/23
                  209.74.224.0/20
                  209.152.128.0/23
                  209.222.176.0/20
                  216.145.151.0/24
                  216.145.154.0/24
                  216.145.158.0/23
                IPv6:
                  2606:1900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16604

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:66:f2:51:d0:75:21:fc:8b:10:7f:19:e3:1b:c8:b1:bc:1f:
         10:37:d3:56:44:dd:fe:74:42:7e:e1:29:d4:7c:6d:4c:51:07:
         26:a9:d2:bd:85:61:c4:89:00:c8:46:b5:bd:4f:af:4d:39:0e:
         b0:ce:01:51:c8:1e:3b:51:2c:19:49:98:8f:61:90:a3:75:cc:
         96:cd:36:27:7e:6e:d9:08:2f:4b:df:38:8f:b0:e9:5a:96:50:
         e7:27:0b:f2:f3:7d:9e:ba:be:f8:c0:70:9f:5d:8f:20:0d:30:
         12:a7:b4:a0:57:ff:c0:61:1a:b4:24:87:cd:2e:e1:d9:33:9e:
         fe:d6:a3:6d:b6:d4:32:df:0d:54:34:1d:75:0f:8f:b9:8d:34:
         21:b0:e8:fb:bb:69:ba:68:eb:c3:8b:bc:7f:ab:e6:cc:35:d7:
         61:76:86:16:43:a5:c5:73:db:17:00:d6:d6:57:1a:5a:2b:6c:
         ba:9f:b2:e6:5c:9e:6c:ad:a2:2b:a8:29:2b:a5:4b:eb:05:aa:
         3b:83:b8:c9:0a:71:fc:4b:43:d4:e6:88:69:51:b7:60:81:ab:
         04:4c:b2:5f:ee:9f:51:33:d9:d5:58:92:5c:fd:02:55:ab:98:
         6e:da:4e:64:10:0b:8d:d7:8c:78:a9:60:5c:cb:35:b7:bb:5b:
         6c:a5:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 17:57:28 2024 by rpki-client on console-ams.rpki-client.org