Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d.cer
File:                     05bbafe6-426c-416f-9869-5b34e8f07c3d.cer (raw, json)
Hash identifier:          ZrfRslb37TfcHvk1z7A/5JZIWQ/G5Vh2gjTr2bSOuw8=
Subject key identifier:   CE:46:8D:B8:CC:66:E0:D7:37:15:C0:C3:91:6D:7F:29:D7:82:B3:B2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858477A896A7F30D3817902799100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/05bbafe6-426c-416f-9869-5b34e8f07c3d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 12 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 31888
                          AS: 54142
                          IP: 104.232.4.0/22
                          IP: 199.30.72.0/21
                          IP: 199.180.104.0/21
                          IP: 2602:fcda::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:89:6a:7f:30:d3:81:79:02:79:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct  9 00:45:26 2024 GMT
            Not After : Jan 12 01:45:26 2027 GMT
        Subject: CN=05bbafe6-426c-416f-9869-5b34e8f07c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9a:b6:1b:af:d6:a8:f6:49:d7:62:01:a4:4d:
                    c1:41:93:86:b2:47:ca:c7:52:ab:fe:10:78:f1:58:
                    12:c2:d7:b5:0f:fa:e3:5f:27:59:56:e3:25:55:07:
                    26:39:fc:3f:ad:10:c6:ad:a7:1b:23:13:62:b3:02:
                    0e:83:c8:e4:07:d9:45:d4:8d:5b:16:1b:65:73:21:
                    35:67:7b:67:e0:19:55:b0:3f:14:9f:49:67:3a:55:
                    58:46:45:cc:e1:3d:83:79:2b:94:14:56:ae:3e:01:
                    b6:3f:55:f9:bd:8b:38:d1:d6:a1:19:6d:63:da:6c:
                    cc:24:b9:10:ea:1b:e5:06:f6:8e:af:20:28:ce:fe:
                    ce:be:96:2c:d9:da:dc:91:d3:9e:94:32:14:57:a6:
                    65:89:e9:d1:fe:69:d1:99:68:3c:0e:27:54:2a:3a:
                    a1:f5:9b:12:c5:74:6e:81:a6:90:e9:1c:86:d1:98:
                    7e:43:5e:b2:0a:04:5e:df:bd:ca:f5:23:6b:53:f4:
                    d4:79:10:2f:d0:d1:c7:12:56:f8:00:0a:53:b4:83:
                    21:d8:51:44:7b:5a:0f:09:c8:2b:a2:c3:e5:50:4f:
                    75:5d:7c:36:24:02:ec:9f:50:88:e4:6c:d3:2f:3c:
                    95:cf:e2:4a:1a:28:bd:b3:cd:ed:2a:2f:f0:86:0f:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:8D:B8:CC:66:E0:D7:37:15:C0:C3:91:6D:7F:29:D7:82:B3:B2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05bbafe6-426c-416f-9869-5b34e8f07c3d/05bbafe6-426c-416f-9869-5b34e8f07c3d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.4.0/22
                  199.30.72.0/21
                  199.180.104.0/21
                IPv6:
                  2602:fcda::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31888
                  54142

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:46:1e:ab:66:47:78:c2:b3:8d:11:fb:99:29:f9:d3:ff:
         09:4d:32:28:52:d6:a2:ab:25:2b:7b:83:90:47:fd:9e:40:29:
         99:dd:6f:78:4d:81:f2:b3:d0:c5:ca:3d:8d:69:b0:00:bf:bd:
         db:d3:55:a3:ab:30:d2:a5:c9:ab:b2:98:4c:63:cb:bd:59:18:
         64:67:35:d0:54:0c:da:f7:9c:47:b3:f8:25:2d:8a:51:05:8b:
         29:80:54:64:ad:d8:31:31:f8:4a:0d:30:e9:6d:dd:8e:48:38:
         5d:21:2c:de:03:44:29:95:49:a7:8f:ce:ae:18:fd:e5:f8:da:
         6b:cd:6d:13:17:ef:a1:8d:e4:2f:82:8a:bf:4c:99:6c:36:9d:
         82:07:24:c1:a4:f3:62:4d:37:2a:73:ef:3a:4a:0e:40:71:3c:
         32:d8:aa:a1:1b:95:d5:4f:24:24:32:c7:4c:67:66:3a:14:80:
         b9:91:8e:7f:fb:80:86:ce:4a:38:8e:30:f6:59:ff:44:22:3b:
         e2:e6:ef:11:f9:87:4b:ab:33:dc:57:2b:cf:44:3a:4f:70:1a:
         e6:30:e1:0f:f6:a6:68:79:7b:85:25:63:a9:79:13:8a:9a:a2:
         d9:e3:5b:ba:d6:a8:2c:c3:9a:13:74:17:77:53:eb:fb:0d:c6:
         e4:22:27:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:18 2024 by rpki-client on console-ams.rpki-client.org