Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
File:                     0ab2447c-9735-4548-ac30-fc578e8e36ba.cer (raw, json)
Hash identifier:          xLJgfkO0KIKjDVsv4s9o1TJnL1SRaL6mN2eblGqaipQ=
Subject key identifier:   50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483510406E2B22E48E6CEA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 13 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 13926
                          AS: 22781
                          AS: 54203
                          AS: 62651
                          AS: 63128
                          IP: 68.68.32.0/20
                          IP: 98.158.112.0/20
                          IP: 104.36.176.0/21
                          IP: 108.171.96.0/19
                          IP: 173.195.0.0/20
                          IP: 173.255.160.0/19
                          IP: 192.200.144.0/20
                          IP: 199.127.248.0/21
                          IP: 207.204.224.0/19
                          IP: 216.131.64.0/18
                          IP: 216.169.128.0/20
                          IP: 2604:c980::/32
                          IP: 2604:ea80::/32
                          IP: 2604:fc80::/32
                          IP: 2606:b300::/32
                          IP: 2607:fb50::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:04:06:e2:b2:2e:48:e6:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 13 19:06:39 2025 GMT
        Subject: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:96:07:95:c3:48:fa:0c:df:7b:47:2b:ac:
                    da:9b:75:6c:3b:50:9c:ee:8a:12:dd:99:0a:e6:95:
                    5f:e2:e9:b7:c3:66:56:6f:5b:15:6b:97:2b:14:bb:
                    9c:24:ef:04:a9:5f:ba:58:91:db:c7:8b:c8:02:3e:
                    56:31:89:49:a4:b3:08:84:bd:b1:45:d1:18:c2:98:
                    3c:2f:86:88:96:d8:d4:68:2f:b4:f2:4c:8a:c5:7d:
                    34:bd:88:30:28:3f:e2:f4:25:80:cb:54:a1:df:df:
                    43:b7:10:a5:23:1f:8d:8f:75:52:91:db:84:93:26:
                    d3:be:37:43:cb:8b:dc:bf:ab:7a:71:a3:01:05:1e:
                    0b:8c:fb:f1:6d:5b:62:26:db:e7:7c:7c:b1:ee:09:
                    3f:1a:0a:d3:66:e0:21:09:9f:16:9a:1e:2d:ca:cc:
                    47:b7:0c:fe:98:f1:f1:86:54:98:0c:31:61:7b:42:
                    58:8a:d5:50:ea:1f:1a:49:33:d5:47:dc:11:45:ce:
                    9d:09:20:b9:ea:e4:dd:bb:74:96:83:9a:a1:7c:05:
                    8b:05:7a:d0:2d:27:75:e7:5d:7e:fb:24:57:85:3b:
                    34:58:2b:94:d8:96:f4:0b:29:fd:f7:10:90:66:e2:
                    ac:e8:60:2b:85:e0:4f:b5:6a:e6:83:0f:d2:52:23:
                    de:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.32.0/20
                  98.158.112.0/20
                  104.36.176.0/21
                  108.171.96.0/19
                  173.195.0.0/20
                  173.255.160.0/19
                  192.200.144.0/20
                  199.127.248.0/21
                  207.204.224.0/19
                  216.131.64.0/18
                  216.169.128.0/20
                IPv6:
                  2604:c980::/32
                  2604:ea80::/32
                  2604:fc80::/32
                  2606:b300::/32
                  2607:fb50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13926
                  22781
                  54203
                  62651
                  63128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:75:45:40:ed:4b:f9:5c:8d:6f:61:64:6f:ef:26:50:9d:59:
         fd:56:77:67:ec:13:f1:2f:93:72:60:2e:c4:ec:9f:3a:a8:00:
         e7:06:3a:90:34:d2:33:bd:85:24:7b:d6:14:30:c9:88:d3:cb:
         71:b1:b7:f2:05:66:bb:f2:3f:36:f0:9e:51:d4:3a:6c:52:e5:
         3f:68:e1:36:3a:b4:fd:30:56:e4:a5:d0:86:51:65:e8:ac:76:
         14:5a:05:13:11:ee:1a:6a:eb:08:83:1b:e3:97:cf:50:4f:f1:
         be:e5:e7:8d:53:db:a7:b0:fc:bf:06:fb:bd:95:39:9e:05:d3:
         d7:43:2f:8b:65:71:ea:b2:93:2d:53:d6:bd:14:43:01:18:d2:
         39:49:96:d5:ea:34:e7:43:54:b9:ce:3e:56:ea:e4:fd:74:ed:
         74:9b:82:e8:39:e3:c0:55:ce:9e:b5:69:5f:ab:84:85:9d:ea:
         98:0a:ba:5c:f3:ce:e8:9b:5b:b1:0c:be:01:c5:fe:59:7b:c6:
         c3:fc:6c:ef:2d:7e:73:82:ae:3a:8b:b3:cf:01:b5:b0:db:2b:
         1e:64:37:1d:25:1f:b4:9b:a1:43:58:42:f4:a4:9d:e4:d3:e3:
         ec:03:80:2f:64:e7:98:7e:b1:f7:28:0a:5e:7e:f1:f1:80:c4:
         38:44:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:57:30 2024 by rpki-client on console-ams.rpki-client.org