Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/186c63a3-c8a5-4a2d-8d4b-36a630976c48.cer
File:                     186c63a3-c8a5-4a2d-8d4b-36a630976c48.cer (raw, json)
Hash identifier:          ICC0tSZXRCmyPxsN7T4nHiIS/UTLZMfEWgZ8B+yIOwE=
Subject key identifier:   30:3B:1A:24:72:6F:11:63:27:10:DB:89:1B:58:DC:35:69:81:4C:77
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285848CC7405D239CEF4F33D710200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/186c63a3-c8a5-4a2d-8d4b-36a630976c48/186c63a3-c8a5-4a2d-8d4b-36a630976c48.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/186c63a3-c8a5-4a2d-8d4b-36a630976c48/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 13 May 2027 00:45:33 +0000
Subordinate resources:    AS: 26294
                          IP: 23.174.64.0/24
                          IP: 2602:fe95::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:74:05:d2:39:ce:f4:f3:3d:71:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb  7 01:45:33 2025 GMT
            Not After : May 13 00:45:33 2027 GMT
        Subject: CN=186c63a3-c8a5-4a2d-8d4b-36a630976c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:41:7b:f0:a7:78:f7:db:43:b3:08:bf:67:
                    99:57:ba:ad:25:81:f5:35:9f:01:b0:72:82:a3:b9:
                    8d:c8:6c:95:7a:7a:c5:35:0b:8c:56:f0:2f:93:05:
                    06:ce:64:81:04:05:7f:be:c9:c3:35:c0:a1:42:f0:
                    5f:0f:a4:9e:09:5f:64:0f:e7:b1:19:18:74:41:f7:
                    81:d7:23:83:ee:26:ec:89:5f:92:b1:2d:79:8a:35:
                    3c:28:0e:95:a5:89:77:38:97:ed:0f:18:cd:7f:18:
                    0b:db:fd:9b:79:2b:c3:40:7e:1b:b5:83:d0:51:54:
                    09:53:d2:e1:71:fa:53:ed:77:f1:c5:ae:08:73:06:
                    2b:a3:5f:99:2d:f1:54:e9:58:49:07:68:5c:e2:5f:
                    45:8e:c0:b3:1d:64:ed:1a:38:f4:05:6f:db:5a:6d:
                    c5:3c:99:a3:f5:97:3d:e0:7c:54:15:10:22:c5:e1:
                    f3:56:04:f0:d2:a0:4e:fd:16:c0:e4:3a:3e:14:ae:
                    b7:9b:59:68:80:da:10:c3:7d:20:1f:82:18:8e:e3:
                    f5:08:be:67:24:28:28:32:e9:4b:95:ec:41:39:be:
                    b1:e6:ac:77:a8:87:f9:0b:fa:6f:35:bf:f5:77:40:
                    ce:02:ed:86:19:82:a5:83:6c:ce:45:38:1f:52:8d:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3B:1A:24:72:6F:11:63:27:10:DB:89:1B:58:DC:35:69:81:4C:77
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/186c63a3-c8a5-4a2d-8d4b-36a630976c48/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/186c63a3-c8a5-4a2d-8d4b-36a630976c48/186c63a3-c8a5-4a2d-8d4b-36a630976c48.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.64.0/24
                IPv6:
                  2602:fe95::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26294

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:e7:64:87:ea:37:b9:ec:bc:39:fb:b7:5c:9e:4a:d8:43:
         e9:2f:75:36:bb:ca:c2:f4:12:e9:83:14:35:12:12:6b:8a:d0:
         ea:49:c8:96:70:1c:38:fe:30:7a:a6:34:38:a4:82:31:62:6a:
         5f:fe:7d:c0:0b:b5:3a:96:5c:e4:bb:6e:6b:92:4b:96:18:18:
         cb:42:d6:01:b6:e2:ed:17:f2:17:08:c1:00:ea:46:05:7e:94:
         c9:cc:95:60:99:59:8e:3c:fe:1a:3e:70:e0:28:e7:a5:6f:18:
         dc:9b:72:18:d7:0b:dd:d9:c5:40:32:38:3e:3e:82:73:7f:8c:
         67:be:59:b3:f5:e8:17:48:29:d5:3b:87:b3:42:5d:d6:16:5b:
         79:42:6c:7b:e8:0e:d3:2e:76:11:af:d3:c9:4a:48:d6:ff:55:
         1c:5b:95:c7:bf:9e:ec:6a:f5:44:d7:5b:bf:35:27:02:79:c5:
         50:c4:a4:e5:7a:36:cc:fb:86:3f:6c:21:b1:2e:f6:32:98:38:
         5b:9c:eb:4c:41:e3:46:1c:13:cb:0a:c0:55:97:aa:c7:56:37:
         8d:8d:6f:b4:79:b6:fb:23:74:60:1f:e2:83:92:6f:37:b4:7a:
         01:a3:17:75:95:3f:89:58:06:83:9e:0f:c7:ad:4b:12:84:53:
         e4:12:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:28 2025 by rpki-client