Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
File:                     4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer (raw, json)
Hash identifier:          rGRq+FdPnx+w0yEsmGAYP3pSF41Gxn4X6NqLAPhLXJE=
Subject key identifier:   55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858475E9E93552DB722D32CCA155F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 29 Sep 2024 00:45:26 +0000
Certificate not after:    Sat 02 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 14633
                          IP: 74.121.8.0/21
                          IP: 172.85.64.0/21
                          IP: 199.83.120.0/21
                          IP: 2605:6380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:9e:93:55:2d:b7:22:d3:2c:ca:15:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 29 00:45:26 2024 GMT
            Not After : Jan  2 01:45:26 2027 GMT
        Subject: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:e7:f4:9b:0e:86:db:1b:4c:21:53:f5:0f:
                    39:4a:10:6f:19:05:c9:c7:57:85:6d:a0:43:28:12:
                    2e:7c:51:7a:c9:52:d5:a8:f1:5c:76:3a:a9:aa:55:
                    0f:1f:b6:eb:21:aa:57:5e:2f:c9:78:b0:cd:f0:08:
                    50:2a:b7:35:4d:eb:b7:d7:e5:25:84:49:3c:8d:a2:
                    a2:cf:e3:57:97:33:aa:84:7c:7a:7a:7e:72:e2:6f:
                    70:39:97:8b:c0:7c:4c:96:90:1d:7c:2f:94:18:e7:
                    ca:25:7b:b1:76:bb:c5:fe:7c:34:9b:1f:8b:b7:d8:
                    38:ff:eb:f6:80:30:0d:b5:0b:f8:1c:4d:10:89:58:
                    8c:8c:e1:5b:46:18:cd:55:37:b4:82:4c:ce:36:5e:
                    c0:47:33:be:bc:b9:84:63:c4:31:b0:4b:21:c8:f5:
                    c7:2b:5b:31:7c:f8:62:8f:0a:e2:46:67:5d:ec:86:
                    7f:b5:17:a8:1a:94:f0:b8:b2:63:23:2a:54:82:81:
                    f1:9e:7d:ed:3e:8f:8e:ce:50:29:cc:45:a6:34:58:
                    b5:0b:78:f8:fd:3c:04:5c:1c:5d:ea:0a:fe:8e:0c:
                    7e:d7:97:d2:a0:f3:3c:33:c3:9a:73:2a:17:d2:55:
                    2d:c4:25:f0:31:d3:1f:8c:42:22:65:c9:42:6a:15:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.8.0/21
                  172.85.64.0/21
                  199.83.120.0/21
                IPv6:
                  2605:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14633

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:25:f7:6d:cc:6d:6b:5d:d1:db:4e:5a:9c:52:33:d7:a3:
         e5:a1:e1:ad:8a:8f:57:f9:93:4d:75:22:27:bd:a0:54:35:2d:
         63:73:18:be:79:1c:01:c9:4d:d2:29:73:a4:fe:bd:d5:a0:5d:
         ef:ed:ab:63:5d:a6:c2:b5:2e:de:1f:10:00:c4:d2:c8:53:94:
         a8:83:eb:89:1a:9d:c4:24:a4:db:e9:0d:3a:e1:e9:ee:fb:af:
         c7:78:ff:1b:ac:ac:86:47:e2:73:8c:19:c1:bd:63:f7:b4:a1:
         85:1b:ef:64:6b:b2:9d:06:43:19:fc:31:d2:04:1e:90:a7:1a:
         fe:e9:68:c9:82:31:66:1c:fd:e5:c4:b2:0a:66:a0:ca:50:17:
         57:31:d1:b7:7f:78:5f:4f:93:c8:7a:72:27:f0:0b:46:a1:d2:
         9c:58:35:85:db:ba:49:bc:7e:25:b7:80:c1:66:05:e5:ff:d7:
         8f:f1:de:c3:7e:6d:68:fe:32:d0:14:36:9a:b7:a5:8b:ca:fc:
         0c:fa:d5:7a:db:a0:23:ac:27:c6:7f:50:19:4f:4d:58:17:c3:
         f3:38:4c:63:c4:a3:53:d1:c5:74:25:87:16:30:69:81:a7:ee:
         34:d3:35:25:41:fe:d0:74:f6:08:c7:8b:f9:ae:51:02:d2:56:
         a8:ca:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:28 2024 by rpki-client on console-fra.rpki-client.org