Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer
File:                     5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.cer (raw, json)
Hash identifier:          IgUOBDDNXTZe70b+g/BD9IiylKSysEzveCf++SRn+Y0=
Subject key identifier:   96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48345DE69AD568AF7630600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 27 Apr 2025 19:06:39 +0000
Subordinate resources:    AS: 22413
                          IP: 69.173.192.0/18
                          IP: 192.96.23.0/24
                          IP: 192.124.126.0/24
                          IP: 199.66.96.0/22
                          IP: 199.68.224.0/21
                          IP: 2604:f140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:45:de:69:ad:56:8a:f7:63:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Apr 27 19:06:39 2025 GMT
        Subject: CN=5aba4b7a-de7b-4e84-b913-a1bedbe58f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:df:74:cd:56:51:1e:01:72:47:83:9f:df:
                    be:72:db:cd:54:56:f4:0d:d5:c2:9c:a0:84:d0:1e:
                    4d:df:43:f3:78:61:fe:83:5e:25:3a:64:1a:22:1f:
                    36:91:00:a3:57:94:dd:ae:37:5c:b6:3d:89:ee:77:
                    fb:ee:1d:2b:1a:64:7c:b9:e4:e1:c0:4c:11:99:36:
                    6c:01:77:25:62:55:5f:16:a9:56:17:b7:98:fd:fd:
                    fd:52:4f:30:c2:e5:df:37:df:a6:45:c4:ac:d3:9c:
                    0f:b2:9f:5b:b6:8a:14:da:61:51:ae:a8:d3:bc:3b:
                    65:e5:eb:df:b1:f5:36:2d:25:e5:ec:f8:61:91:cd:
                    25:16:90:e2:17:e4:bd:65:fa:35:d8:d7:b8:0d:13:
                    34:87:db:ea:3f:be:c0:ba:32:e0:2c:9c:f9:bb:5a:
                    b5:fe:0c:47:9f:89:3c:1d:6e:f4:5c:b8:59:ad:f6:
                    64:22:61:7a:14:75:cf:d4:fe:e3:d9:c3:f1:d7:c7:
                    25:ef:ff:94:fa:19:de:a6:e1:fc:d7:56:55:e9:76:
                    9b:0a:36:48:9c:76:8e:aa:cd:92:25:8a:32:95:d3:
                    56:a4:19:c3:10:6c:99:41:21:53:7f:50:46:29:e5:
                    40:de:db:0e:70:e7:8a:70:fc:c2:28:df:1e:6f:3c:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:64:3A:B0:1D:88:A5:4E:80:EF:54:9E:33:2E:CF:5B:A3:59:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a/5aba4b7a-de7b-4e84-b913-a1bedbe58f9a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.173.192.0/18
                  192.96.23.0/24
                  192.124.126.0/24
                  199.66.96.0/22
                  199.68.224.0/21
                IPv6:
                  2604:f140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22413

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:43:93:22:28:77:06:ec:d1:fe:91:2c:cb:ec:f0:10:12:
         89:37:fb:b3:ba:63:d6:c3:95:86:c5:1a:3a:35:ca:6b:99:9e:
         81:8b:11:3a:6b:40:ca:16:d8:70:41:e3:92:4a:74:20:c5:f6:
         49:52:6e:d9:33:62:bb:00:c0:46:6e:ef:6c:a6:4e:ac:eb:3f:
         22:26:a8:81:e5:8d:2e:91:48:5f:ff:27:91:a9:90:43:3b:ec:
         d7:cc:76:93:0d:31:9a:20:bc:af:49:3d:ba:2b:97:aa:a8:8e:
         36:c7:98:2e:39:bc:09:a3:d1:08:2f:45:e0:49:4d:11:2a:9b:
         fb:30:a7:0e:59:5d:2c:ff:cc:6c:00:22:68:10:4b:20:0f:50:
         48:84:ac:06:8e:fe:16:60:35:32:53:f4:27:bf:28:a4:ca:da:
         a5:1b:bc:ca:df:79:7d:1a:b8:f2:20:45:d9:cd:55:cb:57:a9:
         00:ba:b3:ac:47:0f:73:1d:a2:85:ab:8c:47:19:59:6d:be:63:
         43:86:e5:dd:44:c2:6e:30:22:62:9d:74:68:3c:dc:05:3b:14:
         0e:02:21:1d:9d:e2:7c:ac:2e:d4:ca:73:b1:4a:41:cd:98:85:
         08:0f:92:10:1a:fd:61:70:e5:de:e0:2f:aa:26:72:7c:74:3c:
         1d:0d:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:03:34 2024 by rpki-client on console-ams.rpki-client.org