Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
File:                     69f7b69a-b519-4b2d-a7be-03aa505b2576.cer (raw, json)
Hash identifier:          mugzvLXohGzR7UgmONXq6FNIn209NFkInGNONpzQ0n4=
Subject key identifier:   F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845B9113C90E774EE2860A3ADC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 May 2024 00:45:20 +0000
Certificate not after:    Tue 04 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 13414
                          AS: 35995
                          AS: 54888
                          AS: 63179
                          IP: 64.63.0.0/18
                          IP: 69.12.56.0/21
                          IP: 69.195.160.0/19
                          IP: 104.244.40.0/21
                          IP: 192.48.236.0/23
                          IP: 192.133.76.0/22
                          IP: 199.16.156.0/22
                          IP: 199.59.148.0/22
                          IP: 199.96.56.0/21
                          IP: 209.237.192.0/19
                          IP: 2606:1f80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b9:11:3c:90:e7:74:ee:28:60:a3:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May  1 00:45:20 2024 GMT
            Not After : Aug  4 00:45:20 2026 GMT
        Subject: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:d6:cc:40:f4:3b:00:bc:b5:0b:b7:6b:e5:
                    e0:93:06:9a:84:ff:77:48:b1:47:e9:e9:8f:b5:41:
                    4c:c3:60:8f:17:c2:4c:12:df:06:d8:ef:dc:6d:88:
                    51:c5:d9:f9:d2:9f:e7:10:52:83:b3:2f:a1:b6:1e:
                    b6:45:aa:3f:ed:1f:83:9e:8f:04:de:b9:0c:47:fb:
                    e0:70:f9:7d:64:7e:14:5a:42:5c:41:77:59:c4:16:
                    af:da:34:0c:9f:bd:9d:d9:fa:bf:c2:23:d0:10:38:
                    fc:5e:a8:fe:93:f9:7b:5c:6e:ee:4a:76:d2:73:9a:
                    0b:cc:a8:53:82:e7:b1:ce:65:72:77:0f:73:a4:d4:
                    88:91:1d:c1:f8:5f:e2:3b:da:16:53:32:3f:ed:28:
                    70:97:3e:46:1c:02:57:a9:3f:48:46:45:66:29:85:
                    ab:d5:50:64:3a:d6:51:be:8d:6d:ac:32:08:08:54:
                    b6:05:16:1e:10:80:9f:46:f7:84:74:55:d7:ce:66:
                    5f:82:6f:8c:20:a6:22:ac:06:ad:cc:ab:4e:70:35:
                    a4:3a:77:eb:1f:ff:a8:43:9e:b7:69:6a:41:ed:d3:
                    16:f9:13:00:7c:af:cd:7e:59:21:f4:2a:66:f0:b6:
                    de:aa:6b:f8:5b:71:92:cd:56:59:30:fd:89:8c:94:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.0.0/18
                  69.12.56.0/21
                  69.195.160.0/19
                  104.244.40.0/21
                  192.48.236.0/23
                  192.133.76.0/22
                  199.16.156.0/22
                  199.59.148.0/22
                  199.96.56.0/21
                  209.237.192.0/19
                IPv6:
                  2606:1f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13414
                  35995
                  54888
                  63179

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:34:cd:c1:03:21:a5:84:b6:86:74:c9:6a:8f:99:0c:cc:
         7a:4d:0d:65:2e:6c:a0:27:36:e0:9d:4d:64:a2:ea:68:ed:4c:
         43:1e:18:36:3d:6f:06:eb:43:a3:08:72:af:69:1a:31:e4:16:
         45:03:7a:c9:0c:d9:e4:22:7a:c7:fd:0e:87:7d:d7:17:69:59:
         24:22:01:82:72:b7:40:60:d1:5d:bb:06:46:89:8e:71:04:c1:
         f3:49:b6:89:8c:68:e9:44:88:39:e0:9e:97:ca:0c:42:4b:6f:
         9c:a1:20:ad:d6:56:e1:e2:3f:65:d6:45:99:1a:0b:bb:d8:45:
         d2:a5:0b:71:27:8d:c1:c4:04:fb:b7:df:53:77:2c:4a:22:44:
         37:67:fa:15:4c:a7:67:aa:70:27:c3:18:ba:f6:e5:f5:f1:05:
         28:59:0c:6d:58:16:79:83:d9:c3:87:c8:a4:9d:b8:05:d3:cc:
         9f:a5:39:1a:f3:68:ee:67:50:cf:9b:2d:a5:74:a4:2f:5f:d5:
         f8:44:74:ba:1d:3e:49:7f:cf:c1:68:bc:bf:4e:c8:b2:b4:17:
         6d:b2:4e:c3:aa:94:d8:83:91:47:4d:f4:a2:bd:7b:65:c1:23:
         a8:34:99:11:ed:08:55:37:70:b0:d3:d3:eb:41:cb:4a:ac:16:
         22:5b:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:38 2024 by rpki-client on console-ams.rpki-client.org