Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
File:                     78369c58-f0b4-454b-ad08-df84f1fd007c.cer (raw, json)
Hash identifier:          zZNxjHAh5Kb+KoGtDkX034Mk/DK9thkfte8wcIpM5Cc=
Subject key identifier:   DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846CAA84A02B70404BCD2F66600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Aug 2024 00:45:22 +0000
Certificate not after:    Tue 10 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 22822
                          AS: 23059
                          AS: 23135
                          AS: 23164
                          AS: 25804
                          AS: 26506
                          AS: 27191
                          IP: 68.142.64.0/18
                          IP: 69.28.128.0/18
                          IP: 69.164.0.0/18
                          IP: 200.110.232.0/21
                          IP: 206.223.120.0/23
                          IP: 208.69.176.0/21
                          IP: 208.111.128.0/18
                          IP: 2001:504:18::/48
                          IP: 2001:504:1c::/48
                          IP: 2607:f4e8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ca:a8:4a:02:b7:04:04:bc:d2:f6:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug  7 00:45:22 2024 GMT
            Not After : Nov 10 01:45:22 2026 GMT
        Subject: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:5a:27:76:f1:23:a7:ec:23:ef:dc:8a:b6:
                    49:d3:11:49:07:99:23:cb:f6:e5:b1:18:f2:3e:3d:
                    69:03:8c:aa:56:38:19:96:94:bb:c1:18:da:e3:05:
                    84:52:b1:1c:e5:e3:81:3a:32:af:dc:5f:f1:c4:19:
                    9c:7f:3f:73:75:4b:6c:fe:e3:e6:a0:b3:1e:61:15:
                    68:f5:e5:d1:93:cb:87:cc:16:42:2e:c3:f3:67:97:
                    1b:50:4f:02:7c:64:6b:c0:5f:9d:3b:54:ca:d0:89:
                    be:88:9c:58:28:ff:a4:f6:6c:63:0e:73:3f:1a:11:
                    ae:0a:11:78:d6:39:54:20:1b:fe:3d:4a:15:3b:27:
                    9a:c0:07:2a:48:75:a6:ce:74:1e:33:04:7d:38:c6:
                    c6:70:bb:8e:0e:17:f3:81:f9:44:3b:2c:a7:41:5a:
                    73:f3:d5:6f:ed:51:86:63:df:2a:34:f0:d6:98:42:
                    96:bb:dd:31:ee:58:ed:0f:56:73:33:8e:e3:6f:8f:
                    26:0c:ad:b5:0a:91:dd:66:4b:ec:be:31:a1:d2:6a:
                    90:b6:43:6b:4d:6c:6f:3d:b8:0d:c5:da:d3:f3:85:
                    0e:69:b7:98:ce:28:44:a4:d0:e3:c4:eb:82:fa:5c:
                    78:8b:22:3f:5f:4a:d8:8a:1c:f0:5c:a1:51:68:ef:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.64.0/18
                  69.28.128.0/18
                  69.164.0.0/18
                  200.110.232.0/21
                  206.223.120.0/23
                  208.69.176.0/21
                  208.111.128.0/18
                IPv6:
                  2001:504:18::/48
                  2001:504:1c::/48
                  2607:f4e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22822
                  23059
                  23135
                  23164
                  25804
                  26506
                  27191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:a2:4d:c9:69:28:6c:54:ee:55:cf:cf:8a:47:0c:48:14:
         aa:dd:fb:4a:42:0f:1c:ed:64:4d:fc:e9:06:b7:6e:63:23:62:
         21:d8:a0:e9:ec:39:38:c9:f7:76:4f:0c:1f:02:47:01:9e:b5:
         15:34:4a:cf:95:24:9c:07:20:45:f6:b8:47:04:8a:7e:70:aa:
         f6:2b:78:6a:a1:8f:b0:8d:88:2f:3a:f1:bd:a5:d3:68:04:6f:
         17:cb:1d:87:6d:84:c8:df:5e:94:6d:cf:2a:a6:42:6a:95:e9:
         fc:26:0e:6d:8e:f9:0e:d8:cc:d4:c4:bd:85:4f:5c:a1:00:fc:
         cb:4b:1b:8e:7d:86:d5:b9:f6:32:15:c8:9f:01:33:10:78:81:
         6c:9d:90:c0:c3:bf:ad:7d:9c:d6:f0:9b:84:68:fd:b8:f6:5e:
         1d:f3:76:98:0a:c0:59:1a:2f:d9:e0:ef:25:64:89:c1:54:8a:
         c9:fe:c1:60:59:57:81:c6:69:18:01:f1:3d:7b:ba:26:90:d1:
         5c:17:19:4b:34:4b:7a:e3:d3:22:eb:fd:8c:3c:94:3e:fa:b9:
         85:ac:cd:a0:43:a3:58:c6:a3:32:51:b8:e7:85:cb:2c:bc:ad:
         e5:aa:a3:12:f7:62:d7:74:75:77:10:55:e1:7d:12:c1:ef:cf:
         3a:73:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:00 2024 by rpki-client on console-fra.rpki-client.org