Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
File:                     78369c58-f0b4-454b-ad08-df84f1fd007c.cer (raw, json)
Hash identifier:          Xse/uJRUNiAG2n9bMouZVRfDfMImLZPZ420IME0cm8E=
Subject key identifier:   DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483547FC9D41BBB097144E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 06 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 22822
                          AS: 23059
                          AS: 23135
                          AS: 23164
                          AS: 25804
                          AS: 26506
                          AS: 27191
                          IP: 68.142.64.0/18
                          IP: 69.28.128.0/18
                          IP: 69.164.0.0/18
                          IP: 200.110.232.0/21
                          IP: 206.223.120.0/23
                          IP: 208.69.176.0/21
                          IP: 208.111.128.0/18
                          IP: 2001:504:18::/48
                          IP: 2001:504:1c::/48
                          IP: 2607:f4e8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:7f:c9:d4:1b:bb:09:71:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  6 19:06:39 2025 GMT
        Subject: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:5a:27:76:f1:23:a7:ec:23:ef:dc:8a:b6:
                    49:d3:11:49:07:99:23:cb:f6:e5:b1:18:f2:3e:3d:
                    69:03:8c:aa:56:38:19:96:94:bb:c1:18:da:e3:05:
                    84:52:b1:1c:e5:e3:81:3a:32:af:dc:5f:f1:c4:19:
                    9c:7f:3f:73:75:4b:6c:fe:e3:e6:a0:b3:1e:61:15:
                    68:f5:e5:d1:93:cb:87:cc:16:42:2e:c3:f3:67:97:
                    1b:50:4f:02:7c:64:6b:c0:5f:9d:3b:54:ca:d0:89:
                    be:88:9c:58:28:ff:a4:f6:6c:63:0e:73:3f:1a:11:
                    ae:0a:11:78:d6:39:54:20:1b:fe:3d:4a:15:3b:27:
                    9a:c0:07:2a:48:75:a6:ce:74:1e:33:04:7d:38:c6:
                    c6:70:bb:8e:0e:17:f3:81:f9:44:3b:2c:a7:41:5a:
                    73:f3:d5:6f:ed:51:86:63:df:2a:34:f0:d6:98:42:
                    96:bb:dd:31:ee:58:ed:0f:56:73:33:8e:e3:6f:8f:
                    26:0c:ad:b5:0a:91:dd:66:4b:ec:be:31:a1:d2:6a:
                    90:b6:43:6b:4d:6c:6f:3d:b8:0d:c5:da:d3:f3:85:
                    0e:69:b7:98:ce:28:44:a4:d0:e3:c4:eb:82:fa:5c:
                    78:8b:22:3f:5f:4a:d8:8a:1c:f0:5c:a1:51:68:ef:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.64.0/18
                  69.28.128.0/18
                  69.164.0.0/18
                  200.110.232.0/21
                  206.223.120.0/23
                  208.69.176.0/21
                  208.111.128.0/18
                IPv6:
                  2001:504:18::/48
                  2001:504:1c::/48
                  2607:f4e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22822
                  23059
                  23135
                  23164
                  25804
                  26506
                  27191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:8c:64:a9:22:6f:77:39:89:58:6c:6e:f4:68:f5:09:38:
         25:11:d7:71:89:91:83:a5:30:00:88:b8:97:25:01:4c:4b:b6:
         29:4d:68:c3:14:f6:30:8f:e0:c7:13:f3:8d:4b:c7:ca:89:95:
         fc:54:5b:52:6d:fb:ce:bd:73:d1:59:2f:5f:e5:cd:9d:2f:c9:
         0e:52:14:f6:02:fc:f5:e3:90:81:29:91:f3:87:22:11:c3:20:
         55:b2:c1:cd:33:22:1f:4d:21:59:ed:d1:d7:bf:ae:20:9d:e8:
         8d:2a:d2:a8:f7:b0:47:5d:e0:b1:c9:73:2d:de:81:82:16:4c:
         4f:a0:c7:5a:99:1b:dd:0b:fd:e8:f6:4b:9b:38:b0:0d:0e:8c:
         70:88:e3:52:61:e4:3d:ef:57:4e:55:26:ee:3f:8c:6a:08:5d:
         42:f0:76:24:e7:47:db:f0:6e:fa:23:87:86:6e:bc:ab:3c:45:
         a4:2a:31:b3:67:9a:44:9e:74:4a:84:47:77:7a:01:ad:1e:45:
         fa:42:4d:9a:5e:e5:1a:39:78:a6:f2:07:4a:be:13:03:0f:a7:
         1e:3c:26:b7:9c:93:54:b3:d2:27:b8:9c:c6:b4:90:f1:ac:3e:
         18:eb:24:0a:cc:4c:70:d4:7c:7d:f5:8a:d8:72:f8:48:17:d8:
         57:81:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:57 2024 by rpki-client on console-ams.rpki-client.org