Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a.cer
File:                     8e0d46ab-fb03-49e0-a908-80d934767a4a.cer (raw, json)
Hash identifier:          SMBDx3RocKCPFzbOEQD+1mwdwF+C3CsQp+CipnL3wBM=
Subject key identifier:   AA:18:D9:F8:A2:50:AE:AF:10:20:A8:AA:CC:70:E9:CC:F9:D2:10:A9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843FA81844D010BB6B13F07B610
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/8e0d46ab-fb03-49e0-a908-80d934767a4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Nov 2023 01:45:15 +0000
Certificate not after:    Wed 25 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 22113
                          IP: 64.112.4.0/22
                          IP: 66.170.180.0/22
                          IP: 163.123.228.0/22
                          IP: 2606:6480::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fa:81:84:4d:01:0b:b6:b1:3f:07:b6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 23 01:45:15 2023 GMT
            Not After : Feb 25 01:45:15 2026 GMT
        Subject: CN=8e0d46ab-fb03-49e0-a908-80d934767a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:e9:0f:b8:5d:d8:04:38:90:29:e8:2f:a8:
                    fa:74:6e:3a:12:76:9d:ab:9f:d2:89:39:ce:44:5c:
                    d9:97:eb:45:3c:4d:90:4a:84:8c:7e:2c:b7:62:a7:
                    83:84:b3:b9:95:a0:1d:dd:9c:4a:05:13:45:6c:72:
                    3d:c8:11:24:51:36:e5:89:42:2a:f7:72:d9:9f:f4:
                    ec:4b:f9:9a:70:8a:f0:ad:32:fc:ed:cb:b7:ce:d4:
                    f0:cd:b2:f2:03:1b:b1:cb:bb:97:c2:7b:d0:d3:55:
                    50:bd:8b:8c:65:37:3f:36:5b:01:8c:a5:32:c0:c2:
                    33:2f:eb:f6:a5:8a:a9:8a:23:93:98:61:57:e2:40:
                    f3:91:e6:d8:ce:b6:b0:7e:e0:12:9c:4d:b0:b4:ce:
                    99:7d:d6:7a:18:c9:57:e2:51:f9:15:85:62:94:2c:
                    a4:47:5c:02:a2:ca:91:16:21:e3:15:14:69:d7:ab:
                    7e:0a:1f:80:5b:17:a5:e7:69:9a:57:29:a9:c8:b1:
                    9c:f7:27:bb:fe:42:4a:1d:79:bd:a5:5e:ff:19:86:
                    1d:37:a9:05:f0:8a:15:38:a6:bc:8c:cc:af:ae:fd:
                    20:5b:41:d5:5c:d3:a0:92:f4:09:fd:43:65:b8:de:
                    12:3e:b3:cf:5a:0e:bd:23:12:5c:7e:2d:b9:5f:cd:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:D9:F8:A2:50:AE:AF:10:20:A8:AA:CC:70:E9:CC:F9:D2:10:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e0d46ab-fb03-49e0-a908-80d934767a4a/8e0d46ab-fb03-49e0-a908-80d934767a4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.4.0/22
                  66.170.180.0/22
                  163.123.228.0/22
                IPv6:
                  2606:6480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22113

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:e9:50:11:a3:be:bb:75:4d:91:56:3b:55:e7:38:b4:34:
         22:20:28:f5:b9:b8:5b:cf:65:14:34:5e:4d:9f:6f:9a:d7:fb:
         5d:23:3f:45:0e:ba:ff:03:7f:33:e9:7e:bf:19:78:00:94:cd:
         22:8d:5e:10:5f:f3:5b:15:9a:2d:78:c1:fc:a1:c9:ac:27:1c:
         a3:5b:20:d5:a1:fd:5e:d7:6e:b2:9f:55:d0:d9:2a:1f:cc:fa:
         16:58:45:6f:9b:9b:b4:e3:19:52:4a:77:ef:c9:d8:f6:cb:68:
         84:36:00:c3:64:6a:0d:53:cb:11:cd:7b:27:e9:91:bb:b6:78:
         02:9d:75:98:c1:70:69:1c:47:ec:ec:24:90:61:00:d0:c3:91:
         39:2a:b2:90:ae:e8:b0:56:a3:94:53:0c:04:74:67:c8:12:a3:
         d4:96:f6:2a:5c:01:f7:42:73:ed:69:d5:bb:c3:88:85:f1:9e:
         88:a5:9c:2d:c3:ab:26:65:62:a1:26:0b:15:34:71:c5:3e:4c:
         2f:ca:1b:0b:29:5b:c8:58:a1:88:96:74:00:26:45:7a:d0:94:
         6b:a8:7d:27:4d:82:9f:b2:19:d9:fd:58:32:c4:fe:ed:e6:72:
         95:83:7a:45:ce:aa:15:e8:ee:e3:e7:a9:78:8d:31:a0:80:b9:
         8e:dd:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:30:12 2024 by rpki-client on console-ams.rpki-client.org