Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer
File:                     a1853cd3-3329-4b61-a321-f6705ea74197.cer (raw, json)
Hash identifier:          FvEIrKeTqRZqGmqZWU59dwvSBefhi3crfqkcyOoOfx4=
Subject key identifier:   2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584656E4A918AB9E1E941173B4C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jun 2024 13:33:15 +0000
Certificate not after:    Fri 13 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 400554
                          IP: 23.134.120.0/24
                          IP: 199.248.241.0/24
                          IP: 2602:fb9d::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:56:e4:a9:18:ab:9e:1e:94:11:73:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 26 13:33:15 2024 GMT
            Not After : Feb 13 01:45:15 2026 GMT
        Subject: CN=a1853cd3-3329-4b61-a321-f6705ea74197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:39:04:bd:1a:92:c8:a6:9a:91:e7:f3:a6:
                    11:07:06:a6:1d:0d:a8:ef:99:d3:35:58:bc:02:96:
                    b2:1a:fa:1a:cb:b4:15:4c:5f:c3:f8:90:ca:80:9b:
                    78:0d:2a:5d:ea:ac:32:ec:82:9c:d2:70:9e:7a:a3:
                    57:01:0f:05:67:c6:7f:d6:be:e0:71:d5:82:33:7e:
                    09:a1:03:aa:e8:7f:3f:d7:5f:54:c4:1e:27:62:33:
                    a9:1c:31:09:77:4d:03:d1:4a:f8:e4:71:e4:35:e0:
                    1c:02:11:7c:61:3b:be:4a:a4:ac:02:2e:96:7e:29:
                    50:0e:58:d5:fe:56:aa:35:f4:2c:15:51:be:c6:8c:
                    93:77:a6:88:39:51:6f:3f:a5:47:5a:d8:dd:b8:82:
                    87:ae:74:bf:ca:8d:a4:c6:17:c4:94:9d:cf:c9:f8:
                    62:33:8a:a5:12:8b:ef:18:ac:6a:4e:d9:b9:7f:79:
                    85:70:45:02:6a:28:7b:71:09:ad:c1:2d:e5:cd:06:
                    88:7e:53:6e:f5:88:fc:c0:84:8b:50:07:51:bf:0a:
                    98:41:da:ba:21:46:dd:29:ad:86:74:5e:54:f3:b8:
                    86:9a:ac:8c:11:69:ca:19:77:46:ec:75:0d:24:6e:
                    cc:a0:23:f8:86:34:ba:4c:8f:d8:59:64:0f:23:52:
                    d0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.120.0/24
                  199.248.241.0/24
                IPv6:
                  2602:fb9d::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400554

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:69:b8:af:57:f2:30:da:3d:db:7d:a1:52:97:71:19:fd:96:
         6f:68:2a:5a:b1:e9:5e:b6:8a:18:35:ea:5c:93:f4:c6:0a:46:
         94:1e:6e:77:ca:96:6c:5d:aa:a0:52:b4:79:5f:e0:39:25:87:
         e9:64:ec:0d:84:84:1b:0c:a4:60:f0:48:0f:10:e1:0f:84:f4:
         cf:4c:bf:51:7c:ce:76:a6:49:b8:42:61:23:7c:89:bc:25:4c:
         d5:28:32:b6:54:40:48:51:58:29:3a:92:f1:09:9f:52:96:bc:
         de:65:f6:80:53:5e:60:74:d6:49:dd:d4:bf:cd:59:1a:95:89:
         8e:4e:50:9d:b6:88:da:2b:44:4b:66:46:b0:58:0d:01:c5:44:
         d9:ec:ce:de:28:8b:52:12:9d:5a:09:f9:f6:db:9d:ea:0d:0c:
         a8:98:c1:1f:ba:d6:65:7f:74:f3:4a:01:90:fb:3b:4a:5a:a8:
         b6:28:a8:74:20:1c:1c:ad:6f:5f:74:61:70:fc:04:14:04:32:
         ff:2a:58:2d:3e:5d:59:cf:d0:9c:ce:91:fa:61:f3:82:01:d3:
         a8:4b:e2:5c:41:02:60:32:e4:43:24:c1:92:41:18:5b:6b:0a:
         82:2a:ad:61:4d:cf:3d:46:85:82:57:bd:cc:8e:1c:6c:60:9e:
         8a:8e:3c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----