Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer
File:                     ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer (raw, json)
Hash identifier:          B/liI6Aophp7F6vcsVTmCOWf3kOqBNGWZSayX3/49ls=
Subject key identifier:   EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E4834C7C814B3AC4773FA700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 12 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 27644
                          AS: 400635
                          IP: 192.124.129.0/24
                          IP: 207.167.126.0/23
                          IP: 2620:11e:f000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:7c:81:4b:3a:c4:77:3f:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 12 19:06:39 2025 GMT
        Subject: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:d6:ac:8c:d0:8d:07:f6:77:55:8c:78:17:
                    d6:3e:2c:91:db:7c:69:fa:d5:0c:d0:0e:02:89:ee:
                    e9:3b:e7:ed:29:78:68:20:5c:3c:03:57:0a:9d:b6:
                    74:98:05:6d:3d:c5:4e:39:e7:11:0d:44:37:ea:1a:
                    6f:84:e1:2e:1c:10:46:f4:50:77:f0:a1:a8:d8:ec:
                    63:a4:12:dd:22:d8:df:c5:f9:a4:67:58:50:44:75:
                    91:a3:91:5f:a8:4f:c2:ae:31:a7:63:ad:35:4e:59:
                    fb:e3:65:24:23:c8:9f:c1:8e:6c:eb:f4:53:b3:53:
                    9b:64:a3:9b:98:46:1d:15:05:fa:e7:fa:c8:f0:d1:
                    c1:c1:8a:0a:ad:c4:8b:15:75:f2:e3:06:7e:f7:aa:
                    52:ec:1c:07:a9:02:26:7f:67:83:95:f6:90:dd:c9:
                    13:56:89:86:23:80:50:91:53:a9:6e:d5:05:8c:41:
                    9e:d3:e2:7b:84:a5:05:80:8e:11:35:08:29:c3:37:
                    77:a3:8d:4b:b3:8a:0f:52:06:73:81:cb:16:38:9a:
                    3f:8c:9f:af:c6:fe:fc:01:32:d0:76:69:40:f0:05:
                    e8:09:a1:4a:cb:e2:15:0c:b7:98:5e:48:82:05:a3:
                    87:95:ee:81:40:26:fc:0d:ec:44:be:6b:86:d5:bf:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.129.0/24
                  207.167.126.0/23
                IPv6:
                  2620:11e:f000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27644
                  400635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:ac:c7:a6:ac:96:46:b7:da:03:61:12:77:f6:31:35:7f:
         37:73:84:34:38:18:44:6c:96:74:92:46:ae:06:3a:e0:a1:f8:
         c0:29:af:64:70:e3:a0:3c:41:d5:c7:aa:9c:3d:73:e7:6d:ca:
         c0:6a:25:5a:ea:2d:7a:78:81:67:0f:25:0a:0b:a2:78:8c:e7:
         2c:70:81:d2:99:84:25:a9:c2:e6:0b:04:6f:58:c0:ea:c6:cc:
         7f:f2:ef:1e:9e:60:29:3e:8f:6d:31:27:c3:3e:6a:25:88:7d:
         b2:a8:55:89:d5:8b:f7:f2:b2:e1:f6:db:a0:01:7f:f8:d6:4f:
         df:85:7c:ec:86:77:68:b8:ea:d9:70:df:2b:fb:e9:f8:9a:7a:
         2d:0e:7e:d1:73:da:e1:50:27:ce:87:87:31:fe:44:b8:4a:eb:
         fb:88:d5:a8:b2:c0:ed:bc:85:4f:5e:7f:17:f3:84:52:1b:c5:
         d4:e6:75:ca:94:d6:8d:75:f4:95:e5:55:93:cf:d2:51:82:8f:
         3c:d9:1f:68:bf:a1:a4:c6:e5:33:c0:a5:8d:d3:05:cf:94:09:
         9e:d9:44:df:d6:d3:23:56:2f:bf:42:fd:84:fe:0d:8d:8c:03:
         a6:a1:2f:cc:16:ae:d8:63:bf:51:1a:4c:73:09:c3:20:36:b4:
         d3:ef:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:30:30 2024 by rpki-client on console-ams.rpki-client.org