Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer
File:                     ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer (raw, json)
Hash identifier:          cWyEAnNjuAqHg3mCFSnjQtP3xDhJ+PGVee8vW+BJJCc=
Subject key identifier:   88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E4834F8B44D793DA51BF3F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 03 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 13880
                          AS: 26887
                          IP: 64.57.32.0/20
                          IP: 216.230.48.0/20
                          IP: 2620:110:7000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:8b:44:d7:93:da:51:bf:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  3 19:06:39 2025 GMT
        Subject: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:7c:c8:21:47:03:41:a0:23:ac:c2:d9:84:
                    ff:97:2b:25:0f:3d:a9:07:f2:55:10:e2:f3:c5:eb:
                    50:cd:f4:0a:d3:84:07:8b:97:ae:42:e0:ce:eb:da:
                    10:b5:f6:77:42:c8:e7:26:20:fa:6e:f9:fb:ad:b1:
                    25:7a:31:ef:99:10:d0:ed:16:fd:b4:c8:c7:14:8a:
                    5d:f5:60:36:86:92:23:3b:90:0f:56:02:fd:da:61:
                    e6:e5:fb:a3:93:5a:1a:ba:5c:20:f0:6e:4e:b7:c5:
                    c7:1c:15:99:f3:88:1f:3d:64:fb:1a:13:06:c5:23:
                    cf:67:2f:a2:cd:94:22:3b:c9:87:05:7f:f9:86:81:
                    3e:1d:92:38:6c:f5:a3:6b:94:08:00:bb:df:7a:b6:
                    8d:15:b4:5f:7e:43:fb:cb:59:7b:3c:11:16:2d:c0:
                    21:8d:93:4f:8b:f8:4b:b4:b7:35:d2:d2:b9:1d:40:
                    d8:0f:48:9e:c1:e8:7a:ee:e4:7a:70:65:ca:d0:82:
                    54:d8:d3:11:cd:fe:50:fd:73:07:01:c0:13:cf:dd:
                    8c:e1:74:54:34:f8:b3:ea:f6:a6:ef:bf:d4:11:94:
                    a6:eb:a1:0b:27:c8:fe:f2:ab:38:df:34:de:5c:2a:
                    23:18:b0:e6:16:f1:b6:16:1f:e9:ac:a6:6e:47:7f:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.32.0/20
                  216.230.48.0/20
                IPv6:
                  2620:110:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13880
                  26887

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:26:8f:b8:57:36:aa:33:02:32:69:d2:d1:82:ea:41:3d:ab:
         11:6a:89:3a:2b:39:7a:9b:b8:32:17:03:84:ce:28:c9:89:6f:
         d1:3c:29:b8:16:4b:95:2e:fc:72:52:fd:5f:73:9e:a1:06:31:
         7d:86:e5:07:2f:02:11:28:58:d1:d2:05:b7:25:17:a7:ad:a3:
         bb:c7:9a:75:d9:e0:3e:29:d7:ec:4d:c5:ea:fc:7b:8d:73:b0:
         81:22:e9:f7:81:d1:a9:c4:f1:28:b9:39:37:8c:1b:0d:ab:36:
         a0:f0:83:28:82:a8:92:6e:57:19:48:cc:8c:0e:7a:b3:81:b3:
         08:30:29:c2:7f:56:20:68:1a:a4:e9:f7:ce:4e:54:f4:21:b7:
         e8:9b:19:08:64:0c:7d:b1:a6:55:a4:1a:e0:e1:85:3b:c3:22:
         ea:c8:15:c4:ca:64:33:82:9f:e9:0f:f6:c8:f9:f5:5f:21:88:
         96:c3:85:b5:49:30:11:27:87:dd:de:45:71:f7:6a:92:71:11:
         78:dc:07:86:6c:ff:9e:2f:65:be:b3:e3:ff:aa:4e:24:51:eb:
         e0:9a:84:cf:cf:98:30:93:c9:65:19:9d:8a:96:e4:1c:03:36:
         04:34:d5:2d:83:a4:45:c2:36:a9:7d:e6:44:f6:cc:d8:ea:92:
         e2:42:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:26:48 2024 by rpki-client on console-fra.rpki-client.org