Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
File:                     b3f53674-93ef-439e-9019-e6308b1c1738.cer (raw, json)
Hash identifier:          bchez3ZBMRFilEnYUCT6LCCr69t0hiscnCuRqYrg0GA=
Subject key identifier:   16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858456550B6C68993651F16DF7B20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 05 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 397156
                          IP: 141.193.239.0/24
                          IP: 148.59.73.0/24
                          IP: 2602:fe24::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:50:b6:c6:89:93:65:1f:16:df:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr  1 00:45:20 2024 GMT
            Not After : Jul  5 00:45:20 2026 GMT
        Subject: CN=b3f53674-93ef-439e-9019-e6308b1c1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:6e:8e:78:34:0a:ee:0f:32:73:3b:a9:cc:
                    78:a4:77:77:e3:be:47:8a:32:34:df:0a:37:80:d8:
                    b9:31:e1:99:a5:13:40:ef:ea:71:b7:dc:ef:a8:f3:
                    69:5b:24:f0:5b:8c:2f:82:ba:6b:a3:55:49:9b:a6:
                    f8:d8:09:b9:0a:60:a5:25:61:93:dc:f1:0a:9d:c1:
                    ae:43:7c:cd:b9:d2:79:f9:ec:78:5a:b9:13:a0:00:
                    a3:c8:05:29:d0:a6:15:92:78:ff:6f:48:4b:32:7f:
                    b8:8b:25:43:85:7d:1f:df:32:da:0a:35:46:83:ed:
                    31:f9:cc:d3:4a:43:b2:31:20:14:7d:52:3a:c3:af:
                    30:65:ca:fa:e2:2f:8f:7d:57:92:f0:78:93:57:01:
                    81:6a:07:ce:73:8c:df:00:32:0d:41:1b:72:9f:47:
                    c2:a5:df:e0:51:1d:e7:0b:65:81:dd:b5:9e:ed:00:
                    3d:ae:88:33:95:37:b7:eb:8f:ac:53:e8:27:3e:84:
                    34:53:92:db:84:6d:13:c6:b7:8c:e4:36:61:85:6b:
                    37:98:0b:57:82:64:b9:0e:4b:c1:b0:54:0a:95:bc:
                    5b:74:55:94:a7:aa:86:59:3f:2a:97:82:ad:e3:fd:
                    7e:4a:88:2a:d0:a4:2e:ce:23:5a:2a:41:cf:1d:67:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.239.0/24
                  148.59.73.0/24
                IPv6:
                  2602:fe24::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397156

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:6b:a7:fa:f6:13:35:63:28:9c:6e:43:27:8e:f9:f2:a8:
         d4:d8:7a:e7:07:1f:3e:48:84:29:a2:b0:a5:b1:d1:0b:0a:87:
         59:b4:0d:79:f5:b9:9b:31:7c:ca:ca:29:42:a6:b0:10:4a:d8:
         01:ae:c0:d4:10:5c:71:8d:6c:40:13:2c:b2:be:30:70:5f:37:
         70:90:1c:3b:c9:f6:ac:2f:1d:41:a5:b0:8a:76:36:88:7e:9f:
         de:cf:d7:b5:b7:be:bb:3e:b1:30:3d:0e:c4:e2:2f:e3:a3:77:
         c2:87:04:70:96:96:fe:a1:9a:99:95:cb:46:a1:5f:84:f4:93:
         e4:2b:0a:0b:12:e8:fb:e8:a6:5e:33:d6:54:28:92:1e:31:21:
         dd:54:c1:71:96:7f:58:4c:ec:97:17:f1:25:61:6d:68:e3:a5:
         7c:7c:72:27:5e:35:c3:49:4c:b6:80:73:a9:36:35:55:15:13:
         f0:ec:75:b9:78:92:f9:89:71:c7:97:70:a2:71:93:db:aa:1e:
         c5:64:b6:ec:63:09:e3:b4:6f:05:4d:6c:f1:b9:ab:65:72:13:
         a1:eb:10:3d:e5:b7:a0:4e:70:10:6d:b7:7c:24:8d:db:5d:5a:
         d0:f1:7b:25:70:8e:f2:2e:aa:40:dd:e7:56:53:6a:c4:0a:02:
         bf:08:6c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:19 2024 by rpki-client on console-ams.rpki-client.org