Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
File:                     c556b910-dc6c-4228-adf3-8828ac96ee60.cer (raw, json)
Hash identifier:          F0wtqZQ+Nf0kCEvKEOry9eatjhYUELnJ53RQUldId1s=
Subject key identifier:   DD:77:CD:5F:8A:D4:DA:22:AD:A2:BC:F1:D8:F4:52:F2:0C:B5:BB:A6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846166000F0C52A122DAA29CD70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Jun 2024 10:54:14 +0000
Certificate not after:    Sat 03 Jan 2026 01:45:24 +0000
Subordinate resources:    AS: 54543
                          AS: 397165
                          AS: 398197
                          IP: 23.130.112.0/24
                          IP: 23.130.240.0/24
                          IP: 23.142.96.0/24
                          IP: 23.156.240.0/24
                          IP: 23.161.160.0/24
                          IP: 23.161.224.0/24
                          IP: 140.99.0.0/16
                          IP: 2603:f000::/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jul 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:16:60:00:f0:c5:2a:12:2d:aa:29:cd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun  3 10:54:14 2024 GMT
            Not After : Jan  3 01:45:24 2026 GMT
        Subject: CN=c556b910-dc6c-4228-adf3-8828ac96ee60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:2b:d4:3e:c7:42:47:33:a2:23:75:9a:1c:
                    ce:84:54:74:b9:be:3d:af:a4:1c:37:47:48:db:74:
                    d4:9d:5d:c2:ce:75:5e:73:48:5f:b5:93:b7:cd:4b:
                    a1:5a:5f:b0:ac:83:5d:4f:6f:75:b4:75:6d:e3:8a:
                    b6:49:3d:44:4c:c6:45:9e:a7:7d:d8:cf:cf:d3:52:
                    91:a6:f8:31:79:4e:aa:35:38:dd:16:24:6e:58:9c:
                    e5:75:17:72:43:4a:f5:98:c8:03:9d:3d:a1:b5:59:
                    ae:4b:8c:d7:e1:e7:6c:ed:71:7b:9e:b5:c1:2a:6b:
                    38:b3:51:8b:df:96:21:f4:46:c4:16:d0:ec:23:a7:
                    ca:17:82:04:4d:68:bb:0f:c7:de:83:a3:23:ec:c5:
                    92:c9:6f:c8:dd:67:5c:a8:d2:5d:2c:a4:2b:4d:ff:
                    2e:2c:fa:9b:9e:23:41:4e:13:c3:48:f9:f5:2f:46:
                    21:fb:72:ba:55:b1:5c:0d:4d:d5:90:f7:1c:a7:ef:
                    a6:ab:46:a1:9a:91:43:c3:7c:4c:c0:14:20:5f:0d:
                    91:e4:99:1b:6c:15:05:90:63:fd:35:d5:e8:e3:41:
                    57:1f:af:96:38:04:dc:21:2c:b3:e8:0e:82:06:5e:
                    f3:12:7b:3c:73:16:3e:b7:49:9e:99:d1:a6:c0:24:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:CD:5F:8A:D4:DA:22:AD:A2:BC:F1:D8:F4:52:F2:0C:B5:BB:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.112.0/24
                  23.130.240.0/24
                  23.142.96.0/24
                  23.156.240.0/24
                  23.161.160.0/24
                  23.161.224.0/24
                  140.99.0.0/16
                IPv6:
                  2603:f000::/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54543
                  397165
                  398197

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:c6:40:e7:2a:31:d2:f0:d1:76:8a:f1:bc:ca:54:8c:0d:
         cd:fa:35:d1:c2:fb:4b:18:6a:3b:94:07:1d:9d:66:ef:23:e2:
         e6:5c:bc:f5:2f:ba:e0:a8:82:d1:9a:58:12:8d:d2:9f:80:84:
         33:68:17:e2:bf:90:81:61:e4:3d:8f:9e:a1:ad:92:11:5c:a6:
         e6:2d:f6:52:aa:dc:c8:53:3c:d8:c0:84:c0:7e:e8:82:6f:53:
         88:70:35:4d:dd:72:c2:47:63:cf:d5:da:32:60:61:12:c7:80:
         88:17:31:8c:62:70:52:e1:96:45:67:5c:39:69:08:48:89:5b:
         61:c8:86:e9:0d:32:7c:98:29:88:74:2f:2a:49:96:36:01:dc:
         96:1b:6a:e2:3d:5e:dd:67:cf:d0:01:89:52:5a:ce:bc:41:f9:
         2f:02:8f:03:af:b7:ce:49:72:1f:3c:95:c7:48:52:34:55:0d:
         de:31:3c:7e:5e:31:9f:90:99:92:49:83:6d:e7:6a:66:53:0b:
         f9:d6:93:93:1a:24:91:ef:e1:73:3c:c4:13:b4:85:c0:72:40:
         20:05:22:ef:2b:56:32:94:6b:5f:04:69:e2:3b:d6:98:ea:64:
         96:c3:60:3a:b4:29:ee:97:73:e9:05:26:d2:ce:33:a2:86:f5:
         9b:c8:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:26:33 2024 by rpki-client on console-fra.rpki-client.org