Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
File:                     d370c49e-f70c-46fb-a30f-df2475852cc2.cer (raw, json)
Hash identifier:          6+I+axhMp24hS/nK2KdMDDRzudjdrhPUqk5MEfmEAwU=
Subject key identifier:   A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858458F30F8C6F0E7A5B7B4553600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Apr 2024 00:45:20 +0000
Certificate not after:    Mon 20 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 1239 -- 1240
                          AS: 1789 -- 1795
                          AS: 1799 -- 1808
                          AS: 2014
                          AS: 3643
                          AS: 4999
                          AS: 6174 -- 6177
                          AS: 7421
                          AS: 8106 -- 8110
                          IP: 144.223.0.0 -- 144.224.255.255
                          IP: 144.226.0.0/16
                          IP: 144.228.0.0 -- 144.230.255.255
                          IP: 144.232.0.0/16
                          IP: 192.157.38.0/24
                          IP: 198.67.0.0 -- 198.70.255.255
                          IP: 198.232.8.0/21
                          IP: 199.0.0.0/14
                          IP: 199.11.0.0 -- 199.14.255.255
                          IP: 199.160.0.0/14
                          IP: 204.94.0.0 -- 204.97.255.255
                          IP: 204.117.0.0 -- 204.120.255.255
                          IP: 204.180.0.0/14
                          IP: 204.204.0.0/14
                          IP: 204.212.0.0/14
                          IP: 204.248.0.0/14
                          IP: 205.160.0.0/14
                          IP: 205.240.0.0/13
                          IP: 206.61.0.0/16
                          IP: 206.104.0.0/14
                          IP: 206.158.0.0 -- 206.160.255.255
                          IP: 206.228.0.0/14
                          IP: 207.12.0.0/14
                          IP: 207.40.0.0/14
                          IP: 208.0.0.0 -- 208.35.255.255
                          IP: 209.120.0.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:30:f8:c6:f0:e7:a5:b7:b4:55:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 16 00:45:20 2024 GMT
            Not After : Jul 20 00:45:20 2026 GMT
        Subject: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:7a:bb:23:9f:20:88:6d:5b:c8:f2:70:4e:
                    1f:7d:23:dc:0d:4f:71:f2:64:85:16:e3:0a:68:fd:
                    d1:37:da:bf:9f:66:0a:ba:0f:5e:47:21:46:c9:2f:
                    5f:67:88:e4:3e:c1:7c:34:85:ff:27:71:a2:d6:d0:
                    5a:c3:8a:b2:8b:24:2b:02:d9:d7:98:41:6e:57:8b:
                    ae:72:76:3c:83:41:53:50:7e:1e:da:70:f1:14:c1:
                    3f:91:fe:5a:9b:d8:da:81:f4:08:04:fc:11:d8:eb:
                    ed:f3:c0:e9:84:9c:de:71:f9:64:17:ff:8e:9a:b1:
                    ca:b1:07:cd:e3:e6:01:34:78:b3:2d:38:19:f3:74:
                    8a:0b:c5:ce:a5:6e:e3:f0:30:f7:98:1c:f4:64:35:
                    9a:d5:91:2d:01:9f:0b:7d:30:4d:3e:78:7e:92:87:
                    58:11:09:f4:38:03:8d:29:ba:e6:04:ab:34:d8:46:
                    6f:99:5b:29:a7:7d:3b:d3:13:71:b3:78:25:54:11:
                    3a:fa:12:18:66:77:98:cd:4f:8a:e5:06:0c:ac:85:
                    85:e3:54:75:01:f5:2c:c1:b1:6d:31:29:0d:e1:68:
                    00:ea:26:8b:ce:6f:93:a4:8a:af:e4:6a:d1:19:4d:
                    b4:f6:41:ab:0f:c3:8f:eb:42:70:7c:13:90:2a:ef:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.223.0.0-144.224.255.255
                  144.226.0.0/16
                  144.228.0.0-144.230.255.255
                  144.232.0.0/16
                  192.157.38.0/24
                  198.67.0.0-198.70.255.255
                  198.232.8.0/21
                  199.0.0.0/14
                  199.11.0.0-199.14.255.255
                  199.160.0.0/14
                  204.94.0.0-204.97.255.255
                  204.117.0.0-204.120.255.255
                  204.180.0.0/14
                  204.204.0.0/14
                  204.212.0.0/14
                  204.248.0.0/14
                  205.160.0.0/14
                  205.240.0.0/13
                  206.61.0.0/16
                  206.104.0.0/14
                  206.158.0.0-206.160.255.255
                  206.228.0.0/14
                  207.12.0.0/14
                  207.40.0.0/14
                  208.0.0.0-208.35.255.255
                  209.120.0.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1239-1240
                  1789-1795
                  1799-1808
                  2014
                  3643
                  4999
                  6174-6177
                  7421
                  8106-8110

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:ff:68:d6:0b:69:64:f5:30:ae:ef:e5:56:fa:bd:fe:69:
         68:0b:b7:02:cf:c8:04:32:06:de:f6:8d:d1:93:6c:1a:10:4b:
         b4:f3:ee:34:56:12:3a:46:b1:bf:ce:15:1e:ab:ec:30:b6:0d:
         31:25:3c:ef:0b:d4:c5:da:1c:8d:9a:bd:89:57:68:86:d4:be:
         f0:9d:2b:71:9a:e0:0e:a0:e2:ad:d5:82:75:66:1e:c0:e5:e3:
         71:e8:b8:97:8d:cf:91:94:32:0e:df:25:ee:30:6c:6a:ce:c0:
         f9:d1:58:34:79:f9:1d:71:6e:a3:98:34:af:1a:9d:8e:0d:a0:
         0a:02:1d:e4:67:be:f4:f6:48:00:da:6b:4b:9c:fb:67:be:30:
         ac:e0:a4:5d:ca:13:ef:7b:0a:6b:d2:d5:cd:1d:40:bb:66:da:
         7c:11:cb:17:ea:0d:56:e0:22:ff:74:ad:bd:9e:9a:0f:a7:b9:
         11:9e:55:13:e9:fe:37:a2:0a:6e:41:c8:94:92:f8:8d:7c:be:
         14:cc:9a:23:37:19:55:83:5c:8f:a6:53:6d:8a:3f:4d:21:72:
         52:10:12:c2:ce:d6:51:ee:ab:d7:d1:3b:40:a3:71:bb:21:eb:
         9c:9b:66:86:5e:ca:25:84:6d:04:7c:ac:1b:4d:26:d8:c9:57:
         1d:d2:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:21 2024 by rpki-client on console-ams.rpki-client.org