Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
File:                     f0ba84c0-5d44-4547-a368-e574b20611e4.cer (raw, json)
Hash identifier:          gMcPLE5udPIBO7lrgEuYTG2CP/FMk+hW+gzUhXU/Aac=
Subject key identifier:   A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843CB0BE433A360B8E8FEFC3780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 01:45:15 +0000
Certificate not after:    Sun 08 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 33040
                          IP: 199.48.216.0/21
                          IP: 2605:3d40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cb:0b:e4:33:a3:60:b8:e8:fe:fc:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov  6 01:45:15 2023 GMT
            Not After : Feb  8 01:45:15 2026 GMT
        Subject: CN=f0ba84c0-5d44-4547-a368-e574b20611e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:69:5e:40:62:f1:15:20:a2:0a:9a:a8:d6:
                    56:5b:f7:61:26:f6:a8:59:d9:e4:c2:72:a8:46:ad:
                    68:83:28:51:83:e0:33:ca:41:ce:42:b4:ac:d0:a4:
                    cb:e3:41:d1:b4:c9:9c:03:aa:3b:53:69:1e:f2:b7:
                    ef:1d:d9:09:ae:4d:7f:6f:6b:c8:56:f6:40:3c:34:
                    63:e2:f4:71:fd:11:31:0e:b4:a5:21:55:81:69:25:
                    ad:14:52:40:7d:ac:36:ed:2c:bc:35:96:7b:a7:fc:
                    f6:b0:2c:7f:06:c9:0e:b8:ea:9d:bb:66:22:98:02:
                    ff:bb:9b:5a:dd:73:67:0f:71:9a:4b:0d:48:5d:1c:
                    0e:a2:39:7e:d8:d1:63:4a:96:25:4a:9b:be:f0:d8:
                    23:2e:db:00:fc:18:44:df:8c:58:23:ea:1a:9a:3e:
                    5d:45:48:f4:11:bb:61:b4:e6:11:68:6a:77:40:a5:
                    75:03:3b:d2:d5:cb:01:a9:17:27:17:b8:01:b0:91:
                    1e:22:e6:ca:1b:ce:bf:ad:cf:d7:5d:cb:95:dc:66:
                    38:be:8b:34:e4:10:dd:f5:21:69:19:a8:89:23:19:
                    f1:22:35:40:ff:01:84:5d:80:3a:6c:ec:89:43:be:
                    30:1e:cb:23:50:50:b0:67:26:e0:b7:88:cd:6f:db:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.216.0/21
                IPv6:
                  2605:3d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33040

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:2d:28:50:0c:ca:3c:24:5a:80:f8:71:d9:90:ce:ed:ab:
         35:c6:a1:67:06:5d:3e:5b:75:4b:82:59:30:b8:6f:82:a5:ef:
         de:c8:2e:5f:91:a2:c5:37:74:6a:b0:df:97:b3:ef:0d:a8:d9:
         83:d0:f2:6b:5f:b6:c7:73:7d:4d:b2:66:15:4f:dd:2c:25:56:
         66:ba:fd:bd:4f:ab:cd:da:32:41:6b:8d:48:8a:d7:ab:e9:b5:
         85:e3:fa:bf:7c:4a:8f:aa:af:b5:b0:fe:6e:d1:a3:a6:08:f0:
         28:b0:28:be:33:8c:69:f5:07:6d:e6:39:2b:eb:f3:bb:db:2f:
         71:6d:80:e3:9d:ac:ca:a3:49:d9:fb:8c:4e:1b:ec:51:8d:ef:
         d9:cc:05:87:84:d1:bd:05:49:93:0b:27:6b:cd:df:6d:bd:dc:
         ba:6e:36:24:a4:eb:8c:e6:38:7b:ff:ac:12:79:57:fd:ab:c4:
         0a:81:01:90:11:21:61:c6:fe:67:e9:4f:86:8e:9a:50:6b:e9:
         34:73:7b:f8:0e:bf:91:7f:d3:54:47:56:5a:f5:18:87:85:95:
         d6:18:ec:79:89:b6:e8:c3:4a:a1:ab:c1:97:86:17:b8:86:5b:
         c4:71:9e:92:4c:20:59:21:fd:49:d3:56:cd:60:52:40:c5:df:
         37:1d:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:30:33 2024 by rpki-client on console-ams.rpki-client.org