Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer
File:                     25283898-2dc3-4477-af3c-b64dd3c800ab.cer (raw, json)
Hash identifier:          ikDvR07loI23vyCUe3E90Ox2eBMzaiO0m6w+MdH/5MU=
Subject key identifier:   1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847A3C2DCD7D966DAF0C2465180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 19:09:20 +0000
Certificate not after:    Tue 26 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 13692
                          AS: 20328
                          IP: 66.179.60.0/22
                          IP: 67.219.224.0/20
                          IP: 100.42.160.0/20
                          IP: 108.174.176.0/20
                          IP: 192.55.252.0/22
                          IP: 192.86.0.0/24
                          IP: 192.175.50.0/23
                          IP: 198.100.136.0/21
                          IP: 208.77.176.0/21
                          IP: 2607:8600::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:c2:dc:d7:d9:66:da:f0:c2:46:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 23 19:09:20 2024 GMT
            Not After : Jan 26 01:45:26 2027 GMT
        Subject: CN=25283898-2dc3-4477-af3c-b64dd3c800ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:89:32:1d:7d:14:e0:a2:49:e9:9f:d7:03:
                    0c:e0:1c:21:b1:17:fc:de:52:4d:bf:a8:80:d0:9e:
                    9c:1b:b4:48:e9:14:3b:e1:e0:fe:31:a8:1a:35:10:
                    00:8a:f5:21:9d:34:46:20:6f:2e:77:fa:1d:33:25:
                    8e:c0:48:7f:3f:30:d6:6b:73:22:7f:b1:d4:f8:ff:
                    f4:61:f6:15:14:aa:b5:05:11:90:f7:3b:53:9d:a0:
                    d2:e6:12:53:b7:15:40:1d:a8:40:c2:0a:d1:f7:38:
                    18:85:66:7d:b7:0e:22:a2:44:b4:20:cd:9e:e4:d3:
                    48:87:41:7b:06:b6:74:ce:dd:3c:40:08:4b:b5:ee:
                    32:48:fc:df:57:a3:b9:0c:d7:e1:49:3a:7e:c9:d9:
                    90:e2:09:e5:32:6a:8a:c1:f3:01:98:9c:ef:7e:7e:
                    44:fb:41:b3:8f:db:bf:9a:74:37:7b:a5:e8:26:85:
                    09:1e:d6:12:b4:74:75:33:87:8d:1f:bc:75:32:b4:
                    92:c8:97:38:45:bf:9e:b3:fd:fe:79:e2:ad:4e:5b:
                    ff:6f:b0:89:17:ff:ff:3d:b7:3f:73:c5:56:7c:e2:
                    88:46:dd:68:c8:89:2c:db:5c:76:fe:c2:32:f8:16:
                    d4:c9:cb:78:12:0e:a3:47:d9:ff:22:55:86:21:7a:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.60.0/22
                  67.219.224.0/20
                  100.42.160.0/20
                  108.174.176.0/20
                  192.55.252.0/22
                  192.86.0.0/24
                  192.175.50.0/23
                  198.100.136.0/21
                  208.77.176.0/21
                IPv6:
                  2607:8600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13692
                  20328

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:cd:10:d9:08:0b:a8:b5:a8:13:23:09:7c:b0:3e:26:43:
         b1:f3:92:ac:d6:5a:52:9b:b4:cd:0c:51:41:40:86:f4:ae:ec:
         c3:38:7d:d2:d5:18:2c:76:7c:cd:7e:0f:d4:2d:ab:4d:76:2e:
         ac:7f:5c:38:f9:1a:d0:13:02:b4:58:d1:7a:31:1e:6a:a7:09:
         a4:11:87:e4:b9:94:c2:6c:1b:8b:05:ef:02:82:35:2f:e6:3c:
         3a:1a:7e:dc:fa:32:32:e6:aa:41:fa:7c:69:34:d5:3e:7c:73:
         7e:fa:21:2f:3a:dd:fa:2c:ce:45:93:2b:ec:6a:54:12:41:91:
         de:cb:2c:a9:67:48:ed:7f:f3:69:8e:f6:e5:a9:28:d7:90:c3:
         f4:d1:b0:87:80:07:6f:c3:32:e5:39:1a:08:8f:7d:ef:5f:80:
         a4:24:6a:cd:9d:bd:7d:39:1c:68:49:e8:ff:35:0c:dc:fa:d1:
         81:26:97:88:90:2c:45:77:cb:e6:a2:d2:be:cd:f7:bc:16:02:
         31:13:de:15:2b:bb:d4:4e:a9:f7:a7:94:e2:a6:5c:07:a3:8a:
         0b:ea:bc:44:8d:ba:4a:ff:28:98:bf:9f:56:f4:e1:f8:76:51:
         34:67:bd:9c:cc:8c:eb:b9:fd:3b:c4:5f:e9:1b:ee:be:c4:2f:
         1e:93:a5:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:41 2024 by rpki-client on console-ams.rpki-client.org