Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
File:                     8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer (raw, json)
Hash identifier:          2zF9q3VBLfDJ7TKWhGi/mGN/RMBGASgbWJ/k9ZUs6vU=
Subject key identifier:   7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842D41F9F23829B65CBA182FD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Aug 2023 15:00:21 +0000
Certificate not after:    Tue 11 Nov 2025 16:00:21 +0000
Subordinate resources:    AS: 12281
                          AS: 14499
                          AS: 16415
                          AS: 18452
                          AS: 19372
                          AS: 32399
                          IP: 64.142.128.0/17
                          IP: 66.196.128.0/18
                          IP: 69.173.0.0/19
                          IP: 74.119.136.0/21
                          IP: 142.192.0.0/16
                          IP: 170.8.0.0/16
                          IP: 198.99.155.0/24
                          IP: 198.153.237.0/24
                          IP: 208.90.64.0/22
                          IP: 208.94.8.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d4:1f:9f:23:82:9b:65:cb:a1:82:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  9 15:00:21 2023 GMT
            Not After : Nov 11 16:00:21 2025 GMT
        Subject: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:30:57:ae:a2:72:b9:45:59:7e:85:4d:c2:
                    8e:e6:77:e5:d9:7c:2c:ab:4e:07:50:d5:51:d1:a1:
                    51:99:88:30:b1:96:ef:a4:a1:30:35:0a:d4:eb:d1:
                    b0:3f:d2:47:2c:8c:a9:73:34:25:09:8d:56:f3:9c:
                    77:00:7c:1b:80:28:28:c5:bb:2e:51:0e:06:92:03:
                    8e:f0:4e:12:f1:8f:ff:25:05:3f:f8:a7:8a:77:65:
                    4a:13:11:8b:8e:90:d3:d7:46:f0:20:12:ac:2a:62:
                    13:ae:c5:02:6e:06:a5:ad:17:95:62:ed:d5:8d:61:
                    23:b5:aa:e9:5f:d0:48:2e:a0:19:c9:4e:da:1f:a9:
                    81:6a:47:ee:be:f2:04:66:94:55:ff:72:8e:fe:37:
                    06:54:47:48:8d:9b:27:f8:01:9a:b9:f9:41:d5:95:
                    20:d4:bb:63:8b:14:90:92:69:98:35:7b:60:04:a2:
                    22:28:38:c1:26:fd:3c:f7:9c:7f:bc:41:a4:9e:02:
                    ed:51:13:e0:2d:e0:50:ce:94:8b:e2:2d:a0:99:c5:
                    fa:d3:99:40:6f:73:9a:ea:bf:c9:7a:a0:f2:f9:ba:
                    28:d5:e5:dc:c6:ff:eb:2c:0c:a6:0d:ad:e0:84:08:
                    95:9d:4b:cf:d4:52:8d:c7:98:b6:05:66:49:05:0e:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.142.128.0/17
                  66.196.128.0/18
                  69.173.0.0/19
                  74.119.136.0/21
                  142.192.0.0/16
                  170.8.0.0/16
                  198.99.155.0/24
                  198.153.237.0/24
                  208.90.64.0/22
                  208.94.8.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12281
                  14499
                  16415
                  18452
                  19372
                  32399

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:6f:68:66:7e:9b:a8:b5:c1:0d:eb:86:38:e8:6a:65:d4:
         a9:4e:d3:b1:18:ab:d0:45:b8:46:a4:d6:d5:da:a0:a6:a9:e8:
         24:f8:f8:80:57:35:fd:1a:1e:22:f8:15:d6:9c:ec:dd:e8:90:
         83:61:74:13:bf:43:4d:13:66:e4:cc:da:0e:19:74:02:ad:95:
         fc:93:6c:51:5e:b1:3f:9f:87:6d:e3:47:af:22:1f:76:78:3d:
         33:cb:d5:04:2c:f5:2e:23:63:f0:5a:f1:85:cd:fc:63:bf:da:
         b2:da:f2:e8:55:29:39:5e:af:62:a9:75:84:d2:cc:cd:51:8c:
         ec:ec:46:4c:14:61:6d:1a:c2:31:f7:4c:65:75:2e:82:1c:74:
         bc:56:e9:15:f1:de:78:40:b9:d7:8e:4b:aa:df:fd:7a:f6:9b:
         6d:07:cf:09:ae:90:85:fd:3d:f3:b0:c6:b9:31:df:01:11:db:
         b1:f9:0f:2d:f3:b6:63:c6:a8:cd:c8:8d:46:c9:5a:da:e5:20:
         67:89:3a:fd:39:71:bd:bd:a0:e6:c3:0c:09:05:a9:b1:2b:bb:
         91:1c:0c:8d:4a:89:0e:fb:be:8c:fd:9a:51:3e:d4:6d:53:58:
         a1:60:af:ca:60:e4:fa:b5:ad:3a:7c:a3:70:6f:14:ee:5b:69:
         0e:13:ed:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:22:12 2024 by rpki-client on console-fra.rpki-client.org