Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
File:                     9df142df-6de2-47dc-be4f-bf09bdec0551.cer (raw, json)
Hash identifier:          0c8ThnAukfh2HizkFwG6L7Mvn5qi+IBtwYo/Z80PtMc=
Subject key identifier:   F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858482D5306FA5D4C98B53A2EF81C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Dec 2024 01:45:33 +0000
Certificate not after:    Wed 17 Mar 2027 00:45:33 +0000
Subordinate resources:    AS: 19187
                          AS: 19229
                          AS: 19379
                          AS: 27184
                          AS: 394453
                          IP: 69.4.0.0/19
                          IP: 170.118.0.0/17
                          IP: 171.74.0.0/16
                          IP: 198.134.142.0/24
                          IP: 198.160.64.0/19
                          IP: 198.212.157.0 -- 198.212.158.255
                          IP: 199.253.136.0/21
                          IP: 216.157.224.0/19
                          IP: 2604:97c0::/32
                          IP: 2607:2e00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:53:06:fa:5d:4c:98:b5:3a:2e:f8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 12 01:45:33 2024 GMT
            Not After : Mar 17 00:45:33 2027 GMT
        Subject: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:3d:ef:e6:ce:79:d9:35:54:42:52:69:9d:
                    63:78:b2:31:68:41:2c:17:4f:0d:98:d7:c8:2e:f2:
                    9c:ac:b0:8e:41:2d:5d:3e:e3:da:34:43:35:45:e1:
                    78:41:31:69:31:4a:c6:fe:49:2d:aa:31:3f:bc:0a:
                    bc:7e:87:f0:97:35:03:e0:1a:f5:31:ba:83:ef:2e:
                    f6:c3:1e:23:b8:27:94:97:99:32:bf:b0:c1:75:66:
                    cc:3d:34:cb:19:e3:22:11:0f:8a:9a:c0:6a:10:0a:
                    00:30:14:e3:0e:77:e5:54:6d:1f:e2:55:7d:f2:b2:
                    6b:57:d1:f2:f8:cf:07:6b:7a:d5:7e:c9:99:10:63:
                    ad:68:82:17:a5:dd:b9:c0:88:f6:3f:74:93:3f:e4:
                    33:97:26:67:5a:f6:6a:26:6c:50:51:3a:38:e4:f1:
                    97:72:95:c6:3f:6c:c3:53:58:a4:88:ed:37:56:b7:
                    c6:83:ee:54:66:c0:3d:22:01:a7:da:f4:8d:cc:42:
                    33:aa:47:68:09:a8:5c:b6:90:e7:83:44:98:58:96:
                    ca:60:f4:f0:85:2b:2c:ed:6d:7a:5b:c2:8f:a8:73:
                    f2:f4:ef:9f:ee:e8:2a:35:0a:fa:1c:56:f1:9d:60:
                    21:cf:31:ce:9b:fa:5c:24:5f:16:e6:e6:21:61:5d:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.0.0/19
                  170.118.0.0/17
                  171.74.0.0/16
                  198.134.142.0/24
                  198.160.64.0/19
                  198.212.157.0-198.212.158.255
                  199.253.136.0/21
                  216.157.224.0/19
                IPv6:
                  2604:97c0::/32
                  2607:2e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19187
                  19229
                  19379
                  27184
                  394453

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:3a:ee:41:36:76:2d:9e:8a:fb:45:2f:c1:b4:76:cc:d2:
         d0:3b:ea:40:f7:4b:d1:34:ec:32:1b:bb:30:2f:77:f7:8d:43:
         6a:7f:bd:78:4e:42:c4:34:34:eb:ef:e5:42:ae:19:98:26:25:
         aa:70:cb:73:a0:45:fe:c0:08:19:ff:21:5a:ae:9e:1d:64:cc:
         f5:35:29:cf:e7:23:a8:93:f8:94:3d:e5:31:94:63:cd:2c:ef:
         3d:8b:f1:0a:53:da:e6:af:97:13:55:fa:f1:5f:fd:25:d7:f9:
         ee:8a:08:4e:ec:5b:96:d3:6f:7a:4b:6e:12:7a:d8:d1:10:46:
         4d:8b:01:74:ef:6b:f3:e0:84:ca:09:30:ec:c4:e2:0c:da:bf:
         49:22:37:8a:90:dd:2a:c5:a7:32:81:0a:33:4b:99:66:5f:a5:
         41:cb:c8:3a:1f:4b:ae:2c:0c:0d:4d:3d:a2:ec:53:60:75:9a:
         55:90:d0:2c:71:a7:d0:1c:ee:d8:5e:56:39:cf:69:ac:ac:da:
         7e:52:bd:13:d4:cd:4b:07:25:f4:28:6d:eb:51:f8:84:b8:e5:
         56:ab:e2:bc:a2:e1:c4:d6:96:a4:cc:bb:f9:39:b9:71:b6:6d:
         dc:95:c2:4b:07:9e:22:dd:e5:d9:36:7a:7b:9e:aa:65:61:27:
         24:3e:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:06:57 2025 by rpki-client