Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
File:                     aac59959-e898-42ad-9d0a-f1b87a7d0114.cer (raw, json)
Hash identifier:          N8Hgb+94ursdD1MlAf0EW0zUmaTGXGRdXcmAYJRdONA=
Subject key identifier:   BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584766FEA1AAD3E8E25BF17150C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 00:45:27 +0000
Certificate not after:    Tue 05 Jan 2027 01:45:27 +0000
Subordinate resources:    AS: 46455
                          AS: 399660
                          IP: 67.22.208.0/20
                          IP: 70.37.240.0/20
                          IP: 76.77.16.0/20
                          IP: 161.199.60.0/22
                          IP: 199.47.200.0/21
                          IP: 199.71.228.0/22
                          IP: 207.53.228.0/22
                          IP: 209.35.100.0/22
                          IP: 209.35.152.0/22
                          IP: 209.51.0.0/21
                          IP: 2604:c880::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:fe:a1:aa:d3:e8:e2:5b:f1:71:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  2 00:45:27 2024 GMT
            Not After : Jan  5 01:45:27 2027 GMT
        Subject: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:bb:87:06:4d:77:67:dc:1b:e4:12:08:92:
                    d1:8a:25:88:e3:63:2a:5e:49:dc:1f:8a:c8:1f:45:
                    51:1a:ec:50:49:b7:65:04:a8:c2:90:ea:8e:4f:7e:
                    03:54:b0:c7:a4:ee:35:ea:bb:82:63:f8:91:2d:76:
                    a0:ff:98:79:1b:04:ce:20:c1:da:98:b2:41:cd:6d:
                    b7:64:70:57:65:9a:62:1c:06:91:44:f9:05:e8:08:
                    cb:e5:86:6f:99:0b:44:36:7b:32:70:fd:f6:75:57:
                    be:d5:ee:aa:ec:ab:b9:b4:c0:49:fc:0d:8d:e6:42:
                    93:14:b5:ba:c3:f3:e1:52:7a:b0:7c:e9:2c:84:af:
                    f1:7c:e7:f4:3f:16:7b:56:4c:4b:ec:bc:be:2c:26:
                    25:ff:5b:ae:c3:51:9b:6c:0e:d7:19:51:8e:3d:97:
                    40:51:af:af:c4:23:81:37:fe:1d:74:aa:2a:9e:2c:
                    38:cf:70:33:f1:85:cc:5d:0f:c8:66:1a:ee:86:92:
                    e8:e5:b2:69:16:ee:a3:a3:8f:2d:f9:db:f7:bf:db:
                    ff:40:be:80:09:c0:d2:31:6c:56:ab:4a:f0:68:27:
                    44:0a:52:39:d9:4c:1e:68:a5:6a:ab:2d:57:94:47:
                    95:39:bd:f9:22:0e:33:00:e8:55:e3:7a:cf:69:0d:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.208.0/20
                  70.37.240.0/20
                  76.77.16.0/20
                  161.199.60.0/22
                  199.47.200.0/21
                  199.71.228.0/22
                  207.53.228.0/22
                  209.35.100.0/22
                  209.35.152.0/22
                  209.51.0.0/21
                IPv6:
                  2604:c880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46455
                  399660

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bd:a7:e6:20:51:57:a6:09:ce:af:92:e8:92:9b:18:ba:a3:
         92:7d:3a:e0:87:6e:c3:b5:0a:51:da:49:69:30:06:04:d0:6f:
         07:5a:43:8b:d8:29:f4:02:1f:30:ce:5e:45:21:19:25:f7:d0:
         17:e2:ab:e2:04:8f:7c:a6:3d:05:03:88:5d:a6:9a:8e:d2:f6:
         7b:d1:fe:51:5d:a3:ec:98:0b:0b:28:fa:ca:e0:b9:2d:65:18:
         5f:fc:23:8f:27:33:e0:36:29:00:4a:9e:a5:f2:bc:00:0e:99:
         4f:71:11:f8:95:23:81:44:bc:ee:c3:19:c8:57:9f:02:90:99:
         bf:19:fa:ca:94:84:65:ab:df:16:cb:69:13:60:f2:fc:1a:e7:
         b1:ef:f6:13:7a:b0:c4:46:30:90:cf:76:ac:ad:96:62:cc:34:
         43:b3:d0:98:9d:13:ce:14:78:5f:d5:aa:70:8b:85:57:d7:40:
         6b:e0:eb:88:e3:4b:58:12:38:22:4f:01:08:2c:83:4c:a5:72:
         ba:66:e8:92:fb:cd:16:4a:76:f9:50:8c:d1:46:49:5f:6a:b5:
         6f:94:f2:69:2c:08:a3:7f:62:c1:fa:8f:fc:57:fd:6a:9c:aa:
         c5:1c:64:c0:fb:d6:c6:8c:a8:b8:f2:1b:34:76:cb:9a:d7:ab:
         4a:4f:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:06 2024 by rpki-client on console-ams.rpki-client.org