Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
File:                     c3399d97-64f6-4e12-8cbe-4d11491ad816.cer (raw, json)
Hash identifier:          WwpHW+xpmu4HC5QuZ/+keHUYhKWp5dFNlQSyZXq/iZw=
Subject key identifier:   AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858421435F2CFF01D413608BC89C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Jun 2023 21:10:08 +0000
Certificate not after:    Wed 03 Sep 2025 21:10:08 +0000
Subordinate resources:    IP: 152.157.0.0/16
                          IP: 164.116.0.0/16
                          IP: 168.99.0.0/16
                          IP: 168.212.0.0/16
                          IP: 169.204.0.0/16
                          IP: 192.206.201.0/24
                          IP: 192.207.104.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:14:35:f2:cf:f0:1d:41:36:08:bc:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  1 21:10:08 2023 GMT
            Not After : Sep  3 21:10:08 2025 GMT
        Subject: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:0b:03:a4:a3:3e:c2:39:e5:73:94:ac:60:
                    a7:f0:c0:2d:54:03:2e:de:e6:2f:91:ad:19:9f:fb:
                    bb:ad:f7:1e:cf:05:eb:2f:25:13:32:cd:00:46:7d:
                    67:1d:bf:58:f0:2a:cd:33:cd:3b:d3:8e:ed:52:cc:
                    0b:d9:76:11:c8:4c:3a:21:67:40:d2:04:f3:cb:63:
                    18:c5:16:a7:8d:8a:7e:d7:31:04:e4:15:58:74:ff:
                    ff:d1:12:a2:bb:d0:d2:1b:2f:f9:0e:34:6c:14:db:
                    a3:85:e7:bc:44:22:bf:7e:10:48:39:f6:76:bf:81:
                    fd:b1:c2:70:57:96:82:ea:84:72:7b:78:5a:9b:37:
                    e8:d8:46:01:57:fb:29:fc:4f:e6:cc:b4:f4:0a:9d:
                    bf:8b:88:ae:4b:90:b9:b0:e8:b6:a9:02:a1:01:f2:
                    75:3d:35:67:68:28:9c:b5:14:ec:cf:bf:0a:fb:62:
                    70:70:cf:72:bf:75:72:b0:60:ca:62:e1:9c:86:fa:
                    ef:cd:2c:18:23:1c:cb:da:c3:80:d1:d1:ad:ff:43:
                    db:2f:f0:71:c0:a7:af:99:44:6d:bb:64:46:c2:47:
                    7f:eb:28:0a:5f:a6:42:b8:0c:20:f2:6b:61:67:ee:
                    d7:d6:ad:9a:13:25:96:ca:84:54:04:70:73:89:1d:
                    69:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.157.0.0/16
                  164.116.0.0/16
                  168.99.0.0/16
                  168.212.0.0/16
                  169.204.0.0/16
                  192.206.201.0/24
                  192.207.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:24:9e:70:c4:e3:fc:48:0a:42:6d:56:26:e6:a0:1e:38:
         5a:88:82:0b:86:2a:6a:78:a0:d0:eb:bc:11:65:97:ba:16:80:
         f8:11:da:dd:66:9f:5f:95:da:14:68:1c:1d:7a:a7:cb:f4:79:
         3a:1f:3f:24:2a:9a:71:98:84:f5:e2:78:7c:55:fa:2c:73:24:
         ad:dc:61:06:30:9c:51:5e:fd:f5:e2:09:11:99:f6:ca:1c:c1:
         a6:77:40:a2:9c:2a:a5:fb:52:2b:a0:2d:62:90:9d:3e:dc:b3:
         61:1e:01:f8:d4:54:c4:79:32:c2:2a:50:bf:b8:b7:2f:7d:2c:
         53:8f:7b:b3:96:c1:82:ed:0f:26:2c:00:e1:4f:1c:fc:e3:e0:
         f9:28:b9:17:de:a9:43:28:1d:bf:4d:1e:c3:87:79:fb:53:dd:
         04:c5:30:fb:97:c0:2d:ff:84:f7:aa:9d:0a:27:40:05:03:93:
         93:60:e6:05:2e:43:f5:d9:8e:92:b3:b4:de:c6:74:8e:63:9f:
         68:8b:49:d0:35:bb:2b:68:43:b3:ba:63:a7:a6:09:be:c4:1e:
         e9:ec:68:72:c6:76:e3:ee:a8:f4:02:01:3e:07:b2:1d:a7:fa:
         33:68:97:8b:8e:c6:36:0c:3a:87:cb:00:10:09:d6:22:ad:d2:
         79:ac:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:51:57 2024 by rpki-client on console-ams.rpki-client.org