Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
File:                     cc3ad4cd-0893-42fc-a743-e36058983069.cer (raw, json)
Hash identifier:          jPsvWMF8a5h3NlvC9EdQ7BxwyumUeHAZAW6QO7ge1gk=
Subject key identifier:   D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858424E425EF1D0C85265E3F6F360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Jun 2023 16:12:03 +0000
Certificate not after:    Wed 24 Sep 2025 16:12:03 +0000
Subordinate resources:    AS: 2767
                          AS: 6401
                          AS: 6463
                          AS: 6537
                          AS: 6996
                          AS: 11079
                          AS: 15290
                          AS: 17154
                          IP: 66.46.0.0/16
                          IP: 71.19.160.0/19
                          IP: 74.216.0.0/16
                          IP: 104.36.8.0/21
                          IP: 104.145.0.0/20
                          IP: 104.251.96.0/20
                          IP: 142.194.0.0/16
                          IP: 159.18.0.0/16
                          IP: 162.223.4.0/22
                          IP: 162.249.88.0/21
                          IP: 162.253.136.0/21
                          IP: 172.110.64.0/20
                          IP: 184.94.0.0/17
                          IP: 192.40.232.0/21
                          IP: 198.100.128.0/21
                          IP: 199.85.120.0/22
                          IP: 199.212.160.0/19
                          IP: 206.191.64.0/18
                          IP: 206.222.64.0/19
                          IP: 207.181.64.0/18
                          IP: 207.230.224.0/19
                          IP: 207.245.0.0/18
                          IP: 207.245.192.0/18
                          IP: 209.82.0.0/17
                          IP: 209.112.0.0/18
                          IP: 209.146.128.0/17
                          IP: 209.153.192.0/18
                          IP: 216.13.0.0/16
                          IP: 216.23.128.0/19
                          IP: 216.123.0.0 -- 216.123.191.255
                          IP: 216.129.0.0 -- 216.129.95.255
                          IP: 216.191.0.0/16
                          IP: 2001:4c8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:42:5e:f1:d0:c8:52:65:e3:f6:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 22 16:12:03 2023 GMT
            Not After : Sep 24 16:12:03 2025 GMT
        Subject: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:9c:05:2e:b8:72:a9:4f:11:cd:fd:5e:35:
                    bf:93:33:6b:71:08:16:59:f3:fc:a1:b3:79:2c:cf:
                    aa:40:33:18:1d:a9:26:90:d2:9e:f1:c4:4d:70:d3:
                    ed:71:ee:bb:fe:f6:05:b7:c3:b9:50:7a:f3:9c:01:
                    b0:ca:4f:5b:ad:9a:cf:c8:ab:51:e2:74:92:de:d6:
                    f6:3a:d1:de:06:a7:04:b1:eb:f1:f2:fd:a2:b3:63:
                    64:23:21:84:e1:b0:ed:97:cb:40:15:94:74:e9:25:
                    d6:16:dd:00:29:4a:d0:4f:ca:6a:f5:ab:9b:2d:4f:
                    97:63:c7:98:b9:97:2d:d5:d1:67:2a:f1:d9:1d:b4:
                    7b:50:da:bc:94:e2:9a:ff:4d:69:bb:fd:d9:7e:02:
                    19:25:05:93:a6:31:a3:25:22:a3:4a:02:23:6c:8f:
                    11:4b:27:48:c4:0e:b2:d6:ab:c3:e7:44:3b:11:03:
                    3a:62:dd:2c:ad:c3:25:d6:65:55:93:70:ac:4a:b8:
                    3f:d4:ee:53:5e:3f:16:c4:7c:0d:d0:14:7e:fa:c4:
                    57:76:84:9d:27:3c:03:33:0e:30:4d:0e:e3:18:22:
                    a0:7f:ac:06:9c:c8:b3:e4:54:b2:74:d7:c6:ed:e3:
                    d8:9e:4e:dd:c9:26:6a:31:e1:de:63:39:98:48:ed:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.46.0.0/16
                  71.19.160.0/19
                  74.216.0.0/16
                  104.36.8.0/21
                  104.145.0.0/20
                  104.251.96.0/20
                  142.194.0.0/16
                  159.18.0.0/16
                  162.223.4.0/22
                  162.249.88.0/21
                  162.253.136.0/21
                  172.110.64.0/20
                  184.94.0.0/17
                  192.40.232.0/21
                  198.100.128.0/21
                  199.85.120.0/22
                  199.212.160.0/19
                  206.191.64.0/18
                  206.222.64.0/19
                  207.181.64.0/18
                  207.230.224.0/19
                  207.245.0.0/18
                  207.245.192.0/18
                  209.82.0.0/17
                  209.112.0.0/18
                  209.146.128.0/17
                  209.153.192.0/18
                  216.13.0.0/16
                  216.23.128.0/19
                  216.123.0.0-216.123.191.255
                  216.129.0.0-216.129.95.255
                  216.191.0.0/16
                IPv6:
                  2001:4c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2767
                  6401
                  6463
                  6537
                  6996
                  11079
                  15290
                  17154

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:15:67:93:26:40:f4:06:af:c9:e6:34:54:f9:11:c5:5b:
         2d:5a:f1:9b:93:81:18:eb:dc:17:23:5b:73:d2:22:1d:76:09:
         a2:95:38:e7:d6:06:03:41:82:6e:04:2e:8c:3d:b0:8b:f0:96:
         6c:57:ed:fb:57:5d:54:ee:c8:75:a2:11:91:bf:b6:e2:8c:fd:
         a3:62:5a:f3:df:91:4d:17:77:90:38:59:df:a3:9d:b3:54:9f:
         bf:d5:74:85:14:91:2d:65:7d:94:0b:0c:75:47:30:92:5a:5d:
         c8:a1:83:2f:2c:91:c1:d8:e4:02:84:3c:e7:a6:d4:7c:0e:f1:
         92:2c:0f:8f:0f:6d:b2:db:f3:04:99:bf:c8:d4:04:7a:32:99:
         9d:68:53:88:5a:2a:dc:19:4c:12:26:48:92:2d:33:e1:eb:f2:
         d3:7b:08:58:29:78:13:4b:26:d4:6f:00:fd:3c:47:39:71:08:
         b6:28:f4:69:9e:61:54:76:df:10:3b:cf:68:4c:33:93:70:90:
         1f:ae:31:64:ea:14:30:6a:94:3e:c7:08:dc:43:eb:35:8d:d7:
         3d:60:ea:7d:29:50:c5:7d:1c:69:1c:13:5b:65:60:bd:7f:af:
         41:41:ad:45:6f:b7:fc:b3:fc:83:78:a2:8d:f8:22:5b:34:cb:
         ad:b3:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:23 2024 by rpki-client on console-fra.rpki-client.org