Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
File:                     f78a234f-9553-446a-965d-0bfffa402f1b.cer (raw, json)
Hash identifier:          31T5odunWgqsKntHKUJvcbPgHGoJhTU7urEpV/X+7Kw=
Subject key identifier:   C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842EDB7F70C48D62F77DDDE4C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 18 Aug 2023 19:02:30 +0000
Certificate not after:    Thu 20 Nov 2025 20:02:30 +0000
Subordinate resources:    AS: 22925
                          IP: 66.208.0.0/18
                          IP: 75.103.224.0/19
                          IP: 107.181.96.0/20
                          IP: 162.211.160.0/21
                          IP: 162.221.168.0/21
                          IP: 162.250.240.0/21
                          IP: 168.235.176.0/20
                          IP: 192.95.72.0/21
                          IP: 198.207.24.0/21
                          IP: 199.119.112.0/21
                          IP: 199.230.112.0/21
                          IP: 205.175.216.0/21
                          IP: 205.201.240.0/20
                          IP: 208.118.160.0/19
                          IP: 216.59.96.0/19
                          IP: 216.185.0.0/19
                          IP: 2610:f0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ed:b7:f7:0c:48:d6:2f:77:dd:de:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 18 19:02:30 2023 GMT
            Not After : Nov 20 20:02:30 2025 GMT
        Subject: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:aa:b8:e2:db:6c:3c:c4:d0:60:01:ab:ec:
                    cd:d1:3c:dc:e0:71:f8:32:1c:6c:4c:72:cf:28:84:
                    ab:11:d5:db:d2:f1:48:39:44:a7:98:95:5f:93:f3:
                    16:32:58:29:37:46:2e:31:97:e5:21:27:77:7b:91:
                    2c:d5:42:d0:14:8e:54:2a:cf:f1:fa:07:da:f9:46:
                    54:92:4b:13:6e:c6:63:bc:43:2a:17:c5:2d:c8:b4:
                    5a:75:2e:93:74:f5:31:2c:7e:61:8d:30:9b:85:ca:
                    7f:01:c2:91:1d:98:d4:c2:aa:20:35:c1:c8:2e:f2:
                    f4:58:cc:d1:49:86:53:f4:c9:a0:18:f0:74:02:7e:
                    26:81:bb:28:e6:04:23:4c:7a:d0:68:d5:fa:eb:2e:
                    f3:c5:2c:b1:1a:2b:68:3e:e7:bd:2a:59:00:70:83:
                    92:b1:f8:ff:45:7f:a5:a6:d9:e8:41:a7:c8:e4:3c:
                    f1:65:8b:e7:59:3a:34:75:df:c9:93:a0:57:66:5f:
                    38:82:13:ad:6a:79:7b:25:93:51:45:24:6c:14:f2:
                    40:97:3c:75:49:2d:53:81:24:1c:a6:38:a4:66:30:
                    ee:a5:a2:14:02:45:40:2d:d1:1e:af:e3:0a:ce:7a:
                    ee:68:1d:e7:21:0f:5c:70:86:32:0a:f4:d9:92:7e:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.208.0.0/18
                  75.103.224.0/19
                  107.181.96.0/20
                  162.211.160.0/21
                  162.221.168.0/21
                  162.250.240.0/21
                  168.235.176.0/20
                  192.95.72.0/21
                  198.207.24.0/21
                  199.119.112.0/21
                  199.230.112.0/21
                  205.175.216.0/21
                  205.201.240.0/20
                  208.118.160.0/19
                  216.59.96.0/19
                  216.185.0.0/19
                IPv6:
                  2610:f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22925

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:79:65:ca:8a:ad:5b:c5:36:0b:27:3e:24:e9:32:f7:d2:
         ca:b9:5d:f6:3e:3b:0a:5f:9e:80:83:37:d0:0b:5b:39:d1:06:
         10:e5:1c:86:12:5d:5e:b3:63:3d:55:83:4e:92:30:28:a8:bc:
         8f:7e:8d:0d:07:cd:64:aa:f3:da:6f:65:b2:cb:11:93:88:8b:
         4f:b6:99:84:1e:e7:42:fe:a2:8b:92:5f:b4:32:5e:16:9d:3f:
         d0:7e:f8:fb:53:67:6e:03:89:d9:41:e3:3c:78:18:59:5d:58:
         fb:04:48:e0:dd:8d:c4:ca:49:55:61:1a:f3:c1:c8:ae:87:eb:
         4a:ea:5f:51:1f:bb:4b:1f:fd:1b:5a:64:68:ca:c7:5d:9c:7f:
         e9:f5:d1:3b:01:91:1c:03:a1:a4:ee:21:92:ab:5b:ed:ce:e5:
         5c:36:7f:16:0b:65:c5:ef:c3:ef:55:fa:d3:84:23:1a:96:75:
         cf:c5:66:1f:4a:7d:a3:4e:ea:b8:01:86:9c:55:6b:8b:98:be:
         ec:75:21:06:4c:e0:7d:eb:c1:84:68:3b:e5:da:6e:8d:36:20:
         ba:b1:e1:c3:82:7a:aa:3a:e7:e8:f2:d5:e2:da:ea:e5:21:de:
         d5:26:d9:b4:91:33:58:e2:3a:63:0f:da:4e:69:bc:af:cc:04:
         62:03:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:12:52 2024 by rpki-client on console-ams.rpki-client.org