Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer
File:                     11f590b6-eb6e-4969-824b-0df247220283.cer (raw, json)
Hash identifier:          mFHM0R7gTrxxZWEBvR9L3i9rdBLouCx3eKk0fxl6GJk=
Subject key identifier:   82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858479E1A317542C6EBD041482840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Oct 2024 18:30:27 +0000
Certificate not after:    Wed 20 Jan 2027 18:00:53 +0000
Subordinate resources:    AS: 46165
                          AS: 395208
                          AS: 395301
                          AS: 396139
                          IP: 23.227.216.0/22
                          IP: 27.121.114.0/23
                          IP: 64.190.89.0/24
                          IP: 64.190.102.0/24
                          IP: 69.48.208.0/24
                          IP: 103.135.128.0/23
                          IP: 139.60.76.0/22
                          IP: 148.59.143.0/24
                          IP: 205.201.28.0/23
                          IP: 209.172.4.0/24
                          IP: 209.251.28.0/22
                          IP: 2604:4440::/32
                          IP: 2607:6380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:1a:31:75:42:c6:eb:d0:41:48:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 21 18:30:27 2024 GMT
            Not After : Jan 20 18:00:53 2027 GMT
        Subject: CN=11f590b6-eb6e-4969-824b-0df247220283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:de:61:52:ba:75:bf:e6:51:ab:62:a7:87:b3:
                    db:ae:6f:6c:ab:b6:e4:8e:40:c7:1b:29:54:d5:d2:
                    98:be:36:c2:bf:95:05:99:fe:d3:71:6b:e6:40:c5:
                    39:a7:0a:3e:de:62:ca:4c:8f:48:f8:a1:2d:2a:a6:
                    c7:56:83:8d:d4:f8:21:65:2c:b0:7a:bb:3e:8b:68:
                    a8:51:ae:98:a1:bb:f0:91:10:e9:44:2d:34:f3:d7:
                    a9:a9:2e:5f:00:c6:ee:58:c5:0b:2a:82:b0:8f:2d:
                    bc:9a:fe:8d:62:d0:48:58:1a:86:f4:0e:17:d1:d6:
                    7f:25:79:da:96:ac:d3:3e:c5:67:95:76:d2:43:e9:
                    ae:a4:e8:b7:1e:c6:6a:18:90:86:d7:65:cd:83:13:
                    64:58:d9:0d:fb:d5:ce:96:72:91:1a:a2:86:f9:b2:
                    f4:d7:36:2c:e9:61:fb:ab:eb:99:e3:db:0e:bb:0b:
                    4b:f2:19:9c:05:8f:c4:7f:d7:eb:3b:01:b2:88:86:
                    8d:c8:04:13:37:e4:cc:b8:49:5e:89:5c:93:a3:b5:
                    8c:58:8d:54:89:91:81:23:87:07:9b:2e:e7:6d:0d:
                    66:dc:62:1f:12:5b:10:12:75:83:8d:1f:76:01:bc:
                    64:aa:f8:a0:8c:76:dd:73:23:23:79:17:0c:1e:94:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.216.0/22
                  27.121.114.0/23
                  64.190.89.0/24
                  64.190.102.0/24
                  69.48.208.0/24
                  103.135.128.0/23
                  139.60.76.0/22
                  148.59.143.0/24
                  205.201.28.0/23
                  209.172.4.0/24
                  209.251.28.0/22
                IPv6:
                  2604:4440::/32
                  2607:6380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46165
                  395208
                  395301
                  396139

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:73:e8:ce:a4:bd:1c:46:03:7d:56:1c:84:71:63:8b:af:
         37:3f:a2:5b:22:9c:bf:99:60:dc:e9:73:a8:e7:e8:1a:16:8a:
         66:b8:ee:b4:9b:73:ea:df:3a:46:ce:df:07:de:12:20:42:85:
         24:5b:bd:f4:ac:71:ba:b1:35:a5:06:67:7a:47:2e:04:48:e9:
         41:44:69:c6:ab:d4:29:51:1f:d0:6f:e2:28:39:95:e2:39:9e:
         33:6f:7e:8c:72:0f:36:ba:fe:de:21:3c:3d:46:c1:6f:30:0f:
         29:22:9a:1d:15:67:5a:23:c9:86:6d:1b:64:c0:2f:11:52:b7:
         bc:aa:81:2c:22:7d:0a:d4:18:73:5a:03:8e:a7:97:09:99:3c:
         da:2a:20:2f:11:cb:cb:18:46:dc:55:f5:86:20:7b:ae:53:33:
         d0:d1:6c:12:f0:09:d4:61:f9:ed:dd:23:05:92:46:08:e1:fe:
         d5:72:70:5e:67:fc:d0:52:64:25:c0:24:05:2d:e8:a2:40:a0:
         26:2a:fd:e3:0a:39:50:5a:ef:78:44:b1:43:10:04:6d:e3:f8:
         8b:98:c1:da:92:1d:80:de:f7:5d:ea:45:c7:52:ae:12:43:e0:
         eb:52:57:30:6b:86:22:27:0c:66:c7:23:ad:1d:e2:91:64:93:
         8d:84:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:25 2024 by rpki-client on console-fra.rpki-client.org