Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
File:                     1773b91b-a601-4f0d-af4c-93b3f65e6404.cer (raw, json)
Hash identifier:          2qBzD4x1GALzErNPd08mAY7t4D5Q73vuPfD+1GqKTb4=
Subject key identifier:   E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CD9E95641A45581F1238DAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 19:00:11 +0000
Certificate not after:    Wed 10 Feb 2027 19:00:11 +0000
Subordinate resources:    AS: 19165
                          IP: 136.24.0.0/13
                          IP: 162.216.196.0/22
                          IP: 162.222.100.0/22
                          IP: 173.247.192.0/20
                          IP: 192.77.236.0/22
                          IP: 192.80.0.0/21
                          IP: 199.21.84.0/22
                          IP: 199.87.80.0/21
                          IP: 204.14.152.0/21
                          IP: 204.28.112.0/20
                          IP: 208.66.24.0/21
                          IP: 208.72.136.0/21
                          IP: 208.80.64.0/21
                          IP: 208.87.56.0/21
                          IP: 2604:5500::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:9e:95:64:1a:45:58:1f:12:38:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 19:00:11 2024 GMT
            Not After : Feb 10 19:00:11 2027 GMT
        Subject: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:48:f7:c1:1f:9a:eb:1b:6e:3f:22:63:12:
                    86:c4:24:3e:ca:a8:c6:17:99:ad:9b:a1:81:31:ba:
                    44:96:a0:eb:09:69:64:81:54:a0:44:ca:9c:d2:a9:
                    6a:72:cc:29:34:c6:76:3a:89:53:78:56:b0:a8:0c:
                    5c:b1:80:f4:13:25:2f:fd:f0:5f:a2:a9:22:2a:33:
                    9e:29:d5:42:eb:f7:22:49:64:12:4c:33:7a:de:ab:
                    c6:0b:31:4d:e0:00:f9:05:4c:bd:a3:5d:cc:a1:3e:
                    07:ca:68:de:5e:1d:67:6d:f7:fd:57:0d:89:a9:a7:
                    97:db:10:00:86:5c:42:64:9e:cb:ad:f3:9f:db:ea:
                    8f:cf:ff:15:69:80:ed:64:ef:f7:a0:d0:e6:e2:bc:
                    69:8c:79:45:23:2f:e4:a3:77:50:cf:15:86:42:7f:
                    fa:6e:e5:13:1e:a2:fe:1a:5a:f7:66:a7:d2:b5:43:
                    bd:93:de:93:b9:c8:c6:cb:f9:50:11:f5:ec:c7:9f:
                    81:9a:94:9a:a2:d1:5a:70:ae:1a:eb:75:aa:5e:96:
                    50:cf:2a:e7:94:77:a5:d5:d4:fc:59:ac:a2:ec:29:
                    b3:ec:79:45:db:95:08:62:f2:5a:9c:8e:e6:e9:1b:
                    fa:92:2b:2b:0d:54:35:96:56:ec:5f:b0:af:d8:4c:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.24.0.0/13
                  162.216.196.0/22
                  162.222.100.0/22
                  173.247.192.0/20
                  192.77.236.0/22
                  192.80.0.0/21
                  199.21.84.0/22
                  199.87.80.0/21
                  204.14.152.0/21
                  204.28.112.0/20
                  208.66.24.0/21
                  208.72.136.0/21
                  208.80.64.0/21
                  208.87.56.0/21
                IPv6:
                  2604:5500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19165

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:7f:17:ee:4d:17:b7:93:46:d9:88:5d:c3:ed:58:23:cb:
         49:b9:1a:0d:66:47:c2:5f:d5:18:4c:26:cb:f6:ac:7d:01:1b:
         6e:0c:4c:d3:93:a4:a2:dd:c0:1d:2a:55:11:3a:09:87:a4:99:
         6d:d6:55:6c:ce:1f:1f:ce:9e:33:a2:7c:c3:c5:68:99:64:29:
         65:7b:6c:8e:b0:82:7b:c5:fe:5e:d0:dc:45:8a:91:56:a0:97:
         6d:3e:95:2a:13:25:37:69:d1:e5:80:c9:bf:b5:85:3b:42:f9:
         99:b7:cf:9a:df:a6:fa:7e:4a:c2:be:30:bb:58:cf:e4:3a:21:
         ef:23:fa:19:e4:16:95:46:14:f0:3f:27:36:6f:5e:be:a6:e1:
         49:b3:b8:f8:29:8b:9c:8c:af:f3:58:b8:93:b4:4c:b3:a1:84:
         d4:fb:1e:56:57:8d:2c:e0:0d:7a:9c:9a:c1:ba:18:6e:6d:66:
         3f:77:3c:1c:13:5d:13:18:16:8e:ec:dc:fd:74:15:95:de:88:
         4c:d3:61:ea:bd:fa:47:d1:bf:fb:e0:b2:e7:f5:e4:ad:4d:cf:
         42:67:d2:5a:90:30:6f:bc:2c:0a:89:eb:53:68:9a:86:c9:b6:
         93:d5:ca:78:9c:1e:68:ba:7f:22:b3:c9:14:7c:b6:d5:fc:58:
         5c:8e:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:25 2024 by rpki-client on console-fra.rpki-client.org