Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81.cer
File:                     8753160d-30e1-48b1-afdb-394389cbcc81.cer (raw, json)
Hash identifier:          DWLMfgubZajrV1y5nHnucL+jjQJ1B5e9V0sFNm85/+k=
Subject key identifier:   F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858476EA3E9AEA78B9581AE663280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 04 Oct 2024 18:29:08 +0000
Certificate not after:    Thu 07 Jan 2027 19:29:08 +0000
Subordinate resources:    IP: 64.85.32.0/19
                          IP: 97.75.192.0/19
                          IP: 162.211.192.0/21
                          IP: 162.222.120.0/21
                          IP: 162.246.128.0/22
                          IP: 162.255.248.0/21
                          IP: 172.85.80.0/21
                          IP: 172.103.48.0/20
                          IP: 198.1.56.0/21
                          IP: 199.91.80.0/21
                          IP: 199.192.184.0/21
                          IP: 199.193.88.0/21
                          IP: 207.232.96.0/19
                          IP: 208.85.212.0/22
                          IP: 209.207.64.0/18
                          IP: 216.21.128.0/19
                          IP: 216.40.96.0/19
                          IP: 2607:fc70::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:a3:e9:ae:a7:8b:95:81:ae:66:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  4 18:29:08 2024 GMT
            Not After : Jan  7 19:29:08 2027 GMT
        Subject: CN=8753160d-30e1-48b1-afdb-394389cbcc81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:9e:70:e8:70:c9:3c:38:80:c9:5a:0c:31:
                    03:36:c2:3f:f7:7d:19:1d:86:41:27:e1:18:67:fb:
                    e9:e9:d1:1b:53:99:27:4c:6e:e1:d9:6f:dc:f0:f9:
                    11:0c:d1:4a:3e:5e:19:e3:fd:55:b0:73:e3:e2:08:
                    d1:91:a1:3e:ef:79:6e:cb:5b:14:27:4e:03:be:c6:
                    a2:48:99:fb:46:1b:03:23:e6:dc:2d:70:fa:90:c6:
                    ae:ff:84:fa:74:99:13:6c:80:20:62:0b:2f:28:ef:
                    84:77:df:a6:3d:78:a7:8c:63:f6:ed:07:6e:0d:06:
                    bf:32:52:ee:09:36:0e:d2:ae:d4:5b:9e:8d:f8:bd:
                    a1:3d:4c:ed:83:9d:3b:bc:12:d8:d8:5a:80:62:3d:
                    de:dd:43:17:5d:fe:f5:76:da:22:b6:c6:3f:fb:2a:
                    b3:78:d4:0c:63:48:3f:bf:65:11:1d:8e:d7:c4:b7:
                    41:b8:2a:eb:cd:3c:e6:3b:b2:bb:90:d6:8f:f1:6e:
                    2c:8f:bf:f4:a2:f8:dd:06:0f:8e:b7:bc:da:a8:53:
                    51:79:2e:a4:b6:bc:fe:95:80:d7:e4:ae:39:6a:99:
                    ce:1b:1e:d7:cb:ca:1c:70:91:b0:ec:df:43:39:9e:
                    66:08:8a:38:b9:0e:fb:39:3e:7a:a5:de:23:74:e3:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:BE:13:FB:A9:F8:E4:91:49:CD:66:0D:FD:65:4F:4E:F9:55:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8753160d-30e1-48b1-afdb-394389cbcc81/8753160d-30e1-48b1-afdb-394389cbcc81.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.85.32.0/19
                  97.75.192.0/19
                  162.211.192.0/21
                  162.222.120.0/21
                  162.246.128.0/22
                  162.255.248.0/21
                  172.85.80.0/21
                  172.103.48.0/20
                  198.1.56.0/21
                  199.91.80.0/21
                  199.192.184.0/21
                  199.193.88.0/21
                  207.232.96.0/19
                  208.85.212.0/22
                  209.207.64.0/18
                  216.21.128.0/19
                  216.40.96.0/19
                IPv6:
                  2607:fc70::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:aa:3a:c2:84:8c:98:ff:03:49:e1:9f:5e:ae:88:44:c9:a6:
         85:4d:05:22:d6:8d:65:5c:4d:9d:df:1d:a7:36:a4:6b:cd:a0:
         4f:ed:e5:39:c7:34:8e:47:4c:cd:15:f4:f0:4f:18:75:5f:01:
         b9:e5:24:41:9d:a4:d4:4a:2e:c3:7b:f9:3e:ca:79:d1:ff:1d:
         0b:36:7c:eb:ad:3b:af:44:41:d0:c4:53:5d:5d:0e:ac:ab:c3:
         41:b3:e6:8f:0b:07:d8:46:47:db:d8:6d:fc:3e:16:c6:13:0a:
         50:d1:79:11:51:2c:81:14:f3:42:61:2a:b2:6e:45:b8:f2:94:
         50:2c:77:47:8b:7f:7b:a9:6a:ac:50:fc:b6:d4:52:fc:7e:d8:
         8e:1a:8f:34:88:a0:05:fb:87:21:b2:f9:5e:34:f4:a9:b7:8c:
         b4:f4:a4:29:a3:a8:f3:b3:b2:db:23:ea:26:96:4a:be:23:11:
         4e:b7:9d:14:b2:0d:83:d9:c4:be:74:cd:da:ce:2a:e9:a5:64:
         f6:7a:4a:17:25:bc:10:f9:9f:02:62:37:b6:d4:15:74:da:52:
         47:06:f8:a3:e8:92:d5:97:4a:a6:25:ff:c2:96:fe:f6:49:94:
         9b:3b:09:d2:6b:66:19:72:e9:6a:6d:2a:a9:15:75:e7:22:0d:
         b6:d0:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:28 2024 by rpki-client on console-fra.rpki-client.org