Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
File:                     acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer (raw, json)
Hash identifier:          FmpM5niifhw+xsz9mKi+TIRPuMHedTeGx0X7ibiFmbA=
Subject key identifier:   0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847C75D9068EC75D92FF0605B60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Nov 2024 13:14:20 +0000
Certificate not after:    Mon 08 Feb 2027 13:14:20 +0000
Subordinate resources:    AS: 393990
                          IP: 192.33.167.0/24
                          IP: 192.160.255.0/24
                          IP: 2620:120:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:5d:90:68:ec:75:d9:2f:f0:60:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  5 13:14:20 2024 GMT
            Not After : Feb  8 13:14:20 2027 GMT
        Subject: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:5f:10:f4:f7:bf:f7:a8:3d:85:d7:49:3f:
                    f6:6d:18:4c:99:18:11:1a:69:e7:89:8b:d9:1c:18:
                    0d:ba:6e:3c:e7:3f:89:23:02:4f:c5:19:b3:5b:53:
                    a8:87:12:19:4a:e5:28:d2:86:b5:32:bd:b6:c2:3f:
                    08:21:ad:8f:72:c1:03:17:bd:b0:1b:bd:0b:21:0c:
                    55:3b:67:71:52:dc:55:5e:91:ae:2d:a5:09:51:ff:
                    91:63:09:cf:02:79:bb:04:32:7d:93:22:ed:49:ec:
                    d1:15:56:fc:9c:c1:7c:c1:3c:87:f3:75:f9:9d:87:
                    34:71:c5:63:8c:2d:26:f0:8d:c9:00:db:d0:8d:0a:
                    6b:1d:60:0d:8e:26:7f:d4:11:91:b2:ce:6d:8b:8c:
                    86:5d:07:87:8a:47:98:5a:d6:bb:85:ff:b4:d4:76:
                    8b:f9:fe:dc:c1:fb:c6:e5:6d:95:7a:9e:2f:d2:13:
                    ce:9e:ee:a4:7b:7e:d6:ae:06:eb:99:07:f3:df:37:
                    39:4a:1b:47:67:e9:24:e9:2f:ae:da:14:bf:91:48:
                    4e:b1:98:75:a3:a9:df:0e:39:61:2f:ea:90:4c:be:
                    19:73:1e:3c:49:5a:57:16:34:09:f9:50:12:86:ba:
                    39:9f:24:1f:2e:25:c7:e1:99:ec:03:cc:db:3f:6c:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.167.0/24
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:00:65:55:8a:ed:15:b0:ea:a4:3f:58:d9:9e:1b:4d:58:
         74:f5:94:77:d4:b4:e6:d4:0e:6e:ca:3b:c8:d8:f7:8c:ee:14:
         ee:17:80:80:85:54:ce:64:e9:e0:29:93:00:33:7b:af:35:63:
         a8:93:b4:f5:04:f2:84:eb:30:9c:07:3b:59:80:65:30:bd:e5:
         e9:4e:fa:c6:8d:b1:14:e5:31:ad:64:90:f9:dc:7f:41:a0:a8:
         08:06:d1:df:30:48:6b:6a:84:6e:e3:bf:88:fc:aa:e6:10:b5:
         aa:42:33:2e:fa:c1:08:7d:5c:93:45:2e:ed:c2:dd:e3:8d:42:
         15:7f:c7:67:a8:ef:92:7b:ce:75:91:be:c2:58:0d:b9:fe:3f:
         03:0a:7d:0b:36:3c:a7:c2:d0:4d:bd:1b:c2:2d:7c:12:ff:2b:
         53:26:53:9a:ae:35:9e:9f:2c:bd:e9:8f:5c:69:b5:da:4e:2a:
         ab:f9:5c:f4:6e:57:b3:f8:5f:ed:bf:f3:96:ac:6f:4a:c5:3f:
         23:b7:93:fa:62:b2:d0:b8:fd:f6:49:bf:4c:04:fb:3e:f6:18:
         5b:fc:ea:cd:85:07:bd:37:42:0e:8b:26:a4:14:c9:27:bd:8c:
         23:c1:c5:d9:d2:d5:fa:cc:ad:c4:b1:b2:2a:0a:14:51:8b:d1:
         ac:e1:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:18 2024 by rpki-client on console-ams.rpki-client.org