Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
File:                     beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer (raw, json)
Hash identifier:          6Pp4RIjXpazANCSeN1kZSfhIEgPcHQCKLzbt6sdKzqA=
Subject key identifier:   CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584768F25318363041DA47CE7D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 17:32:16 +0000
Certificate not after:    Tue 05 Jan 2027 18:32:16 +0000
Subordinate resources:    AS: 395511
                          AS: 401338
                          IP: 67.22.96.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:68:f2:53:18:36:30:41:da:47:ce:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  2 17:32:16 2024 GMT
            Not After : Jan  5 18:32:16 2027 GMT
        Subject: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0e:2b:c1:49:19:68:b0:63:50:fb:07:76:ee:
                    b7:39:66:90:f9:f6:3d:72:d3:12:91:ea:12:5f:72:
                    bf:40:17:92:12:a0:a6:63:29:e8:68:7a:06:56:99:
                    04:e0:0f:c4:e1:a3:80:f3:6a:ec:e6:b5:7a:f6:08:
                    6e:93:43:4e:1d:ee:d7:1f:02:50:4c:ba:94:cd:42:
                    70:74:d0:9a:4b:71:6e:ce:5c:90:2b:2a:64:7f:1a:
                    28:d7:35:d2:23:e9:b2:e3:84:6f:1c:69:2f:4e:67:
                    62:c7:c4:a8:26:24:76:98:e4:d6:42:1f:61:81:ad:
                    7c:79:d6:ed:6f:39:92:7f:c3:86:fa:ab:ec:32:b5:
                    15:10:8c:74:d4:0e:9c:75:b2:ff:07:66:5f:e7:93:
                    1b:a3:4f:c7:e8:3a:fe:e0:64:df:9e:77:f9:b0:2c:
                    b6:22:36:4e:c2:90:ed:f7:b1:57:c1:1d:40:52:39:
                    2e:89:09:a5:7d:37:f5:a7:43:3e:d1:3d:f1:73:78:
                    13:54:61:79:d2:55:a6:7d:7f:68:af:9d:4d:00:a0:
                    ec:92:5e:c8:0e:bb:cc:f6:ef:de:0a:c0:da:73:ef:
                    ba:be:c2:02:b6:d8:e9:d0:82:3f:25:21:c2:f2:86:
                    84:f2:53:cc:c7:69:6b:c7:6b:15:33:dc:a7:c6:c8:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.96.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395511
                  401338

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:62:11:84:88:d8:fc:45:18:7d:3c:22:46:d4:34:0e:f0:6c:
         9e:48:66:18:0d:48:9a:e6:3a:0d:c8:8c:12:03:96:cf:ef:e2:
         aa:55:47:6d:06:9d:a5:30:b5:e3:34:32:6c:18:43:c1:ea:7d:
         82:cb:1c:b4:93:7f:6d:fc:25:96:31:e5:ba:44:da:6d:c9:ea:
         d5:a2:9d:4a:07:35:73:a0:06:38:95:90:0a:9c:f9:a6:76:56:
         07:83:b3:e5:8d:c5:d6:0d:50:cb:89:b4:c2:c3:34:8f:ff:e3:
         23:d2:35:68:17:ab:14:1c:2f:03:3a:f7:03:78:69:96:1e:70:
         20:ba:83:32:55:c3:33:87:d4:90:d3:a4:bb:f3:35:c6:42:4b:
         ca:0b:d9:4e:c4:54:89:42:2f:1a:29:11:2f:15:9a:2e:5d:61:
         8c:26:a8:cf:29:ab:5a:b6:e1:71:c4:f2:28:b6:d9:32:fd:5c:
         02:f5:ef:35:de:02:31:dc:ab:6b:30:17:c8:9a:91:16:2f:47:
         0e:a3:42:38:48:4b:b7:bb:d5:8d:6b:b3:3a:5d:c0:47:31:a9:
         1a:9e:cc:5e:f4:02:6b:10:27:db:77:50:95:2e:b4:eb:8e:c4:
         27:d3:aa:7b:8c:bd:19:df:52:9c:45:24:3f:a3:47:c0:b9:b7:
         25:54:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:20 2024 by rpki-client on console-ams.rpki-client.org