Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer
File:                     dbf66384-fa53-47fb-938a-f1e5064023e5.cer (raw, json)
Hash identifier:          l45uJYR0x3SB+CQdW2nIBUYfu9KXX+wjuAE3HHtgyVw=
Subject key identifier:   D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847DBAF6723BD86E77977C82140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Nov 2024 19:55:24 +0000
Certificate not after:    Mon 15 Feb 2027 19:55:24 +0000
Subordinate resources:    AS: 7973
                          IP: 129.176.0.0/16
                          IP: 198.190.250.0 -- 198.190.252.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:af:67:23:bd:86:e7:79:77:c8:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 12 19:55:24 2024 GMT
            Not After : Feb 15 19:55:24 2027 GMT
        Subject: CN=dbf66384-fa53-47fb-938a-f1e5064023e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:cc:9f:1e:78:a7:13:0a:fd:00:b4:e3:4c:
                    7e:e6:d4:22:b7:5c:72:99:30:b3:5e:0e:f5:90:2e:
                    9b:26:19:17:ad:75:99:4f:89:13:3e:83:bc:3c:1b:
                    03:64:17:f0:b3:1b:be:0f:92:69:a9:ba:3d:a0:19:
                    52:5f:28:b4:f5:49:7d:51:2e:a4:54:ca:6b:4f:63:
                    9e:2f:0a:7d:82:a9:de:71:86:30:e5:7e:01:16:6a:
                    56:50:e4:c9:10:20:58:b3:f3:60:d9:99:ea:1b:c3:
                    c6:06:35:7f:24:7f:3a:ec:15:84:ad:3e:92:77:d2:
                    92:c5:b7:29:7a:3f:7f:b7:46:1e:ca:53:8f:6f:ed:
                    8e:f7:63:b1:c4:29:25:a5:fa:a7:d7:c9:d8:bf:48:
                    f1:02:41:f3:81:34:0f:9c:44:7c:dd:fc:2a:ad:33:
                    19:01:54:df:19:86:b9:1f:51:57:d5:18:df:2a:20:
                    bf:25:dd:06:74:f8:0a:99:66:0e:58:e5:6b:d7:29:
                    3c:4d:74:8f:6e:bc:28:c6:72:ec:b8:cc:9b:e1:08:
                    e4:5c:e0:a5:6f:3a:96:c1:1b:b9:7a:82:52:b2:86:
                    8a:93:d8:29:e2:a1:ea:80:e7:22:47:0c:a7:3d:9e:
                    44:3a:2e:c6:95:c0:29:31:cd:94:d3:4b:68:b4:72:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.176.0.0/16
                  198.190.250.0-198.190.252.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:e3:ce:ad:3e:c2:a0:bf:b3:40:39:08:fd:ec:03:b7:a2:
         67:42:e2:65:b2:53:cc:4a:01:2c:df:0b:22:2b:4a:89:f4:b3:
         ca:b1:62:d6:6f:a7:92:5d:32:37:7d:3f:bd:2f:55:79:b9:ed:
         36:b2:34:0f:ac:10:22:fd:b7:40:91:c6:8b:ac:dc:a4:7f:5b:
         45:18:0d:cf:a9:42:0d:ad:97:c7:a2:a8:c9:0f:52:00:7a:c2:
         95:ee:f2:2c:38:76:0a:78:af:57:dc:21:b7:16:13:c5:6c:a9:
         c0:95:92:28:bf:1b:8f:93:92:0d:0d:85:50:ac:50:f7:42:5b:
         56:c6:3e:9e:bc:e8:fb:80:68:78:8b:d3:e6:32:60:89:b0:6f:
         35:6a:90:0d:41:d8:16:64:16:fa:18:38:4b:15:a3:60:71:a6:
         e5:16:87:18:30:03:49:82:7c:f9:68:14:fd:80:54:8f:a5:6b:
         d9:4d:4b:be:f3:a3:4c:0a:61:18:70:45:cc:aa:ac:c7:06:2b:
         a0:74:71:8e:e9:5d:0c:1c:ab:08:19:30:85:25:fe:d2:be:60:
         5d:e5:41:02:ea:ae:85:ed:d9:f9:33:e3:47:4f:0e:9c:24:4a:
         37:16:ab:4b:96:e0:b5:77:ac:2e:65:c8:ea:6d:07:30:c7:90:
         cb:fe:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:21 2024 by rpki-client on console-ams.rpki-client.org