Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
File:                     dc8dacf3-283f-4888-8217-ee30c6e58c44.cer (raw, json)
Hash identifier:          O3u6GGKf9bPABwwP3G38obC05RvZfOBuYAVAw1hVqwQ=
Subject key identifier:   BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CA4601547E0FABF0414FB9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 14:14:17 +0000
Certificate not after:    Tue 09 Feb 2027 14:14:17 +0000
Subordinate resources:    AS: 14434
                          IP: 66.248.160.0/19
                          IP: 98.142.160.0/20
                          IP: 172.84.192.0/18
                          IP: 198.36.28.0/22
                          IP: 209.221.192.0/19
                          IP: 2606:5a00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:46:01:54:7e:0f:ab:f0:41:4f:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  6 14:14:17 2024 GMT
            Not After : Feb  9 14:14:17 2027 GMT
        Subject: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:88:db:f8:61:07:65:74:26:5a:8a:4e:41:
                    51:67:e3:ff:af:3c:3e:d4:9b:23:a3:46:b7:80:06:
                    db:0c:12:b8:ea:56:1d:76:9b:f9:90:8b:af:3d:b3:
                    48:5e:3e:af:18:11:3c:91:d9:95:47:ee:86:0b:bf:
                    21:aa:1f:a7:71:cb:5b:ce:a5:b2:fe:22:af:90:1d:
                    0d:2f:e9:9d:cf:af:d8:b8:43:16:f1:80:aa:af:83:
                    b6:58:fd:1a:3a:b5:83:5e:e8:31:00:28:bc:57:28:
                    d0:e1:1c:bd:f6:12:29:1b:98:20:b4:01:2f:fa:ec:
                    2c:7c:15:d4:4a:3e:3b:b0:51:b8:ad:e6:c6:7d:aa:
                    d6:60:97:78:d2:52:97:c5:7d:8b:0e:e2:27:a1:56:
                    30:99:45:8f:5a:da:12:91:c8:b5:95:57:de:e6:76:
                    4b:4a:2a:90:6e:a2:ee:3d:04:f0:17:6c:52:fa:91:
                    0b:6b:a5:ea:ae:7a:f6:4a:05:a9:fe:b8:37:f1:ee:
                    03:f4:82:20:32:87:6e:54:74:6b:74:16:bf:48:bd:
                    e6:43:37:4f:19:3a:46:c0:f6:70:79:64:97:81:6d:
                    ec:d4:3b:8b:b9:8e:20:c1:0e:e1:c8:9d:7c:a9:ad:
                    96:c4:7f:c8:8b:04:77:e5:63:8e:35:99:e1:e3:33:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.160.0/19
                  98.142.160.0/20
                  172.84.192.0/18
                  198.36.28.0/22
                  209.221.192.0/19
                IPv6:
                  2606:5a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14434

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:63:dd:d3:ca:a8:2e:ac:a5:bd:0e:26:07:b5:05:cc:4b:6b:
         87:e3:f3:40:f5:68:d2:ad:95:4d:98:fe:4b:12:c7:21:ff:e6:
         77:90:08:35:7b:5e:40:51:f8:80:c1:8a:ea:fa:29:93:55:dd:
         76:6d:66:e2:5b:61:c6:8e:2d:06:79:46:a3:09:70:53:1b:b0:
         5d:85:fe:45:fe:79:5d:8d:02:1e:46:4b:32:2b:3a:35:64:47:
         c2:a9:de:3f:23:f2:2c:b1:50:8e:03:22:f5:61:30:93:c8:9e:
         c8:77:2b:a0:c0:38:63:3f:e3:70:5f:02:17:8b:cf:87:b0:79:
         61:5a:dd:3d:79:f4:bc:d8:f5:b9:f9:64:b0:e9:a9:d6:e8:8b:
         6f:f4:23:f2:03:d2:5b:54:6e:9d:4a:2a:93:98:5f:14:b8:6e:
         f5:18:73:d8:c5:dd:aa:cc:87:a1:cf:b2:0e:8f:64:6b:b7:cc:
         29:11:f9:a6:c0:36:c0:9e:03:2f:eb:79:5c:fe:8b:18:0a:be:
         78:50:b5:bc:2a:c8:9b:02:13:5c:8f:07:e0:86:6a:b8:a2:72:
         33:6b:4f:d8:85:b0:ab:c4:c0:85:3e:91:28:3b:a6:b1:49:c5:
         a1:2b:6c:a2:93:21:76:f0:a3:db:08:92:93:ae:3b:63:c3:74:
         fd:10:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:31 2024 by rpki-client on console-fra.rpki-client.org