Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
File:                     109078e4-3ad5-4242-9f3e-058161c97a9f.cer (raw, json)
Hash identifier:          Z4P7dnulhD4W/bPPLuO9LAPQd90ywmMSd4FGqjl5pgc=
Subject key identifier:   D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584683DFCCE17CFD25876B495280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jul 2024 16:14:50 +0000
Certificate not after:    Thu 15 Oct 2026 16:14:50 +0000
Subordinate resources:    AS: 2572
                          IP: 150.199.0.0/16
                          IP: 198.102.253.0/24
                          IP: 198.209.0.0/16
                          IP: 204.184.0.0/15
                          IP: 207.160.0.0/16
                          IP: 209.106.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:83:df:cc:e1:7c:fd:25:87:6b:49:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 12 16:14:50 2024 GMT
            Not After : Oct 15 16:14:50 2026 GMT
        Subject: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:44:28:85:ee:ff:41:ba:8c:18:6e:7b:87:
                    e2:3b:24:0a:f7:91:87:28:3b:0e:66:45:00:b6:10:
                    5c:dd:a2:4e:8b:36:d4:8d:3b:d1:b4:9a:11:b6:c0:
                    d5:a8:cc:b3:f5:93:fb:48:22:34:68:8d:51:86:90:
                    3e:e6:d5:1b:31:41:14:4c:fe:c1:5e:a5:4c:8c:e0:
                    fe:0e:61:7d:ef:28:b7:8b:46:42:db:bd:e3:43:be:
                    d2:bc:42:91:81:78:12:fb:d4:90:49:bf:af:f7:f7:
                    ba:2d:ef:68:b9:47:e6:2e:89:10:7a:79:45:15:39:
                    c5:bf:8b:b7:e3:db:65:29:a0:4e:0d:78:43:0b:2c:
                    00:06:6c:b9:61:ff:93:d5:8b:62:35:d0:b2:93:50:
                    42:af:df:d5:e2:40:6d:82:45:7c:a5:7c:e6:be:ac:
                    06:99:e1:16:88:4c:30:86:07:57:28:7b:4f:c6:4d:
                    26:e9:12:1b:0c:7c:24:ee:54:a5:9c:ab:70:78:de:
                    98:fd:ee:7a:68:ce:e3:d7:9e:4d:60:1d:eb:d4:b3:
                    13:f7:6d:17:d4:d3:dc:af:79:d4:d1:30:05:5a:eb:
                    d4:ad:7a:e1:38:5a:09:84:0b:64:6a:f2:69:2d:81:
                    df:a2:47:cd:91:5e:0a:f0:66:47:6f:2c:82:22:32:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.199.0.0/16
                  198.102.253.0/24
                  198.209.0.0/16
                  204.184.0.0/15
                  207.160.0.0/16
                  209.106.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2572

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:79:28:fc:59:30:11:9a:29:1a:da:95:98:6a:a6:5f:08:32:
         be:cd:0d:65:f8:eb:82:0f:d5:be:bf:19:32:a1:88:93:08:e7:
         1f:b3:57:cd:a0:87:c8:07:62:7e:9d:69:09:3d:04:8a:5f:9e:
         b0:a7:ae:e1:81:86:23:79:73:6c:06:77:bd:7d:b2:a9:7c:ad:
         08:41:bd:98:8e:13:9e:7c:23:be:f4:0a:5d:f1:ce:c2:5d:54:
         f1:a2:03:08:f5:e7:01:95:42:c3:ba:05:2f:d6:4c:62:7d:f7:
         cc:8e:38:16:c0:70:8b:67:9a:5f:09:d0:c0:35:7e:36:ee:f6:
         b8:34:05:b5:b1:5d:ac:25:0c:e1:cb:fc:93:49:be:e1:29:42:
         6c:19:a3:52:b9:9b:82:ec:fb:d9:b7:95:2a:97:41:be:c6:cd:
         4d:ff:65:f6:4c:16:6c:6a:c4:62:fb:60:8a:0f:90:22:6e:57:
         14:68:ef:4a:7e:c6:f3:52:0c:24:53:b7:e4:63:c7:a2:e4:0c:
         0c:88:7d:b6:3d:32:4d:d3:aa:09:1f:58:02:26:a8:fd:d9:d2:
         8f:0b:8a:ff:88:f8:44:ad:4a:24:7b:f8:85:8e:1c:0e:4e:93:
         2a:0e:8f:7d:90:df:f2:84:6c:c9:d0:ec:71:ac:2d:2c:ac:fe:
         df:a3:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org