Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17bbbf21-b199-42d7-b179-b430e13de42a.cer
File:                     17bbbf21-b199-42d7-b179-b430e13de42a.cer (raw, json)
Hash identifier:          aIqMLcKM40vs5E2KvJ94zK9jao90z3cFule8bkFXsTU=
Subject key identifier:   43:EF:5C:29:EA:CF:4E:42:A9:45:F0:60:70:9C:A0:B0:AC:46:C6:36
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846B5C0D5EBB0485D10E523FF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17bbbf21-b199-42d7-b179-b430e13de42a/17bbbf21-b199-42d7-b179-b430e13de42a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17bbbf21-b199-42d7-b179-b430e13de42a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 Jul 2024 13:02:52 +0000
Certificate not after:    Mon 02 Nov 2026 14:02:52 +0000
Subordinate resources:    AS: 16473
                          AS: 19956 -- 19957
                          IP: 65.5.0.0 -- 65.7.255.255
                          IP: 65.12.0.0/14
                          IP: 65.80.0.0/14
                          IP: 66.20.0.0/15
                          IP: 66.156.0.0/16
                          IP: 67.32.0.0/14
                          IP: 68.16.0.0/15
                          IP: 68.152.0.0/15
                          IP: 68.156.0.0/15
                          IP: 68.159.0.0/16
                          IP: 68.208.0.0/15
                          IP: 68.212.0.0 -- 68.214.255.255
                          IP: 68.216.0.0/16
                          IP: 68.222.0.0/16
                          IP: 70.144.0.0/13
                          IP: 70.154.0.0/15
                          IP: 70.158.0.0/15
                          IP: 72.148.0.0/15
                          IP: 72.151.0.0/16
                          IP: 72.156.0.0/14
                          IP: 74.164.0.0 -- 74.175.255.255
                          IP: 74.180.0.0 -- 74.189.255.255
                          IP: 74.191.0.0/16
                          IP: 74.228.0.0/15
                          IP: 74.231.0.0 -- 74.232.255.255
                          IP: 74.236.0.0/14
                          IP: 74.244.0.0/14
                          IP: 74.251.0.0 -- 74.255.255.255
                          IP: 98.68.0.0/15
                          IP: 98.72.0.0/15
                          IP: 98.75.0.0/16
                          IP: 98.78.0.0/15
                          IP: 206.223.128.0/24
                          IP: 208.60.0.0/14
                          IP: 209.214.0.0/15
                          IP: 216.76.0.0/14

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b5:c0:d5:eb:b0:48:5d:10:e5:23:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 30 13:02:52 2024 GMT
            Not After : Nov  2 14:02:52 2026 GMT
        Subject: CN=17bbbf21-b199-42d7-b179-b430e13de42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:3b:13:a2:3e:d5:cb:0d:69:fd:4a:0b:fe:
                    fd:1c:01:3c:93:5d:06:79:be:c3:15:0c:fa:94:9b:
                    18:d3:86:94:08:a4:a2:36:10:67:5e:22:32:57:32:
                    64:0e:3b:3e:38:c2:5f:58:33:fb:52:08:5b:69:b9:
                    45:5f:f7:58:09:f5:47:96:31:55:6c:8e:e2:b3:4f:
                    da:bd:a2:3f:41:67:e1:ba:0c:a4:b1:c5:ea:90:61:
                    6a:9a:aa:58:a2:49:09:1e:33:f5:a5:87:f8:18:cb:
                    94:14:12:ec:ae:25:d1:fc:61:f0:1c:66:98:84:ef:
                    52:cd:15:82:8d:de:8b:a6:31:f4:12:e3:eb:35:1d:
                    36:50:fa:fa:e4:82:47:c3:c2:15:49:40:46:4e:d6:
                    84:f8:92:f9:b2:5a:66:77:e9:0e:f3:9f:9b:5a:d4:
                    68:ce:8c:b1:85:40:35:af:43:df:04:69:a7:71:14:
                    a4:ed:a2:35:92:94:70:e8:09:17:0f:75:3b:7c:5a:
                    c6:78:86:35:af:0d:dc:0b:08:1f:9f:f4:52:94:f1:
                    1c:69:c5:a5:69:ad:b1:7e:7a:95:f9:71:dd:d6:e1:
                    b5:d0:67:50:69:48:26:e1:6c:a3:18:9f:2e:48:f6:
                    bb:ff:bc:58:d9:ef:08:48:3e:cc:29:36:a5:c3:78:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:5C:29:EA:CF:4E:42:A9:45:F0:60:70:9C:A0:B0:AC:46:C6:36
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17bbbf21-b199-42d7-b179-b430e13de42a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/17bbbf21-b199-42d7-b179-b430e13de42a/17bbbf21-b199-42d7-b179-b430e13de42a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.5.0.0-65.7.255.255
                  65.12.0.0/14
                  65.80.0.0/14
                  66.20.0.0/15
                  66.156.0.0/16
                  67.32.0.0/14
                  68.16.0.0/15
                  68.152.0.0/15
                  68.156.0.0/15
                  68.159.0.0/16
                  68.208.0.0/15
                  68.212.0.0-68.214.255.255
                  68.216.0.0/16
                  68.222.0.0/16
                  70.144.0.0/13
                  70.154.0.0/15
                  70.158.0.0/15
                  72.148.0.0/15
                  72.151.0.0/16
                  72.156.0.0/14
                  74.164.0.0-74.175.255.255
                  74.180.0.0-74.189.255.255
                  74.191.0.0/16
                  74.228.0.0/15
                  74.231.0.0-74.232.255.255
                  74.236.0.0/14
                  74.244.0.0/14
                  74.251.0.0-74.255.255.255
                  98.68.0.0/15
                  98.72.0.0/15
                  98.75.0.0/16
                  98.78.0.0/15
                  206.223.128.0/24
                  208.60.0.0/14
                  209.214.0.0/15
                  216.76.0.0/14

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16473
                  19956-19957

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:70:ec:2f:30:ac:61:d6:95:a3:bc:91:17:4c:3e:86:94:4c:
         44:ec:b7:b0:4d:94:76:27:87:86:2e:d3:84:bc:60:c7:6e:23:
         fd:c3:8e:12:fb:f4:58:1b:9a:0f:03:58:0b:43:ee:51:41:39:
         91:8d:e9:70:73:bf:f5:cf:02:b6:71:22:4d:f7:f2:84:f7:1c:
         c6:b1:6e:ca:5a:47:0d:b5:d5:6e:8c:53:7e:ad:d5:da:d0:8d:
         91:9b:03:32:2a:b2:43:0b:1c:3c:1b:b3:5a:41:7f:d8:37:16:
         c8:ea:d8:76:be:fb:9c:50:1a:a2:f9:c2:0b:ce:85:21:8e:fc:
         91:4a:52:36:0f:b1:24:2d:37:34:f3:6f:4b:19:53:58:40:45:
         48:1b:19:5b:85:2a:d9:a7:f8:15:72:6c:3d:2c:82:99:5d:0e:
         1a:de:4e:5a:dd:2c:90:cd:ec:3e:77:aa:bd:16:58:b0:81:12:
         85:5d:9d:0a:63:2f:5d:93:b5:fc:44:72:97:13:72:4a:34:ed:
         f2:78:93:9a:4e:b9:52:21:9c:9f:28:89:b1:8f:b5:c6:ef:26:
         46:dd:7a:93:b1:30:f7:5b:b0:05:f8:44:27:10:69:9c:33:90:
         bf:24:06:6f:ea:ea:bd:4f:44:c5:84:26:4d:dc:4c:5c:5b:3b:
         c6:03:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org