Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer
File:                     42a8a836-8100-4561-9bfc-5462d4161596.cer (raw, json)
Hash identifier:          lC893W1z0nlvw0Ktj7XKCqgS7fLsaKI9HT1noWAynRE=
Subject key identifier:   6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846BF3C374579F5BA4BFCF93D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 02 Aug 2024 22:33:44 +0000
Certificate not after:    Thu 05 Nov 2026 23:33:44 +0000
Subordinate resources:    AS: 4474
                          IP: 24.51.50.0/23
                          IP: 24.72.192.0 -- 24.72.203.255
                          IP: 24.223.100.0/22
                          IP: 67.215.16.0/20
                          IP: 72.21.64.0/20
                          IP: 96.31.96.0/19
                          IP: 104.36.40.0/22
                          IP: 162.248.136.0/22
                          IP: 2604:8c00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bf:3c:37:45:79:f5:ba:4b:fc:f9:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Aug  2 22:33:44 2024 GMT
            Not After : Nov  5 23:33:44 2026 GMT
        Subject: CN=42a8a836-8100-4561-9bfc-5462d4161596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:f7:b8:07:0d:43:b3:cd:2d:4b:45:c7:60:
                    97:c0:6b:1d:5a:04:97:0b:21:af:ba:92:d8:79:87:
                    47:f6:52:e5:b4:5f:ed:e3:d3:3b:cc:ff:76:d0:58:
                    b1:0c:3e:67:7f:7f:eb:32:b5:62:0c:ab:96:92:86:
                    78:90:73:4f:a6:38:58:76:21:2e:dd:33:03:11:d3:
                    92:39:55:b4:18:b1:00:ad:32:e0:ec:ae:a2:a3:78:
                    8d:07:cc:c8:68:cb:c0:a2:85:6e:46:47:5f:45:85:
                    69:df:f3:01:e5:6d:0e:de:ad:4a:8f:3e:d9:e0:06:
                    34:c3:4e:c9:38:91:c0:50:08:43:66:90:bb:a8:0c:
                    1a:17:a9:e5:a7:94:b1:6f:d7:95:a3:d4:67:27:ba:
                    55:e1:bc:c4:1b:63:6b:7d:94:f8:79:fd:0a:73:a7:
                    32:59:e6:f6:5b:f5:cb:8b:2f:02:35:ab:ee:07:4e:
                    6c:15:37:0e:e0:00:b0:2a:b1:5c:36:0e:c5:41:38:
                    fe:3f:a6:ea:57:53:69:ee:6f:c6:e5:01:3e:41:22:
                    a8:6d:0c:c4:db:a2:44:ab:db:13:5a:87:35:3a:84:
                    d0:07:22:38:38:36:1b:3f:f2:93:d2:d8:e8:66:f5:
                    be:b3:3a:ec:89:e7:d5:0c:3b:92:86:69:c3:8d:3e:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.50.0/23
                  24.72.192.0-24.72.203.255
                  24.223.100.0/22
                  67.215.16.0/20
                  72.21.64.0/20
                  96.31.96.0/19
                  104.36.40.0/22
                  162.248.136.0/22
                IPv6:
                  2604:8c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4474

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:43:e0:b4:fc:31:e2:16:d2:61:76:24:a7:ec:36:e6:63:
         ed:c3:c9:20:53:e8:52:43:3c:9b:26:8f:de:ca:e4:77:fc:d7:
         a8:b0:6c:c3:85:8b:a3:71:56:41:cf:71:e1:be:bf:67:0e:d8:
         bf:09:56:39:32:a3:04:e2:24:10:34:27:70:a7:56:a6:b5:ac:
         f6:50:5a:37:a2:a9:c5:dc:7f:bb:65:0c:d7:76:ae:61:4a:bd:
         af:dc:b0:8f:c7:11:6c:3f:0d:bb:45:b2:4e:97:08:61:23:4c:
         aa:f4:c3:0e:a8:49:14:10:bb:7d:37:89:c6:d2:da:0d:3f:2d:
         8b:c1:ad:80:f7:5b:5d:e2:e7:d8:b9:6d:22:e3:6a:ee:17:cb:
         88:4e:ac:c6:a4:55:d5:cd:31:4b:8f:cf:c4:a8:08:28:87:19:
         58:0f:47:43:0c:c9:09:40:39:1a:16:2b:a8:7d:45:37:d3:20:
         80:4a:06:8b:df:73:04:56:c7:94:be:1d:59:10:d1:5d:7c:12:
         4d:80:a5:ae:69:f8:6f:da:58:87:5e:68:2e:49:f1:21:1c:0f:
         4c:7f:67:fe:f1:78:dd:9e:e8:4a:b0:50:f0:9b:b2:c5:b5:85:
         72:2d:bb:6a:f8:a2:fa:cd:54:1f:32:87:a2:ab:51:b0:e8:fa:
         f1:22:2e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org