Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5.cer
File:                     4cd4075b-ef78-4472-b954-b5adf4a534e5.cer (raw, json)
Hash identifier:          USLIsVrvlIq4Jo+80AwTm543an8wdEjMqGdtpMUtaLo=
Subject key identifier:   D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285848164954B60F755AE015125300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 03 Dec 2024 19:42:25 +0000
Certificate not after:    Sun 04 Oct 2026 18:27:08 +0000
Subordinate resources:    AS: 4579
                          AS: 17214
                          AS: 19097
                          AS: 20434
                          IP: 66.119.119.0/24
                          IP: 162.248.24.0/21
                          IP: 199.91.42.0/23
                          IP: 204.154.121.0/24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:16:49:54:b6:0f:75:5a:e0:15:12:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Dec  3 19:42:25 2024 GMT
            Not After : Oct  4 18:27:08 2026 GMT
        Subject: CN=4cd4075b-ef78-4472-b954-b5adf4a534e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:f9:79:1d:19:5f:b1:5f:f1:fb:e2:1e:38:
                    6c:6c:e1:81:97:92:2b:c1:6a:d6:b1:61:3b:74:23:
                    6d:a5:69:e5:b1:1e:5d:ea:aa:5d:2f:5a:35:c0:52:
                    fc:9d:32:1d:c5:10:aa:c2:38:05:46:e0:d5:5f:b5:
                    c2:fb:9f:76:12:5d:58:b1:b3:44:98:24:70:7f:82:
                    74:02:3f:a5:19:f7:6a:3e:c5:57:76:9c:20:20:41:
                    81:9d:89:a8:99:2c:a9:97:bb:2e:c2:f0:c4:43:f4:
                    1e:9e:4b:70:e2:ee:9e:b4:9b:54:c1:fe:ca:00:6e:
                    c8:66:59:1d:8f:cb:8b:65:36:c4:bb:40:85:7b:36:
                    fb:9f:1c:3f:f2:b8:0d:a3:33:f0:be:5f:60:bd:a6:
                    55:2c:5e:16:3d:44:56:b3:e9:6e:af:a4:db:a4:03:
                    0c:b2:ca:28:93:9b:19:c3:4f:24:e2:53:da:4f:29:
                    65:7f:8e:2c:62:00:20:85:88:5d:67:16:42:70:f8:
                    97:ff:bc:5f:6e:18:05:a1:0e:80:64:8e:72:d1:89:
                    2f:86:95:8e:61:79:42:c1:62:9e:7f:9e:01:ce:bf:
                    72:f7:08:75:25:fb:2f:c6:6d:75:a7:2d:00:3e:4d:
                    d9:03:e7:57:f6:e6:b1:9d:69:70:a1:34:4a:34:c0:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:6E:32:A9:84:A0:59:2B:D7:F1:79:92:3E:CC:1D:FA:C2:46:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd4075b-ef78-4472-b954-b5adf4a534e5/4cd4075b-ef78-4472-b954-b5adf4a534e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.119.119.0/24
                  162.248.24.0/21
                  199.91.42.0/23
                  204.154.121.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4579
                  17214
                  19097
                  20434

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:02:78:af:c1:08:16:1c:66:08:75:65:66:62:f1:cc:e2:
         97:38:9e:14:4f:11:42:f2:ea:36:5b:ca:e3:a5:37:2c:8b:ba:
         b5:6f:c3:17:24:99:7a:0c:a0:48:a1:81:56:17:1b:7b:4b:f0:
         ac:c4:47:8f:86:b9:fb:5f:14:4d:70:53:1b:60:55:0c:19:2a:
         02:50:72:a6:73:71:5e:74:9a:11:ac:c8:8b:56:74:e0:ab:c2:
         54:11:c6:47:8b:dd:38:90:18:e3:5b:05:1e:9e:7a:dd:89:53:
         dd:42:72:32:d3:4c:8a:e6:40:1d:2a:56:dd:b3:e1:b9:73:81:
         08:f3:04:14:95:16:ca:91:fe:55:e8:c1:c9:7b:24:42:26:57:
         1d:c6:a2:6c:4d:39:72:fd:cc:b5:9d:0b:48:f3:ed:d3:e9:48:
         5f:e0:51:b8:a4:cc:ff:9f:4a:50:8b:03:f7:3d:e4:67:83:0d:
         2c:07:00:98:cd:f6:92:ec:73:d3:82:6e:06:20:96:20:5a:58:
         bd:a8:a3:2e:e4:65:4b:c0:1c:4a:53:d1:8d:22:0d:c2:43:ab:
         cf:21:75:71:3b:15:f9:c8:79:64:9c:1c:33:b4:96:7e:0a:03:
         9d:b6:cd:4e:24:ff:22:75:67:48:5c:28:d1:c5:d6:82:b2:4e:
         54:e4:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:06 2025 by rpki-client