Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e.cer
File:                     96aa12fd-20f6-4f37-aab7-a27391ae096e.cer (raw, json)
Hash identifier:          OX5EEQqteoFmfZ6DOGnmkBEsW24H4X3dZ/jQTvDMih4=
Subject key identifier:   64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845C11BB16A3793F0D6412FF600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 May 2024 21:52:53 +0000
Certificate not after:    Thu 06 Aug 2026 21:52:53 +0000
Subordinate resources:    AS: 33675
                          AS: 53869
                          IP: 64.201.224.0/21
                          IP: 198.62.120.0/23
                          IP: 199.47.104.0/21
                          IP: 2620:32:c000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:1b:b1:6a:37:93:f0:d6:41:2f:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  3 21:52:53 2024 GMT
            Not After : Aug  6 21:52:53 2026 GMT
        Subject: CN=96aa12fd-20f6-4f37-aab7-a27391ae096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:f4:ae:b5:3f:a5:ac:7c:2f:24:43:ef:89:
                    6c:ce:c2:cd:7b:bd:25:02:b6:92:91:65:02:b0:19:
                    57:09:85:50:ef:c7:10:30:7f:d2:a1:d6:15:91:cd:
                    2e:77:4c:21:d5:55:8d:c0:e2:b7:3d:4b:f6:9b:60:
                    73:c4:95:61:cb:ab:e8:3c:0a:11:98:3e:8e:ab:55:
                    97:8d:cb:d6:6c:d8:24:b6:40:a4:4b:93:9a:70:22:
                    90:77:a3:1d:eb:ac:26:93:5a:24:d2:27:c4:9d:c2:
                    7b:a5:b2:33:1e:14:01:22:63:d6:10:bf:72:9e:d6:
                    c3:48:46:ab:2e:e5:01:82:05:2f:cc:2a:95:e8:04:
                    ee:db:a2:17:95:03:ea:ff:2b:16:38:6e:c6:57:33:
                    f2:2d:1c:b1:ec:cb:f7:72:54:47:c7:4b:45:f2:8b:
                    46:41:d2:63:fd:02:39:b6:3e:58:27:8d:4b:00:26:
                    11:f4:a8:47:87:ab:4d:c0:a5:3f:1b:0d:39:19:0a:
                    44:4c:af:74:f3:55:15:9d:ab:3e:ce:4e:9d:8e:6c:
                    63:20:2f:09:33:5b:03:95:44:31:54:e7:b7:9c:22:
                    6c:cc:52:a5:bb:df:f6:18:59:ee:ab:6d:c3:72:a1:
                    48:45:f5:5b:bd:ee:b4:62:eb:c8:70:17:5e:36:0f:
                    94:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:31:9D:C5:17:1B:E0:F6:CD:30:94:51:D8:10:99:B1:1D:AE:5F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/96aa12fd-20f6-4f37-aab7-a27391ae096e/96aa12fd-20f6-4f37-aab7-a27391ae096e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.224.0/21
                  198.62.120.0/23
                  199.47.104.0/21
                IPv6:
                  2620:32:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33675
                  53869

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:f1:ae:bb:a9:01:50:73:1b:9e:db:be:2e:72:eb:ef:2c:e4:
         7a:ac:8e:be:ce:b1:96:4f:ef:03:1a:57:81:71:de:42:08:be:
         8f:ec:5f:7a:55:b8:64:e8:21:2f:45:62:00:1f:98:85:0b:b7:
         4f:a0:af:d2:da:e5:cd:2c:4a:f5:54:a2:af:7f:4c:57:d2:7f:
         51:34:5f:4d:4b:a5:77:52:e3:b9:df:d8:e0:76:26:52:ce:a6:
         3e:11:bd:98:b3:2c:b6:c8:16:be:34:86:95:2f:9e:25:56:c3:
         13:ab:e6:43:e8:ea:e4:9a:f6:c1:71:04:40:e3:be:0d:a6:9f:
         8f:38:94:3e:a8:81:7b:a4:d2:14:f8:d5:6e:1e:7e:e5:7c:c7:
         5f:42:49:19:8d:fc:78:b6:40:b5:2b:f5:62:3b:57:e0:75:ad:
         51:72:1d:f9:5a:ac:c1:f7:9c:df:88:6c:f5:a1:51:f4:e0:0e:
         e2:65:5f:00:5c:3e:ad:fa:82:fa:f0:72:78:1f:32:11:59:73:
         d0:da:a6:24:17:35:d4:79:59:bc:42:fa:82:56:0c:7f:90:64:
         0d:a7:d2:3f:b4:3a:b4:4a:be:7d:00:d3:36:11:79:00:9a:b1:
         fe:20:cf:fa:06:3b:ec:f9:fb:a6:d3:fb:8b:a2:d3:84:9e:5b:
         4f:d3:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:10:13 2024 by rpki-client on console-ams.rpki-client.org