Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
File:                     9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer (raw, json)
Hash identifier:          nkifZj2F2SF1U+iRoSr5TGrIRg4vVOj4ScidfihGT6s=
Subject key identifier:   DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845CEAC22B33A66C17E4C4B2340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 May 2024 18:29:26 +0000
Certificate not after:    Tue 11 Aug 2026 18:29:26 +0000
Subordinate resources:    AS: 40772
                          IP: 23.173.96.0/24
                          IP: 74.116.44.0/22
                          IP: 104.36.104.0/22
                          IP: 208.89.36.0/22
                          IP: 2607:af80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ce:ac:22:b3:3a:66:c1:7e:4c:4b:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  8 18:29:26 2024 GMT
            Not After : Aug 11 18:29:26 2026 GMT
        Subject: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:75:22:77:5a:d6:df:6c:e4:30:af:52:46:
                    85:2f:2e:77:57:84:23:4e:d8:41:c7:3e:6c:cf:37:
                    7a:f4:c7:c4:51:0b:42:c6:08:a1:dc:47:2e:18:73:
                    45:a8:05:4e:76:4c:77:83:22:1b:a6:83:88:96:55:
                    9b:86:d2:a3:f5:b7:f8:6b:1d:21:1b:2a:5a:17:f4:
                    9c:f1:ff:87:86:33:07:ae:b7:e7:bc:42:53:6f:24:
                    20:79:67:42:ed:d3:97:fa:71:d1:d2:a0:5c:5d:fd:
                    3c:86:74:02:e7:59:5c:9d:9c:d2:27:d8:9f:35:5b:
                    50:2e:6e:c1:2f:06:39:c2:4d:33:6e:bc:88:5d:85:
                    fe:c4:f4:6f:cf:89:7a:68:bc:21:d4:38:69:5c:3c:
                    cc:52:26:cf:91:31:9a:6c:49:94:1a:c7:2f:c4:47:
                    7d:07:24:0f:42:a3:de:4e:52:7a:bf:d4:35:35:f3:
                    30:94:58:82:de:8b:f3:d4:53:92:62:de:e6:c3:87:
                    c0:dc:a1:20:9d:36:6b:71:06:2d:26:d4:8a:8d:63:
                    57:00:2b:a1:4c:08:10:1d:2b:fe:28:e3:09:03:3e:
                    8f:7f:fc:68:f6:e5:52:d3:a2:a1:46:94:17:a6:e7:
                    ed:5c:4f:5a:5c:28:12:ae:8f:b9:a8:ad:96:14:20:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.96.0/24
                  74.116.44.0/22
                  104.36.104.0/22
                  208.89.36.0/22
                IPv6:
                  2607:af80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40772

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:13:35:31:fb:3c:2b:c5:11:45:3f:cc:84:16:a0:93:03:c0:
         b8:08:85:35:31:1e:3f:27:e6:f9:e0:c9:e8:6c:f1:c8:35:48:
         b8:fe:ad:3e:2a:8e:0c:65:78:c3:c7:eb:93:1f:0e:74:e6:13:
         d1:a8:5d:58:0a:0a:b0:f6:25:7e:75:84:2a:92:f3:af:bb:e1:
         6c:d8:78:58:60:4b:4a:30:c3:3d:e4:08:19:17:71:f9:15:18:
         6b:31:86:fc:6e:f5:2e:9c:02:7e:d7:f9:77:24:97:86:a4:28:
         84:18:ce:87:bf:81:9a:95:38:8c:c2:04:49:33:0d:db:a6:87:
         7b:ab:11:1d:8f:2d:6d:7c:17:63:b6:6e:8e:c3:ee:1c:c9:cb:
         24:70:62:bc:0a:fe:4c:45:00:90:38:58:01:38:52:8d:33:6f:
         03:e7:22:85:8d:79:1d:c6:04:11:ff:4f:0a:e7:8f:94:27:05:
         84:46:a7:39:91:f9:4a:25:28:60:67:0d:71:18:d7:52:c4:91:
         15:fc:63:4b:0d:bb:55:cf:6d:6e:51:da:26:d7:96:91:d7:3d:
         b6:2e:fc:b9:38:51:75:4c:53:52:f7:d2:64:cc:e1:a8:3f:68:
         61:49:b9:f5:04:a4:2e:88:28:80:a9:74:04:84:b7:47:66:d7:
         6c:cb:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org