Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
File:                     f9832b96-bd4c-421c-9299-d5f2c689d463.cer (raw, json)
Hash identifier:          5Qw/FvBCHKv460N32fL/ngIT5aeMtLqAQ2WTwuHFlmk=
Subject key identifier:   20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584609440C2628EA8C638CCA0D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 May 2024 18:12:24 +0000
Certificate not after:    Tue 01 Sep 2026 18:12:24 +0000
Subordinate resources:    AS: 21565
                          AS: 401099
                          IP: 64.138.192.0/18
                          IP: 64.150.128.0/19
                          IP: 66.153.128.0/17
                          IP: 66.220.64.0/20
                          IP: 67.212.32.0/19
                          IP: 107.190.144.0/20
                          IP: 108.175.176.0/20
                          IP: 152.44.112.0/20
                          IP: 159.117.160.0/19
                          IP: 162.221.104.0/21
                          IP: 162.252.0.0/21
                          IP: 198.29.48.0/20
                          IP: 198.52.224.0/20
                          IP: 198.232.104.0/21
                          IP: 199.87.100.0/22
                          IP: 206.195.64.0/19
                          IP: 216.16.160.0/19
                          IP: 216.223.192.0/19
                          IP: 2606:8400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:09:44:0c:26:28:ea:8c:63:8c:ca:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 29 18:12:24 2024 GMT
            Not After : Sep  1 18:12:24 2026 GMT
        Subject: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:8f:c8:4a:4d:f9:d9:89:90:d9:b8:8d:8b:
                    f6:4f:23:7a:41:2e:b7:75:7d:81:24:1b:bb:9b:84:
                    67:c1:cf:b6:c6:ca:8a:dc:fb:84:e4:d2:e8:cf:b0:
                    d8:3d:9f:59:69:62:39:90:d6:43:b2:85:26:bb:3e:
                    68:2f:37:38:62:b7:35:49:0f:32:43:57:24:10:dc:
                    cf:91:1a:bc:7f:be:52:4d:2a:6d:0b:c9:f6:4a:f1:
                    7a:86:79:ab:78:51:8b:9f:f1:e4:23:d8:85:be:b5:
                    0c:ab:8c:ce:63:b5:6a:fd:fe:2b:d8:58:ef:c9:68:
                    79:20:77:06:c7:8b:58:05:04:02:2d:1a:1d:09:fb:
                    61:cb:bf:c4:c2:ef:3e:7c:9b:f4:1e:d5:25:c5:11:
                    b9:b4:e9:6e:17:73:a0:a8:df:fb:fa:67:fb:c7:82:
                    fc:ea:ca:bf:c5:cf:6b:f5:e2:74:f2:90:a9:0d:f1:
                    ad:69:fb:e3:2f:ec:79:a3:13:b7:33:b2:22:fa:39:
                    cc:4c:8e:b7:56:5b:d3:dc:15:1e:f8:48:99:76:e5:
                    84:31:22:1c:87:2f:1a:01:4a:c4:19:83:09:54:0b:
                    b3:c1:d2:0c:9d:b7:41:ae:1e:03:2c:c2:19:fd:52:
                    20:09:a3:73:47:81:3a:ef:2c:96:df:63:bc:dd:b8:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  199.87.100.0/22
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21565
                  401099

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:90:d9:c9:9b:e0:f5:c5:47:46:ea:65:61:35:a6:d7:43:
         81:ed:5f:5c:e9:77:81:a7:15:b1:39:b0:33:56:f8:eb:c3:91:
         d6:e8:71:f9:1b:a7:5e:4b:96:0f:21:7d:2d:23:f5:6f:8b:5e:
         94:a6:c3:01:df:74:6d:55:47:df:f9:4e:e2:5a:4c:69:c2:97:
         a8:6a:07:3a:ec:c6:b7:a4:8e:ee:3c:ed:01:12:f1:3c:e3:8f:
         29:d3:bd:89:e7:1e:0a:15:53:a1:f0:08:92:ed:86:eb:b5:18:
         2c:66:91:4a:f6:09:aa:f7:01:73:65:41:27:aa:69:60:b4:06:
         33:3f:b2:f6:5b:17:61:6e:ce:8a:cc:1a:86:df:93:7e:1a:1c:
         40:8e:7e:86:6e:61:10:1a:50:71:27:bc:58:77:28:9b:af:b4:
         e7:0d:00:00:f0:f8:69:3f:31:57:d0:5f:ec:af:d4:de:bb:fa:
         33:6b:7d:38:31:84:c2:08:6d:49:cf:6c:d3:08:70:71:6a:21:
         1d:c7:f4:c9:8a:b6:36:20:6b:71:24:bd:fb:70:31:4d:bf:e6:
         d6:92:fa:61:d5:9f:e8:14:1d:c8:2a:f4:7e:5d:25:e2:96:18:
         b9:29:3f:74:90:35:0e:b5:57:64:f9:5f:10:24:93:1c:99:65:
         01:db:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:39 2024 by rpki-client on console-ams.rpki-client.org