Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
File:                     2de5d746-3402-4263-b880-ea4d7ecfc168.cer (raw, json)
Hash identifier:          LAITV0q8/nvSfp7gFfs2DrwK8Cg76jJn9nqi18dsWXg=
Subject key identifier:   6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844800219C7E6F6D0CA1CE7E500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Jan 2024 21:26:50 +0000
Certificate not after:    Mon 13 Apr 2026 20:26:50 +0000
Subordinate resources:    AS: 22359
                          AS: 46265
                          AS: 53471
                          AS: 400196
                          IP: 69.161.210.0/23
                          IP: 98.97.224.0/20
                          IP: 208.52.176.0/23
                          IP: 2607:8240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:80:02:19:c7:e6:f6:d0:ca:1c:e7:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  9 21:26:50 2024 GMT
            Not After : Apr 13 20:26:50 2026 GMT
        Subject: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:b1:96:72:ef:22:5a:4a:85:c2:b5:3c:29:
                    69:b7:6a:26:d4:3b:47:a7:56:7a:27:61:13:c7:9d:
                    24:60:e7:0e:73:17:27:11:d0:74:cd:ae:63:75:d8:
                    e9:b7:80:54:48:a5:53:8c:13:28:1a:69:b0:52:16:
                    1d:46:1d:93:c8:31:ba:81:f8:43:52:d1:b9:e6:3b:
                    6d:75:eb:7a:63:7c:bb:73:ea:cd:bb:f0:11:95:12:
                    a9:a3:40:2e:c3:9a:a5:10:aa:52:8e:6b:31:ee:62:
                    2f:49:97:b9:6f:d1:f8:13:b0:38:37:99:82:76:de:
                    16:9d:b6:59:62:16:af:1b:56:b1:6b:b1:3f:d8:3d:
                    26:0d:2c:dc:ee:1d:7c:eb:34:45:23:4a:cb:a7:a8:
                    70:0b:e8:68:1c:35:ab:ac:b8:0b:e4:2e:17:bf:ed:
                    d4:a8:2b:e3:5e:b2:4c:d4:8a:12:84:4b:ef:ad:88:
                    67:43:f1:78:23:c8:c5:c9:e6:57:3f:78:51:a0:09:
                    af:a4:f7:86:47:00:44:47:c1:1e:e7:73:1f:79:05:
                    5a:8b:4c:3c:44:2f:d3:8a:7f:d5:bf:ab:3b:f7:e5:
                    26:68:f5:10:a1:3f:1a:26:ca:9f:01:70:41:a6:b3:
                    63:db:20:11:a9:91:48:f3:71:62:4c:ef:5e:04:9d:
                    b6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.161.210.0/23
                  98.97.224.0/20
                  208.52.176.0/23
                IPv6:
                  2607:8240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22359
                  46265
                  53471
                  400196

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:94:83:32:3d:32:5a:4c:bb:b1:22:30:bc:df:f4:4d:6f:
         ec:ed:a1:62:65:92:27:72:33:4a:2d:75:91:11:f9:e0:f1:83:
         b6:79:84:20:7e:f5:9c:38:ee:3d:a2:48:fa:25:70:4f:bd:59:
         d5:bf:32:d5:7d:4b:ae:1a:d2:2b:d0:ab:dc:43:98:a8:9c:cd:
         b0:b4:42:e9:b3:3b:bc:e5:88:35:e4:39:54:9c:a9:7a:9c:62:
         2b:6e:98:ce:45:97:14:f9:dc:9e:dd:59:c4:a6:3f:2f:6e:7f:
         1b:06:9d:47:ad:88:b4:bb:80:76:b8:94:9a:84:24:e5:8d:93:
         6f:c9:17:aa:5a:2a:51:50:87:eb:6f:d2:1e:63:b1:4a:35:65:
         c4:4c:2e:89:bc:20:36:91:76:97:67:1c:00:fe:89:46:8d:75:
         73:0c:53:d9:97:cf:b6:09:8c:1d:7c:90:f4:25:23:25:5d:de:
         67:04:06:c7:0b:3c:a0:b3:bd:91:f1:2b:2c:33:92:9a:b1:bd:
         aa:eb:2a:e3:14:3e:1e:fa:a5:83:d3:05:24:8b:61:50:67:d8:
         53:e4:a1:5e:59:d9:b7:19:62:d2:28:9e:80:ed:c3:1c:20:56:
         f8:b4:37:11:8f:9e:b8:4d:98:5b:78:14:f7:2a:70:2e:b2:40:
         c8:5e:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org