Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
File:                     ec11d358-69b9-4c96-bf47-e3edd5cff218.cer (raw, json)
Hash identifier:          2antEo0sFlN2VhaF3CQtQ5LV/tHCnFtzcYGPNAspYRg=
Subject key identifier:   A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858477EEEFEB9E0CEE226F8BD0100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 14:33:21 +0000
Certificate not after:    Thu 09 Apr 2026 11:08:28 +0000
Subordinate resources:    AS: 36344
                          AS: 54432
                          IP: 69.168.224.0/20
                          IP: 199.115.104.0/23
                          IP: 2607:dac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:ee:fe:b9:e0:ce:e2:26:f8:bd:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 10 14:33:21 2024 GMT
            Not After : Apr  9 11:08:28 2026 GMT
        Subject: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:08:c5:74:12:89:49:fc:fe:28:5d:6d:25:
                    a4:db:20:ec:9b:0d:8d:48:13:be:10:bd:0f:2d:2d:
                    28:43:88:a8:cf:87:3a:d0:77:2f:47:8b:db:09:1d:
                    88:08:6c:c8:4e:cf:14:d3:82:e2:f3:ad:d7:c3:21:
                    d8:5e:03:88:f3:86:c4:0f:d8:64:09:97:fb:88:5b:
                    58:a1:64:3c:3c:3b:28:5c:7b:05:83:82:67:76:64:
                    01:1a:f9:1f:33:c8:f1:19:ef:d5:6f:b2:19:b1:61:
                    ec:8c:0e:47:80:41:5a:da:92:ef:67:08:4c:b6:65:
                    83:1f:6d:47:04:65:ff:c8:1a:a5:47:ae:1a:21:b9:
                    b7:7b:4d:f1:01:3a:99:30:a4:42:2e:36:47:6d:cd:
                    eb:56:e9:89:bd:0a:fd:11:0d:9a:ae:c5:be:02:a5:
                    20:3f:39:18:6f:32:65:1a:e2:fd:ab:f6:8e:b7:ec:
                    c1:a6:54:9a:1e:b4:da:c7:90:37:ec:aa:e3:44:5f:
                    2e:ad:4c:5d:a8:fe:c6:ff:c5:2b:24:49:e4:47:d0:
                    a6:97:9d:1a:c9:3d:7a:38:29:66:e8:5b:a1:f9:2b:
                    90:28:71:34:c6:1d:10:0d:3d:b7:c8:35:e9:85:31:
                    a4:1f:5c:fb:9b:f3:d3:33:f9:12:bc:95:06:ff:2e:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.224.0/20
                  199.115.104.0/23
                IPv6:
                  2607:dac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36344
                  54432

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:db:2f:d2:3f:ae:72:70:57:f1:74:05:2b:08:48:67:ab:
         08:25:13:65:f6:1f:5b:74:e0:3a:8c:27:e5:9d:c6:34:04:5c:
         33:06:b2:f5:15:08:55:e0:68:7a:f2:85:e7:93:94:1d:e3:8c:
         7e:31:6f:d6:4f:1c:dc:7f:53:85:38:7a:29:e4:74:0f:50:95:
         17:7a:1b:82:75:d7:16:cf:a5:bc:70:a5:30:6c:99:f7:0c:90:
         a8:4f:cf:cb:e4:ec:60:57:75:b0:12:dd:8b:20:99:61:0e:95:
         ef:c1:90:f9:36:67:9b:39:79:33:59:c4:cf:ba:b8:c9:6e:01:
         a4:e1:f0:0c:47:5e:39:97:21:79:67:7a:d2:57:90:ad:2f:4e:
         91:20:ad:37:0b:a3:7a:b0:91:62:1b:0a:b0:dd:93:7b:fc:2e:
         e7:9b:5c:95:53:3d:fe:d2:29:c4:db:c5:e9:c5:42:39:af:ce:
         4b:86:6a:30:8f:c8:d2:15:59:ce:3e:be:2f:bb:3d:6c:8b:d0:
         02:0b:ac:d2:eb:5c:be:22:64:28:88:68:d1:07:f5:d8:72:e2:
         68:46:0d:4c:73:c4:af:37:4d:85:8d:9a:01:75:a3:40:ab:d9:
         75:93:95:44:bd:3a:76:96:75:a3:e3:c7:e9:61:57:40:de:79:
         aa:0e:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:48 2024 by rpki-client on console-fra.rpki-client.org