Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer
File:                     04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer (raw, json)
Hash identifier:          +kiaLbqXtFhRl9NUokxFT/HPaQSutooDw1Kn4Qo0sf0=
Subject key identifier:   71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858456F7B4EE91A9D4166D8AF2C60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:09:15 +0000
Certificate not after:    Tue 07 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 14726
                          AS: 395168
                          IP: 130.51.68.0/22
                          IP: 148.59.142.0/24
                          IP: 148.59.240.0/23
                          IP: 158.51.201.0/24
                          IP: 2604:7e40::/32
                          IP: 2605:d40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:7b:4e:e9:1a:9d:41:66:d8:af:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Apr  4 16:09:15 2024 GMT
            Not After : Oct  7 00:45:16 2025 GMT
        Subject: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:31:b5:0e:47:b4:07:da:f1:88:b4:e6:a2:
                    c6:f7:6c:b4:94:06:77:e6:35:b4:5f:d4:c0:79:6a:
                    49:bf:3c:b3:1d:27:ff:65:88:df:7a:81:f2:10:23:
                    5d:85:b4:57:65:c7:be:e2:94:08:b1:92:f7:6c:9a:
                    2c:c8:5f:d7:dc:67:6d:3a:7b:5a:4a:88:96:5c:56:
                    8f:67:8e:b1:37:33:4b:81:be:12:3d:ed:1f:d4:16:
                    08:8d:bd:1f:55:d9:0e:59:44:fa:90:59:28:ce:0b:
                    e6:6d:04:61:3c:9d:d4:94:f1:a8:24:6b:17:37:37:
                    e4:2a:f2:76:43:19:95:50:c6:2f:94:aa:ed:8a:a1:
                    d8:1a:52:92:d2:18:fa:4c:3f:9d:e8:12:80:9c:bf:
                    fa:6d:81:2a:3b:71:a2:38:2c:1f:84:c6:3e:1e:6b:
                    df:70:57:0d:68:f6:24:5c:e8:2e:6c:8c:98:5a:ef:
                    f6:7a:44:54:5c:da:08:81:44:d9:41:a3:ef:7e:0c:
                    27:d2:2d:7e:d6:52:91:d0:49:8c:ce:d7:a8:20:9b:
                    5d:a4:c6:5a:51:bc:c6:90:53:4c:4d:cb:16:7c:33:
                    ec:ea:77:09:53:e6:47:12:98:e7:b0:46:ca:f8:d7:
                    ad:39:05:c3:89:99:ef:3d:b7:02:d8:65:b7:4f:7b:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.68.0/22
                  148.59.142.0/24
                  148.59.240.0/23
                  158.51.201.0/24
                IPv6:
                  2604:7e40::/32
                  2605:d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14726
                  395168

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:b0:22:9a:61:f9:63:51:b4:25:02:98:68:37:55:13:a3:
         f6:a0:6a:e0:19:a7:e8:a4:0c:b4:d5:4f:7d:85:1a:24:98:d2:
         7f:5c:54:23:c0:5b:63:fa:15:2f:f0:f8:70:d3:ce:c7:cd:7d:
         f1:b3:cb:d4:bb:b2:a7:16:59:ee:8d:ed:b8:66:9c:44:b6:84:
         4a:83:ab:e8:29:b5:a7:0b:f9:26:5a:29:80:88:66:5d:36:1e:
         44:a0:54:6b:2d:18:f5:cb:6e:86:3b:45:15:b1:1e:0f:32:5b:
         47:03:61:c3:30:57:ab:93:46:25:ec:bd:a3:bb:bb:8b:7f:4c:
         df:88:81:08:71:7a:cd:eb:53:04:cc:d9:9b:a4:2e:3f:7f:d4:
         0f:4f:51:dc:fe:82:15:69:b8:bd:ed:b0:11:ec:c9:3d:ca:f6:
         e5:7d:a4:84:d9:58:50:10:ee:67:68:5c:f5:8c:9e:d2:57:26:
         f8:e9:12:50:ec:73:0d:90:64:89:ae:b8:b2:52:16:75:f3:f0:
         4f:09:ab:38:7b:1b:22:63:f6:bb:ed:4a:5c:76:1b:65:5a:dd:
         ef:3d:48:0e:01:e1:0e:a8:e8:64:5c:44:2f:03:6d:f3:b1:31:
         61:11:df:0f:c4:8b:92:d5:14:dc:71:1e:80:7b:a8:25:c5:f9:
         33:fd:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:26:18 2024 by rpki-client on console-fra.rpki-client.org