Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
File:                     1add3b23-5fb0-4412-be17-98450d352516.cer (raw, json)
Hash identifier:          +FMgo8ze2iM/sPMVzsGwNG9yFYueHOjPibSvYwJDV5Q=
Subject key identifier:   DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584429F725AA1206A3BEEC255E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Dec 2023 01:45:15 +0000
Certificate not after:    Sat 14 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 11100
                          AS: 17054
                          AS: 53976
                          IP: 64.72.128.0/19
                          IP: 64.255.240.0/20
                          IP: 66.11.0.0/19
                          IP: 66.159.64.0/19
                          IP: 66.181.64.0/19
                          IP: 66.230.64.0/20
                          IP: 69.7.96.0/20
                          IP: 206.41.192.0/19
                          IP: 206.183.0.0/19
                          IP: 206.210.64.0/19
                          IP: 206.223.22.0/24
                          IP: 207.54.128.0/18
                          IP: 207.114.0.0/17
                          IP: 208.40.128.0 -- 208.40.207.255
                          IP: 208.40.224.0/19
                          IP: 209.114.128.0/18
                          IP: 209.143.64.0/18
                          IP: 209.166.128.0/18
                          IP: 209.190.128.0/18
                          IP: 209.221.0.0/19
                          IP: 216.37.0.0/18
                          IP: 216.82.64.0/18
                          IP: 216.130.0.0/19
                          IP: 216.151.64.0/18
                          IP: 216.183.160.0/19
                          IP: 216.230.96.0/19
                          IP: 216.239.240.0/20
                          IP: 2607:f4d0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:29:f7:25:aa:12:06:a3:be:ec:25:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 10 01:45:15 2023 GMT
            Not After : Mar 14 00:45:15 2026 GMT
        Subject: CN=1add3b23-5fb0-4412-be17-98450d352516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:68:79:ae:4c:81:3e:5d:53:3f:ea:1d:2b:
                    2a:d0:4f:a3:06:e3:f1:b9:fe:ee:c7:6a:bd:f4:f1:
                    c5:35:3f:c6:bf:c8:63:7d:45:12:fe:11:0b:8b:f3:
                    ae:e0:bb:e4:9c:9f:d6:e8:92:e2:68:e9:6a:30:62:
                    d2:21:6b:d5:23:58:58:91:61:8f:79:17:d9:66:f7:
                    e7:8a:dc:5c:c2:5d:a9:85:98:6d:cb:4f:f0:2f:8c:
                    a0:4b:bd:94:f5:0c:34:72:0f:90:57:66:41:37:62:
                    21:2d:3b:a0:30:30:3f:9a:ee:77:2a:e5:22:ea:ff:
                    09:5d:ec:12:e5:58:41:5b:3b:4e:1b:5f:c9:51:65:
                    a9:65:7d:0f:0d:a2:88:3e:19:ef:6d:b1:64:cb:84:
                    02:b5:1b:32:97:38:47:63:e4:86:18:79:c6:14:90:
                    b7:a8:c1:b9:59:c9:37:7c:b4:39:4d:29:8f:8f:f9:
                    69:ab:2d:b4:4a:63:38:36:97:4f:b7:96:26:36:46:
                    84:55:d4:4b:9a:16:b3:df:d3:94:72:6a:bd:ca:52:
                    74:88:fe:e7:5d:d0:09:17:5f:fd:61:3c:18:58:41:
                    57:63:38:a3:fd:6d:47:a4:23:b9:65:2a:53:ab:43:
                    99:48:97:27:b7:6b:24:27:27:a8:4b:e7:51:c6:94:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.128.0/19
                  64.255.240.0/20
                  66.11.0.0/19
                  66.159.64.0/19
                  66.181.64.0/19
                  66.230.64.0/20
                  69.7.96.0/20
                  206.41.192.0/19
                  206.183.0.0/19
                  206.210.64.0/19
                  206.223.22.0/24
                  207.54.128.0/18
                  207.114.0.0/17
                  208.40.128.0-208.40.207.255
                  208.40.224.0/19
                  209.114.128.0/18
                  209.143.64.0/18
                  209.166.128.0/18
                  209.190.128.0/18
                  209.221.0.0/19
                  216.37.0.0/18
                  216.82.64.0/18
                  216.130.0.0/19
                  216.151.64.0/18
                  216.183.160.0/19
                  216.230.96.0/19
                  216.239.240.0/20
                IPv6:
                  2607:f4d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11100
                  17054
                  53976

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:01:3b:78:0c:4d:02:b3:79:42:03:d3:3c:f7:eb:21:be:32:
         fd:27:a3:e7:04:bd:76:28:24:0c:da:b5:49:f3:cb:bd:a3:d8:
         b5:bc:86:cd:6e:ae:b5:9d:c9:d1:47:02:6d:a9:86:3d:db:18:
         c1:39:fd:1e:1b:f4:e8:2d:20:87:a8:63:3c:23:f1:4c:a0:65:
         90:48:1f:9f:84:59:f6:97:4e:1a:fd:1b:42:e3:45:6c:7e:df:
         f6:7a:f1:55:37:aa:00:a4:15:8d:ab:be:3d:9b:44:fa:c2:74:
         1c:9a:92:06:e1:12:af:d8:b1:26:8a:bb:2b:d1:f7:c8:7d:e7:
         6a:a8:61:0c:2a:74:c2:95:b8:14:5a:25:92:84:cb:7c:da:c4:
         f4:ba:ef:0c:df:da:73:c2:b5:99:2b:5e:b1:06:93:f8:f6:81:
         2b:b9:03:10:a5:fb:8f:cd:7a:7d:6d:3b:86:15:0c:3a:41:4a:
         d2:84:cd:23:67:3c:5a:4b:6c:a0:85:80:01:cd:73:e4:c9:3f:
         d8:d7:21:8e:43:8b:29:6f:06:94:b5:ce:12:c6:88:c1:4b:ba:
         bf:df:cb:29:59:96:bc:3b:4e:58:ab:2a:18:0e:1e:b5:18:3a:
         8d:02:b8:19:b8:67:bc:67:b7:ca:35:4f:d8:e2:65:b6:35:43:
         24:c7:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:26:18 2024 by rpki-client on console-fra.rpki-client.org