Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
File:                     68b39235-773a-4108-9528-465304a966b3.cer (raw, json)
Hash identifier:          QcTbBe1SMFPk5HKIIPZHYjyrMSsH4shWhtQ8VTeqWTU=
Subject key identifier:   BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858432BCD2D10ABA1217B367AAB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Sep 2023 00:45:21 +0000
Certificate not after:    Sat 13 Dec 2025 01:45:21 +0000
Subordinate resources:    AS: 63296
                          IP: 23.174.240.0/24
                          IP: 52.129.120.0/21
                          IP: 104.245.72.0/21
                          IP: 107.178.20.0/24
                          IP: 107.178.28.0/24
                          IP: 107.178.31.0/24
                          IP: 2605:fa40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2b:cd:2d:10:ab:a1:21:7b:36:7a:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Sep 10 00:45:21 2023 GMT
            Not After : Dec 13 01:45:21 2025 GMT
        Subject: CN=68b39235-773a-4108-9528-465304a966b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:47:aa:22:8a:15:70:4d:75:7a:3d:b8:1c:
                    0e:e1:06:7e:1e:c2:53:f4:2c:0f:42:e4:34:57:90:
                    ce:b5:b8:78:f3:3a:04:6c:ea:6b:5f:66:fe:df:fb:
                    d2:01:c5:3e:a4:bb:50:f7:15:8f:28:e6:85:72:76:
                    a8:ea:6b:a2:67:41:af:a7:00:93:ec:3b:07:b5:df:
                    69:a6:c2:63:6c:fe:67:19:81:2d:72:63:64:40:31:
                    a7:ae:16:71:39:75:8e:6a:14:b6:15:5a:ab:9a:01:
                    03:9a:15:50:b9:bb:ec:bc:36:db:3b:dc:0d:1e:5a:
                    d0:78:e7:40:38:5f:4e:3f:57:71:b5:1b:b2:cc:93:
                    68:e3:35:ef:0c:a8:00:de:65:ca:d1:9f:75:54:35:
                    ba:06:70:fa:0e:26:f1:29:49:47:c7:e3:46:d9:f7:
                    cb:4b:7a:72:f9:4f:8e:56:4a:0b:58:11:23:e9:c2:
                    f0:33:29:e1:8a:1f:7f:14:52:65:27:23:14:09:ec:
                    0d:61:9e:0a:e6:cb:e0:b1:ab:e6:5f:45:02:b4:49:
                    d1:f9:6d:ea:4b:39:ec:91:e9:aa:50:19:b9:6f:f1:
                    25:e8:28:6c:1e:46:b2:57:a2:48:26:1b:7c:f7:4e:
                    e1:0b:02:fc:af:5a:98:4b:e6:1f:e5:d3:6d:42:4b:
                    b8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.240.0/24
                  52.129.120.0/21
                  104.245.72.0/21
                  107.178.20.0/24
                  107.178.28.0/24
                  107.178.31.0/24
                IPv6:
                  2605:fa40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63296

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1a:17:af:f8:05:09:da:69:c7:25:c3:29:13:ce:52:45:11:
         8d:30:c2:29:77:be:39:c6:56:9f:a5:6e:d4:2f:d6:6a:55:36:
         87:fb:0e:1d:29:99:c6:d1:18:b2:cc:98:8e:a1:53:9b:b7:0a:
         4c:4d:a9:d4:fb:0b:cf:00:66:c3:05:cd:1d:07:36:f2:ae:95:
         62:c1:fb:89:3b:c5:e8:7c:f5:9d:ff:5b:98:7b:17:b2:af:8d:
         c7:84:4f:1c:47:fd:04:ee:4c:e5:ba:b7:ac:50:51:c0:ae:6e:
         44:d0:8b:4d:25:4a:fc:f2:8a:0b:45:62:e6:7c:7b:98:f8:db:
         ca:a0:d7:91:f8:52:c5:9b:96:1b:b8:02:92:f0:1d:05:e4:fc:
         04:86:e3:fd:fc:34:5b:55:f3:2f:71:1a:3b:26:ba:8d:cd:28:
         11:4d:9c:3e:ed:6e:f2:da:e8:af:39:d2:49:a1:29:bd:53:20:
         b4:66:7c:cf:c1:58:3d:71:31:9d:16:48:86:13:a4:2c:d3:ed:
         2a:3c:a7:0a:97:86:28:41:c5:0c:53:a8:e8:7c:e6:e2:cd:cd:
         e1:70:c6:f8:4e:79:07:b2:f7:1b:84:c0:e2:88:f6:64:89:cf:
         b7:9f:5e:f3:ad:22:c7:dc:62:bf:73:bb:93:45:a4:12:9b:d2:
         f2:91:58:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:48:03 2024 by rpki-client on console-fra.rpki-client.org