Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
File:                     80e43277-4490-4cc9-99ec-5726af08c8ab.cer (raw, json)
Hash identifier:          pXPijVcWKj75Z2EHQkKkqt5ZEtqueu6fJ9GMa2Tc+Wc=
Subject key identifier:   F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584445E1FDB0279D47040EDC6100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Dec 2023 01:45:15 +0000
Certificate not after:    Tue 24 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 18677
                          AS: 23520
                          IP: 63.245.0.0/17
                          IP: 67.230.0.0/17
                          IP: 69.79.0.0/16
                          IP: 72.252.0.0/16
                          IP: 2604:c000::/32
                          IP: 2607:f438::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:45:e1:fd:b0:27:9d:47:04:0e:dc:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 20 01:45:15 2023 GMT
            Not After : Mar 24 00:45:15 2026 GMT
        Subject: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:37:41:cb:00:6c:51:2f:ad:12:7d:2d:eb:
                    2b:05:ec:c2:d3:e7:5b:3e:0c:b3:e8:9c:86:3f:98:
                    b0:c7:a4:6a:d2:72:6d:2f:4f:ee:af:c4:0c:a5:ec:
                    09:b2:d9:10:47:1f:7b:b6:00:aa:d0:28:85:d6:18:
                    07:07:74:7f:01:67:9e:20:ed:22:50:ba:03:aa:09:
                    04:71:dc:7a:78:15:a0:74:92:ef:af:59:c8:29:55:
                    b3:f3:8e:54:90:48:35:b7:67:b5:d1:fd:9c:a0:79:
                    ce:f0:37:d2:b9:a3:1b:70:9e:c4:45:45:51:60:e7:
                    99:3e:a0:76:36:e0:23:b9:15:f0:03:53:a6:f6:da:
                    63:ac:42:2d:e6:f6:52:10:4d:f3:d9:9a:d7:99:54:
                    aa:95:63:00:e2:5e:a3:69:b7:ab:cb:b5:fd:6f:76:
                    00:3a:4e:77:1c:22:f4:b4:4f:17:1c:d4:cb:31:d4:
                    8a:71:2d:d4:51:a3:a3:49:8c:68:e3:41:5f:13:e3:
                    84:75:83:1e:86:7c:4e:43:43:b9:a1:60:71:0a:64:
                    7e:ee:9d:a4:78:8f:e5:5e:d7:bc:7d:8c:96:29:c6:
                    d9:ea:3b:ab:44:97:e9:54:87:ea:48:6d:89:19:b5:
                    13:d9:8e:f0:de:39:62:55:1b:c1:cd:d2:82:6d:e0:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.0.0/17
                  67.230.0.0/17
                  69.79.0.0/16
                  72.252.0.0/16
                IPv6:
                  2604:c000::/32
                  2607:f438::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18677
                  23520

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:69:ff:a9:b0:fb:14:93:b1:6f:03:01:5d:72:91:00:46:74:
         af:7c:85:ed:7f:8c:ce:df:18:74:cb:86:17:46:88:c0:b8:ff:
         9a:a4:ed:58:a8:d2:18:51:e1:1a:96:b7:cd:62:88:e0:59:ee:
         0c:cf:c6:14:20:92:51:ce:a5:76:d8:7f:1d:2e:9d:05:d4:d2:
         68:ba:a0:01:fc:24:d2:77:3c:31:fd:4c:3f:0c:7f:82:98:52:
         83:5c:97:a2:8f:67:13:11:9a:b2:6f:9c:2c:f3:45:18:67:fc:
         0b:40:d5:c3:a1:da:6c:99:e2:b8:2f:88:d6:b3:d5:ca:8d:13:
         43:11:de:76:a8:1c:cc:fe:e9:a4:9e:4b:f1:b5:58:18:3e:b5:
         99:67:dd:d9:7e:5f:cf:5a:3f:1a:a6:d0:8c:6c:07:c4:01:bf:
         e1:38:c0:95:6a:16:6b:be:56:c9:5b:df:dc:4c:1a:23:5a:6d:
         6e:15:b9:2f:84:c8:a2:91:d6:d7:3b:83:fd:0b:1e:a4:e0:20:
         0a:01:00:7e:40:2d:1c:20:6e:7f:28:b3:29:90:44:a2:5e:f2:
         6b:e2:8d:2d:90:0d:f1:6c:6d:e2:20:fc:52:54:d4:e9:aa:e7:
         50:f2:32:b1:b2:ed:48:d7:f8:f1:a8:25:54:61:c3:fb:7d:1d:
         60:e3:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:48:04 2024 by rpki-client on console-fra.rpki-client.org