Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
File:                     9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer (raw, json)
Hash identifier:          5HRaynZPj8aqd+tOW72nc7snSFRnmvilb32uzed0Nl8=
Subject key identifier:   82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D
Certificate issuer:       /CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce
Certificate serial:       010D0C9F432858474F74EE85CE829A5736ED0700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    IP: 47.191.0.0 -- 47.207.255.255
                          IP: 172.99.32.0/19
                          IP: 172.109.0.0/16
                          IP: 2606:4d80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ee:85:ce:82:9a:57:36:ed:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:18:a2:cc:cf:5e:4e:1a:71:50:bc:d3:64:
                    bc:e3:83:02:15:e1:fa:7b:10:0e:9a:3a:21:a6:1f:
                    ba:d5:1e:71:34:c5:01:70:89:c9:fa:48:c5:0c:40:
                    4a:9a:94:db:56:a5:9c:5a:26:a2:85:2b:bb:ed:5a:
                    17:37:b4:59:cf:09:e5:e3:2e:5e:1f:8a:0e:34:ae:
                    81:81:0a:a3:9d:7f:7c:0a:8e:da:ff:b1:91:1b:dc:
                    0d:83:25:15:11:dc:80:38:44:97:5e:fa:09:0d:53:
                    9b:a6:be:e7:ca:ed:29:d4:ea:7c:2f:9d:fd:8e:de:
                    0f:3e:bd:40:dc:8f:fb:94:b5:65:e1:fc:09:b5:71:
                    92:dd:68:ee:e4:fa:5a:d6:c9:d6:95:23:38:a9:ab:
                    2d:95:05:c3:40:f3:56:74:b0:67:d0:d1:fb:30:3c:
                    ce:bb:8f:2b:51:ee:0c:3d:3a:f6:08:29:7d:03:4e:
                    42:8f:80:0c:87:ec:81:80:da:ae:c8:00:ce:29:38:
                    fe:3e:7e:ef:71:26:24:28:ba:da:7a:05:df:ae:e3:
                    a1:90:f7:46:d5:b6:71:82:0d:d4:05:86:4d:f0:03:
                    5e:d3:d7:26:eb:81:f0:2e:47:51:a2:69:ed:1c:86:
                    0f:d2:39:f3:03:44:de:61:0e:89:1d:c6:8b:a7:b5:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl

            X509v3 Authority Key Identifier:
                keyid:35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.191.0.0-47.207.255.255
                  172.99.32.0/19
                  172.109.0.0/16
                IPv6:
                  2606:4d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:97:2d:76:e1:11:8e:2c:59:34:8f:ce:5f:3c:f1:db:54:
         e7:50:2d:e2:48:28:50:4e:b5:d9:4e:2f:4d:37:f4:ae:2b:20:
         b7:bc:41:d0:22:82:bd:16:40:4a:ba:c5:f0:f2:b4:c3:13:17:
         80:6e:99:23:89:ed:44:4c:50:ad:ec:c9:44:ba:30:eb:92:08:
         7a:54:18:7b:7b:a1:2d:86:47:db:96:91:24:27:28:20:6e:a2:
         3c:b5:54:97:2d:49:ea:d7:c4:af:0b:e8:2d:c0:66:b6:5b:bf:
         a9:b0:45:7e:5a:20:26:9b:d5:2a:cf:52:86:1b:16:e9:a0:68:
         0f:9a:3f:15:94:ef:09:09:d5:60:31:b8:08:fc:f7:da:25:d2:
         8f:3a:49:db:4f:11:4d:3d:8d:63:bb:fe:ee:08:d3:ad:21:29:
         4d:29:42:98:65:e8:4d:5f:2f:64:83:71:97:b0:37:9a:7f:92:
         f0:1c:9b:a3:15:27:e2:93:6c:e7:91:da:47:1b:4d:e2:b3:90:
         75:bb:26:89:80:70:ef:09:78:26:4a:1b:f4:53:58:a4:a0:85:
         2d:2c:18:f3:0e:b1:3f:e0:26:fe:30:6f:b1:46:a9:60:fa:55:
         28:c0:28:3a:ec:5d:2a:6b:85:91:aa:6a:71:5d:1d:fb:a6:ab:
         ae:24:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:14 2025 by rpki-client