Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
File:                     e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer (raw, json)
Hash identifier:          ar14Q3yRuvgBj+9faKhuQz5WXEK9RdK88S8XnLedvCM=
Subject key identifier:   14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285845F946F5D57B5B6CAC328A6400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 May 2024 00:45:20 +0000
Certificate not after:    Thu 27 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 10430
                          IP: 66.96.64.0/20
                          IP: 67.201.192.0/18
                          IP: 68.179.192.0/19
                          IP: 69.56.64.0/18
                          IP: 72.233.128.0/17
                          IP: 173.229.32.0/19
                          IP: 207.180.96.0/19
                          IP: 216.186.0.0/17
                          IP: 216.210.0.0/18
                          IP: 2607:fa78::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f9:46:f5:d5:7b:5b:6c:ac:32:8a:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 24 00:45:20 2024 GMT
            Not After : Aug 27 00:45:20 2026 GMT
        Subject: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:d6:e1:3a:52:01:8e:9a:0f:b2:ba:eb:e8:
                    90:81:8e:ec:41:8e:93:3f:1b:38:20:ad:09:ef:54:
                    39:59:7d:96:4f:57:73:66:a9:7d:93:a4:81:88:5b:
                    d0:65:1d:f1:0d:59:56:a2:b2:cf:4b:8c:cc:18:a0:
                    48:0a:41:ce:49:55:4b:d7:60:6f:bf:30:ef:f2:1b:
                    e8:a4:2f:3f:d8:bd:41:5d:79:9c:a0:6c:ed:f2:10:
                    ab:43:c7:b0:1e:c2:52:75:ad:32:55:4b:e1:d4:fa:
                    57:2a:c1:83:2c:d4:9e:83:22:9b:e5:3f:71:0d:02:
                    b6:02:92:48:d9:9d:ff:26:d3:58:32:d3:42:05:ed:
                    2c:7e:74:87:32:16:eb:49:01:3b:96:a3:7e:eb:ad:
                    55:c1:81:6f:f7:dd:53:79:17:f8:85:3d:57:b8:2a:
                    e3:53:07:0d:64:c3:3b:b1:98:36:99:c6:09:a8:e8:
                    dd:1c:4e:42:d1:d2:c1:10:68:e5:0b:2a:39:7c:e9:
                    45:95:f7:6f:56:a1:5e:d1:94:cc:11:24:36:5d:c3:
                    40:af:c6:47:0b:59:c3:f4:a3:56:43:70:d9:bd:b1:
                    95:d6:32:c5:2b:80:7e:cc:aa:6b:5f:e9:e2:06:d3:
                    ee:e3:80:21:b9:e8:f6:81:55:19:c5:96:c8:b0:23:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.64.0/20
                  67.201.192.0/18
                  68.179.192.0/19
                  69.56.64.0/18
                  72.233.128.0/17
                  173.229.32.0/19
                  207.180.96.0/19
                  216.186.0.0/17
                  216.210.0.0/18
                IPv6:
                  2607:fa78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10430

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:f7:22:fe:ae:f0:ff:3a:d1:9d:5c:24:80:86:3b:64:d7:
         8a:a4:96:f7:a4:d4:20:89:b5:89:bd:35:8f:af:02:17:d9:95:
         ac:c1:09:b0:ba:7d:e0:f4:42:a3:22:01:70:86:48:ce:b6:ec:
         d7:5d:d4:63:e0:6e:b1:75:1a:dd:16:bb:f8:d0:9e:10:10:bc:
         77:d1:c9:84:86:e9:07:d8:96:f0:3b:fd:ce:1c:c9:e3:a6:3f:
         32:f6:83:25:a0:27:d5:43:0f:ce:16:54:e0:9d:6c:a4:37:97:
         94:16:00:ba:ba:62:ad:19:d0:53:d1:56:53:fd:fc:6e:1f:20:
         fb:d6:fb:38:81:63:aa:55:ba:c9:b0:18:0d:d9:ac:5a:9a:cf:
         f6:37:9b:01:7f:78:65:00:7c:0b:45:23:3b:ce:bb:5b:d2:4d:
         a5:61:a2:5d:b2:cf:17:3a:f4:22:c9:11:f9:6a:5b:61:e4:76:
         ec:98:1a:3e:2b:1c:aa:ec:04:f4:4f:70:7d:53:aa:c8:3e:75:
         6b:51:47:e8:7d:0c:fb:44:33:8b:9d:9e:f4:33:ad:7a:25:02:
         ae:1b:ee:64:d3:7d:04:9d:96:c1:b1:7c:5d:52:52:46:bf:04:
         dc:0d:64:21:8b:2b:58:c6:81:fa:8f:3e:fc:c6:ff:09:bf:a3:
         4c:49:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:27 2024 by rpki-client on console-fra.rpki-client.org