Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
File:                     0AAD221E4070989D4939FACA0F0981AB26E93895.cer (raw, json)
Hash identifier:          okVRadNcEWGDeARxLWYdeMWHXBb94HB/k5k4zhuSJKg=
Subject key identifier:   0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       37FAA5B8D8EDD80BF068F3A5A5142747985D4816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
caRepository:             rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
Notify URL:               https://rpki-01.pdxnet.uk/rrdp/notification.xml
Certificate not before:   Sun 05 May 2024 15:37:47 +0000
Certificate not after:    Sun 04 May 2025 15:42:47 +0000
Subordinate resources:    IP: 185.195.238.0/24
                          IP: 2a05:dfc4::/32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fa:a5:b8:d8:ed:d8:0b:f0:68:f3:a5:a5:14:27:47:98:5d:48:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: May  5 15:37:47 2024 GMT
            Not After : May  4 15:42:47 2025 GMT
        Subject: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:44:14:41:09:d5:8e:4d:a7:c9:3f:70:e8:
                    1c:e2:ba:07:bb:47:8c:11:5d:2a:7b:0e:a0:bf:bb:
                    8c:52:e4:ac:38:84:c6:0a:9c:72:11:d7:6a:c4:8d:
                    52:c7:aa:e1:12:27:16:a3:15:d8:28:90:c3:a5:9f:
                    4b:ce:b8:77:85:58:ac:33:46:f6:92:ee:f8:9e:ab:
                    31:fc:71:8f:d4:13:14:4d:ec:77:20:71:d4:61:4b:
                    0f:f9:31:d5:28:02:66:49:78:67:92:10:f9:19:91:
                    27:d2:d4:d8:e5:45:e4:74:8f:49:d9:ac:ac:04:0d:
                    c0:f3:1a:6c:2c:29:89:a7:a6:36:63:d6:8d:f5:77:
                    56:28:dd:b8:af:a7:67:74:1f:29:7d:f4:4e:c5:55:
                    bf:3a:3f:11:98:c8:96:8e:9e:16:3f:68:af:2e:0c:
                    ff:2a:95:12:43:45:06:6c:37:e6:3e:51:37:9a:0b:
                    01:39:71:7a:09:57:0d:70:c8:7b:a6:59:2f:77:eb:
                    23:70:c0:86:85:5f:9a:32:c2:77:3d:16:b9:30:89:
                    77:1f:b5:f5:24:8a:97:51:21:75:b4:c0:f2:fa:ef:
                    ea:a1:4c:f7:31:bf:10:ef:63:96:37:eb:fb:5c:b2:
                    fc:60:92:76:ea:c2:9f:ee:73:e7:cf:9b:bc:2a:ac:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/
                RPKI Manifest - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                RPKI Notify - URI:https://rpki-01.pdxnet.uk/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.238.0/24
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:5e:b9:05:af:4f:3a:de:0a:34:a7:32:0b:7f:9d:be:32:
         9b:9a:b5:be:d4:ea:56:0f:10:00:69:1e:a3:01:67:bf:ef:b3:
         3f:cd:80:63:7e:c8:f9:fb:6e:b3:f2:04:fd:4b:81:13:91:9a:
         15:ce:7a:6d:a8:30:3c:1d:fd:2b:6a:01:ff:8d:ca:34:59:ae:
         5d:6b:ba:27:2d:6f:d7:09:96:1b:8e:0d:6d:d8:56:17:ce:26:
         0a:5b:cb:f7:de:14:a1:17:2f:99:cf:28:17:0d:a9:63:07:1d:
         55:d1:f8:44:97:18:4a:1b:d2:ca:58:c9:0a:b3:cd:2e:bf:07:
         e9:4a:97:15:88:d9:9b:de:83:1c:53:3e:a3:38:89:51:4a:31:
         2d:12:b0:df:b2:fb:ad:bf:51:5a:37:26:a5:47:f3:d5:65:f5:
         85:61:f9:36:56:4f:3b:15:63:c6:d2:9f:0c:ad:12:1c:bf:33:
         35:d4:f6:6f:4b:e9:13:0a:ba:8f:ae:e8:4b:a1:25:92:6b:59:
         3d:3a:68:3d:22:a4:33:cd:c4:f7:fd:d8:22:06:38:b0:60:da:
         b9:15:98:ce:dc:f4:a0:4c:ce:4c:c1:b6:1d:12:5c:18:93:a0:
         0f:27:24:96:e7:9f:87:4f:5f:9c:93:7c:4f:22:6a:3b:b5:9f:
         58:71:32:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:22:00 2024 by rpki-client on console-fra.rpki-client.org