Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer
File:                     6ad8d02c-4049-4deb-a840-4229a7010c02.cer (raw, json)
Hash identifier:          YnKiMLxr1WZNWDobZV+8ZXd7bR7cjHKpaSq9xUA8+g0=
Subject key identifier:   74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285845676D246C6D43BB4FDB4BF400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 18:54:15 +0000
Certificate not after:    Fri 24 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 395544
                          IP: 74.85.154.0/24
                          IP: 192.231.155.0/24
                          IP: 2602:fb14::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:6d:24:6c:6d:43:bb:4f:db:4b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  1 18:54:15 2024 GMT
            Not After : Oct 24 00:45:16 2025 GMT
        Subject: CN=6ad8d02c-4049-4deb-a840-4229a7010c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:e4:17:77:c3:c2:68:7c:7e:02:b3:1e:2c:
                    d0:6b:9f:61:a4:27:4e:a4:38:0a:a8:89:32:df:b8:
                    3f:fc:22:26:1a:47:3d:ad:53:4b:9c:6b:c3:4b:a7:
                    89:7f:69:cc:cf:28:52:cd:d2:a9:84:d8:da:a2:92:
                    ba:06:22:5a:4c:89:cb:d6:02:02:5e:5f:49:03:7d:
                    91:f3:e7:19:6e:2e:b8:b2:dc:3c:13:61:a0:d7:3e:
                    15:09:1e:73:97:69:d6:5b:c5:40:e5:f7:79:7d:2a:
                    eb:ed:94:66:26:bd:7a:f4:7a:45:80:a8:5a:0f:9d:
                    98:f8:6e:d3:7e:6c:40:f8:2f:35:fc:9b:ec:3c:60:
                    40:40:c6:64:df:68:c9:21:ef:c0:35:4d:75:4d:71:
                    bb:a0:b6:36:70:0c:09:d7:26:f9:21:db:92:e0:24:
                    77:5d:1e:2d:19:53:dc:98:28:d7:90:57:4a:18:03:
                    c7:c6:18:2b:33:37:3c:05:96:b0:31:0d:7a:7a:fa:
                    f7:56:f2:aa:28:57:27:43:b8:26:35:66:dd:de:71:
                    a7:da:76:80:bd:38:f3:a6:42:46:56:10:c3:62:d9:
                    93:f3:6a:11:56:36:2b:59:02:45:72:f8:08:92:3f:
                    4d:ff:80:c9:a1:a0:ca:81:68:d8:df:b3:43:b8:8d:
                    9f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.154.0/24
                  192.231.155.0/24
                IPv6:
                  2602:fb14::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395544

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:74:c0:6a:ca:f6:31:e1:2c:38:d3:d5:55:dd:d5:67:c9:
         c6:89:26:36:f0:27:2f:32:68:db:0f:7f:6f:89:2b:a8:ca:13:
         ae:48:30:3c:d5:6d:0f:3e:22:6f:04:9e:5a:48:13:37:75:08:
         e0:17:ba:3c:aa:a1:a6:31:ae:19:b8:4f:d3:43:ff:87:28:0b:
         54:8d:c2:0c:0d:86:90:44:a9:95:68:26:0c:93:21:87:fe:33:
         60:23:f2:1b:d2:ed:be:c2:62:04:30:c2:bd:7f:20:ac:5e:3b:
         74:66:de:0e:e6:e5:2c:48:5e:31:a2:e3:9d:52:a3:99:fc:38:
         2a:b6:ce:e8:c1:39:dc:6b:6a:02:11:da:97:0e:5d:51:84:37:
         dd:c2:b0:68:a0:bc:e2:17:01:c1:db:55:bc:9c:18:54:6f:60:
         17:7f:66:ba:09:62:ea:38:0a:70:7b:b4:ac:f2:7a:22:af:a5:
         fd:90:f3:31:df:86:0a:ed:96:cc:9f:0c:f9:9b:d1:55:00:bd:
         32:d8:66:1f:29:16:5d:ee:5a:46:74:10:e7:d2:12:f3:a1:17:
         b2:1b:b2:7c:3d:12:a4:19:07:bd:ac:5a:6c:9e:25:59:a8:9a:
         22:40:97:9b:61:15:df:85:51:35:fd:ab:75:5b:73:4e:db:33:
         09:cd:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:53:48 2024 by rpki-client on console-fra.rpki-client.org