Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
File:                     a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer (raw, json)
Hash identifier:          Gw8q9OcZizgkGHeelAXU8Vofru3m+02mBf+UePNLXmc=
Subject key identifier:   EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584572C30DC7C5DAE96C9E7A4F60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Apr 2024 20:21:14 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 15149
                          AS: 23421
                          IP: 64.29.184.0/21
                          IP: 66.199.224.0/20
                          IP: 72.9.96.0/20
                          IP: 96.45.64.0/20
                          IP: 2604:16c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:72:c3:0d:c7:c5:da:e9:6c:9e:7a:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  5 20:21:14 2024 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:10:76:df:5b:fa:21:db:24:82:17:c4:10:
                    b1:40:d7:c1:95:7a:08:2a:95:d1:f4:e5:96:6f:57:
                    4b:1d:4f:d2:82:70:88:9d:3d:c1:de:dd:2e:0c:a9:
                    61:73:43:1b:9d:94:ec:b7:4b:45:72:02:2f:cb:26:
                    f9:bd:95:e4:4e:9a:4b:41:eb:eb:a5:81:f6:02:ec:
                    59:16:64:2a:0b:fd:19:c1:7c:3b:9a:b5:b8:b0:ce:
                    77:e0:9c:66:22:30:49:4a:c5:bf:36:f4:62:da:03:
                    79:71:3c:5d:6b:c7:86:c6:45:e2:43:48:1e:fc:88:
                    5b:d4:a2:62:c9:1c:f4:4c:a3:b0:00:79:a1:f7:cb:
                    57:83:be:43:bc:b6:e3:aa:34:f1:22:bd:ff:02:4b:
                    88:18:41:65:9d:4d:8f:77:bc:83:02:0f:88:24:01:
                    e5:35:83:60:00:96:07:8e:1e:34:e7:63:5e:65:f6:
                    54:b5:20:a0:7b:d7:e5:d0:c9:fc:03:af:08:e5:55:
                    22:d3:88:c3:f4:44:fd:ed:f9:4a:aa:d3:3e:3a:05:
                    47:3c:a2:fa:ed:c8:07:9c:0a:be:a6:9b:d0:07:78:
                    3c:f5:02:14:64:d3:17:f9:f5:7e:5a:e5:1a:01:7a:
                    d1:74:84:6a:9f:32:ee:b4:40:dc:df:74:24:e6:69:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.184.0/21
                  66.199.224.0/20
                  72.9.96.0/20
                  96.45.64.0/20
                IPv6:
                  2604:16c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15149
                  23421

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:58:78:5f:2e:12:31:a7:35:70:8f:bc:0c:19:ab:07:7e:be:
         69:f0:42:7f:0b:10:ca:3c:fb:bd:f0:d2:cb:60:d3:59:93:44:
         c1:7c:16:1c:a7:21:5b:c1:c1:23:25:e2:d4:9a:bc:fa:13:60:
         7b:24:2b:05:d0:f3:e8:15:10:12:16:49:e0:a3:2e:f1:45:2d:
         85:d3:ec:ae:44:0f:54:b8:c8:e4:da:f3:66:33:1a:31:ff:6a:
         58:a3:ea:7b:e9:bf:95:75:d4:51:9f:0f:06:d2:ac:2e:f8:f3:
         4a:c3:82:38:cc:7a:9a:50:53:3c:3e:fe:31:a3:14:26:82:57:
         34:96:7a:9e:ad:35:66:5c:df:19:38:9b:8f:2a:ce:b1:e7:b0:
         11:c8:43:5a:d9:2e:f3:f2:9f:45:62:08:33:66:84:67:6b:a7:
         c2:64:5e:2c:7b:08:70:bc:7d:d8:ae:33:49:61:e5:85:ba:ac:
         d0:b4:de:c0:92:7e:1e:96:b7:d6:1b:f6:9d:7b:73:53:23:4f:
         4e:a6:95:ad:d3:3c:16:51:4e:2e:20:82:84:6e:e0:e0:42:15:
         1d:98:32:10:d6:fe:97:34:4c:ee:7d:3c:48:46:49:10:8f:de:
         65:cc:3f:02:10:f9:3d:6f:44:36:0d:fd:a6:4b:63:d2:61:07:
         3a:5d:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:17:59 2024 by rpki-client on console-ams.rpki-client.org