Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
File:                     a2159823-806a-4879-9de9-7be634e8cd31.cer (raw, json)
Hash identifier:          zeOmX6WDmVjsREm2iK6y8IQRgQikWDxMmxtL4rHrVWY=
Subject key identifier:   A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A22670AA6C4D2D3C0BBC1480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 19:44:29 +0000
Certificate not after:    Sun 26 Jul 2026 19:44:29 +0000
Subordinate resources:    AS: 6334
                          AS: 7128
                          AS: 14215
                          AS: 19213
                          AS: 40708
                          IP: 151.193.0.0/16
                          IP: 199.204.28.0/22
                          IP: 2620:115:b000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:26:70:aa:6c:4d:2d:3c:0b:bc:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 22 19:44:29 2024 GMT
            Not After : Jul 26 19:44:29 2026 GMT
        Subject: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:8a:36:29:b8:12:c9:7f:b7:de:3f:ab:5f:
                    91:27:a3:f9:ce:b0:4b:10:15:d3:8b:04:7c:92:3d:
                    00:50:b8:f9:9e:9f:dd:1f:e6:26:0b:00:45:dc:73:
                    91:ad:60:af:8f:56:d7:4e:bb:cf:ee:7d:16:3d:ab:
                    80:26:0c:90:a6:56:cb:31:48:91:52:f4:dd:29:70:
                    91:b4:a2:70:4c:c5:82:a8:c5:a0:c4:13:81:47:b8:
                    3b:8f:8e:41:64:88:38:3f:32:11:7f:9f:f5:2f:a6:
                    9d:57:ee:10:f4:48:89:06:95:a8:eb:e8:f5:64:dc:
                    59:c2:ff:8b:1d:df:e6:f8:4a:b0:d3:5c:a9:da:25:
                    7d:73:5f:4f:6c:1c:c6:cd:b5:08:7e:78:1e:5d:6c:
                    d5:fb:35:d4:31:fd:e4:50:f6:86:2e:b9:3d:90:27:
                    18:26:df:50:49:7b:66:9b:dc:a8:d4:76:8d:2e:15:
                    0a:fc:9a:f0:90:c2:fb:60:e9:fd:5a:c7:36:3a:1f:
                    a6:c9:59:36:f1:da:6a:41:d9:ad:5c:80:60:4b:9e:
                    23:e8:81:33:2e:84:da:7e:d4:ee:bf:36:30:e0:82:
                    85:4c:ee:67:30:0a:50:78:53:c9:58:77:e9:99:a4:
                    82:7d:a3:62:13:32:c3:2b:4d:83:52:88:03:ab:61:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.0.0/16
                  199.204.28.0/22
                IPv6:
                  2620:115:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6334
                  7128
                  14215
                  19213
                  40708

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:24:1b:f4:c1:1e:18:cf:41:aa:01:95:e9:81:11:31:5d:56:
         7c:00:b0:2f:bb:11:70:08:fa:c6:d9:70:df:b7:aa:e6:24:70:
         46:42:a3:f4:4f:c0:ce:f1:9d:d2:02:52:9c:1b:50:4b:48:02:
         92:a9:6b:ac:7a:85:73:7e:6f:6e:9e:9c:68:7c:7f:5c:81:66:
         3f:d5:53:c0:e1:47:28:6c:d0:e8:56:41:7a:a7:4d:65:9c:e0:
         7a:e1:f9:77:6f:bf:7c:ab:52:53:47:22:54:48:30:62:48:b2:
         a9:2f:02:a2:20:a6:a1:9f:58:ba:1c:10:36:0d:26:cb:77:70:
         e7:ee:fc:6d:0c:13:0d:21:76:13:53:7e:fc:30:00:a7:06:03:
         d8:18:e5:dd:69:62:83:86:8a:a1:a0:90:85:10:5f:e2:fb:a9:
         48:fa:c3:4a:06:9a:61:42:d6:b1:5a:02:2f:7f:b3:19:2d:65:
         4c:95:bb:50:3a:33:5b:9e:8f:c2:8b:e5:33:96:3d:86:49:87:
         2c:b5:eb:3f:b9:e2:94:ed:2b:ba:27:7a:27:bf:a6:d3:30:96:
         bf:0e:1e:25:12:d4:c0:c8:1d:07:8c:3a:e0:5e:5d:2e:4f:6c:
         7c:0f:e3:e5:50:16:bc:38:f2:0e:78:56:83:a6:6f:02:f4:c6:
         28:f1:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:23:04 2024 by rpki-client on console-fra.rpki-client.org