Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
File:                     6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer (raw, json)
Hash identifier:          DuJwWPgMQ+kfAqviX7DDAyyHsgPCICb42DIwRj3G0BQ=
Subject key identifier:   B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842B0F7089C99346320725F0400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Jul 2023 00:45:16 +0000
Certificate not after:    Thu 30 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 26673
                          AS: 63086
                          IP: 43.231.12.0/22
                          IP: 69.48.216.0/21
                          IP: 103.50.92.0/22
                          IP: 104.36.192.0/21
                          IP: 207.231.168.0/21
                          IP: 2620:11a:f000::/36
                          IP: 2620:1b2::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:f7:08:9c:99:34:63:20:72:5f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul 28 00:45:16 2023 GMT
            Not After : Oct 30 00:45:16 2025 GMT
        Subject: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:a4:4f:5a:2d:1a:c0:0e:ed:7a:84:62:95:
                    d5:7c:1c:12:7c:cc:8c:05:31:cb:aa:e5:6e:15:7a:
                    b3:05:de:9c:d0:4d:79:f6:52:b8:dd:7b:4a:a3:ef:
                    32:09:d6:3d:87:cb:0a:f3:cc:18:fc:16:51:48:29:
                    7b:4c:31:f8:5c:92:11:a7:b4:43:85:bf:1a:5d:8b:
                    8c:af:9d:b9:c1:2a:cd:0f:a5:17:10:8c:a2:10:81:
                    07:2d:85:4b:41:82:25:8f:00:f4:f8:e4:3d:e6:5d:
                    f8:a6:02:b1:f4:3a:49:c7:0e:45:aa:54:c3:38:4e:
                    c2:8a:cd:f3:4b:8b:38:63:f2:08:e2:96:d4:87:a4:
                    52:90:b3:47:2b:e0:20:e7:cc:7f:4a:71:c1:9c:ee:
                    1e:14:a0:69:6b:57:24:0d:88:53:50:48:b0:52:de:
                    1f:dd:72:05:6e:a4:23:9d:20:54:76:92:a9:5e:13:
                    5c:ae:2a:73:0b:76:5b:d1:49:db:9d:0d:43:3e:8b:
                    1d:0a:79:bd:3e:5b:1e:ef:69:6c:b8:a8:d5:84:d0:
                    91:1b:ab:84:73:26:a2:e6:12:ca:ec:23:94:1f:ef:
                    06:0d:6f:72:e3:9d:d6:64:a8:74:b0:8b:24:eb:ac:
                    f0:f2:49:ed:c4:82:0f:ff:11:b5:45:18:ef:cf:2e:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.12.0/22
                  69.48.216.0/21
                  103.50.92.0/22
                  104.36.192.0/21
                  207.231.168.0/21
                IPv6:
                  2620:11a:f000::/36
                  2620:1b2::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26673
                  63086

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:78:46:5d:80:75:63:ec:ec:e7:26:38:2d:00:b9:99:b4:3e:
         99:0d:e7:82:67:f5:0e:e8:6c:35:de:e7:04:c5:57:aa:34:81:
         de:05:8c:26:53:e1:04:29:e7:fd:46:5a:52:cf:39:30:0c:e6:
         f5:03:1d:5d:f3:15:6e:1a:81:0c:91:03:d0:5b:55:72:a1:ce:
         6f:4c:f5:ae:29:94:1c:17:d9:ac:fb:73:a6:98:78:32:a6:e9:
         4f:9e:ed:df:f9:bf:c6:70:5d:79:3a:8b:8b:6f:14:f7:50:f7:
         da:c1:bd:9a:76:8b:cc:00:24:dd:c0:63:33:d4:35:9e:a1:ab:
         6a:11:17:23:74:fe:9c:40:0a:59:a8:01:39:89:8a:be:fe:52:
         e4:63:d4:90:81:6a:c4:ec:b9:4b:15:f5:a0:99:4e:15:07:48:
         ef:20:56:e9:0f:d2:20:59:6c:36:cf:57:f6:c8:88:d3:b1:cd:
         06:45:c7:55:57:ad:6c:5e:56:2a:8d:5e:11:77:df:75:08:04:
         1d:10:0b:47:8a:ff:d4:d0:19:76:fd:7a:1a:e6:2f:d7:3f:3a:
         ce:49:18:19:17:7f:b2:ad:31:04:32:2a:6b:29:3e:a6:bd:e5:
         ac:b5:3e:88:90:6f:4d:e5:6e:55:23:34:97:d4:fa:80:c7:06:
         00:92:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:27 2024 by rpki-client on console-fra.rpki-client.org