Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8.cer
File:                     94f0eda7-0771-41a2-8806-38174b050cc8.cer (raw, json)
Hash identifier:          KL5KdpitL9lqpJC2LTiWaZwnYj0I8VdnwVHeqi+rGSM=
Subject key identifier:   74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E4834AE925063227E8AF99C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 01 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 32549
                          IP: 216.168.132.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4a:e9:25:06:32:27:e8:af:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun  1 19:06:39 2025 GMT
        Subject: CN=94f0eda7-0771-41a2-8806-38174b050cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:20:b5:5e:84:e4:bd:54:a0:5c:ef:2a:09:
                    65:9e:91:a3:3a:61:11:be:6f:2b:60:dc:b9:eb:f9:
                    6d:d2:71:56:77:ac:d2:c9:1d:fd:9a:60:41:3e:68:
                    08:ab:c5:c4:8b:42:fc:e6:1b:6f:6a:4d:c7:f4:6a:
                    c1:f5:b6:76:7d:60:e9:f2:ee:ff:d7:b4:4e:2a:f2:
                    eb:84:c4:5b:3e:33:06:7f:7a:1f:e6:52:39:47:a3:
                    87:bc:a1:ef:b0:0a:04:a9:a2:ed:ea:f8:53:af:b1:
                    fb:85:c7:f0:ff:a2:77:35:42:28:4e:de:dc:cc:eb:
                    e8:4e:23:3a:fa:f1:e6:44:64:13:93:82:e7:f5:cc:
                    f4:00:ba:b4:7a:52:05:f6:69:86:71:cb:8b:c7:8b:
                    69:5a:6e:b6:88:08:62:79:db:c3:15:b8:ca:77:5e:
                    38:75:58:ee:56:19:51:80:6a:76:1a:99:ea:83:a0:
                    70:44:56:18:b7:c0:fb:e9:f5:49:5f:7b:ce:30:78:
                    b9:0b:3c:05:23:fe:97:10:ac:8e:4c:3e:e7:a5:79:
                    e7:37:1f:21:c7:03:46:19:62:73:ba:5e:8e:a0:fb:
                    03:51:2c:76:52:7e:65:3c:a8:2a:6a:f1:8f:cc:af:
                    c5:e4:ee:46:82:3c:bb:b4:e2:9d:bc:db:83:47:62:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:8D:DB:C5:4F:6B:90:5F:21:18:0B:85:FC:DA:36:27:B1:E1:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/94f0eda7-0771-41a2-8806-38174b050cc8/94f0eda7-0771-41a2-8806-38174b050cc8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.132.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32549

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:61:16:47:ae:f5:6f:cc:c1:e2:74:cd:48:c4:5b:fc:0a:b8:
         8f:d5:e0:d5:0d:13:6f:78:5e:18:a6:dd:c0:12:d9:eb:56:8c:
         21:1d:f9:c1:90:36:90:85:d1:1c:12:82:e4:71:78:d0:37:15:
         c7:08:56:6e:ff:e8:95:72:ab:40:bd:2e:ed:bd:4b:ae:70:2c:
         d5:8f:56:cf:de:9a:50:69:91:83:43:87:b7:84:8d:06:f9:79:
         49:e8:ea:f1:86:76:99:c2:27:3d:ff:2c:2b:78:68:5d:e7:50:
         50:39:09:c9:7a:c4:9e:94:5f:85:bd:1c:1e:77:7f:e8:a5:2d:
         85:2d:4e:9b:c1:50:56:10:79:7f:46:71:1a:b0:26:26:93:ec:
         89:89:1f:af:ae:9f:e6:39:b3:86:83:13:a5:01:e0:87:0d:94:
         56:ab:43:0d:cc:f8:bb:6b:c9:d3:cf:7b:92:bd:40:22:3d:3b:
         4e:d5:e1:0f:9e:35:93:d7:3f:36:82:b4:ce:11:17:98:bd:e0:
         64:9c:f2:b4:d5:10:db:d6:f6:22:cb:97:14:db:10:f0:02:94:
         9e:e5:9d:3e:aa:cd:4b:4c:ef:cb:5c:9b:aa:65:54:e6:64:ad:
         38:bb:21:04:ab:14:82:82:da:2e:b8:5f:d5:62:70:b7:1a:92:
         30:11:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:29 2024 by rpki-client on console-fra.rpki-client.org