Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
File:                     97e60b77-17e3-4250-9bc8-b5e7664a320a.cer (raw, json)
Hash identifier:          WxqFxLUmNLt4AzrhdYnW5CQaT2nLS/RoqW7nf/yAuDo=
Subject key identifier:   B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E483487F2980D2FC3257C0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 15 May 2025 19:06:39 +0000
Subordinate resources:    AS: 31799
                          AS: 54552
                          IP: 23.138.144.0/24
                          IP: 74.123.116.0/22
                          IP: 216.39.244.0/22
                          IP: 2620:13f:b000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:7f:29:80:d2:fc:32:57:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 15 19:06:39 2025 GMT
        Subject: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:a2:a3:56:75:0a:2b:fa:25:97:9f:8a:e2:
                    3d:1f:13:2b:cf:31:df:ff:e7:5e:66:bb:9b:ac:32:
                    3c:a5:20:24:be:ea:b4:ff:4f:79:01:5a:77:4c:1e:
                    18:5c:22:33:c4:4c:88:15:26:09:9d:1f:b5:30:db:
                    3c:f4:4b:1b:12:2e:fc:21:99:a2:ee:5b:bd:48:00:
                    a9:42:90:62:1e:88:b3:62:cd:b6:a2:4f:93:a2:6d:
                    8d:d2:0e:81:ec:fe:1c:26:1d:63:75:df:7a:dd:43:
                    17:41:e3:30:58:c3:b2:5b:b6:90:1b:5d:76:46:5d:
                    f7:2d:2f:54:fa:ba:df:ff:56:63:e9:09:54:f2:7e:
                    ac:22:d5:97:fa:a5:74:43:ab:53:ae:81:65:cd:65:
                    f8:0d:b0:b1:f3:57:b5:03:9e:16:5a:2e:13:ed:18:
                    cf:38:c4:c0:95:4b:5a:45:c4:62:ab:6e:11:ed:0b:
                    83:a6:3e:ac:c4:75:40:bb:31:d1:7d:80:f1:75:2f:
                    0a:ab:81:ea:dd:1f:d2:e9:5f:cc:70:47:7f:cd:d4:
                    c1:d3:da:ae:82:34:ce:b2:47:22:25:6a:d3:4f:0c:
                    28:89:0f:f8:f6:4a:ec:48:c2:42:1e:ff:92:4d:b2:
                    58:7d:4b:f5:f6:90:45:54:f9:68:87:f3:a6:bb:6a:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.144.0/24
                  74.123.116.0/22
                  216.39.244.0/22
                IPv6:
                  2620:13f:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31799
                  54552

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:10:25:70:37:24:62:c0:ef:3e:a2:97:53:05:90:e9:b0:5f:
         58:c4:66:41:c5:fa:a5:d7:6e:03:9f:00:dc:29:41:0e:55:2e:
         83:31:20:57:1c:d9:83:fb:a4:43:b1:4e:10:7f:3e:95:d9:a7:
         ee:76:4a:bf:2a:8b:60:b9:dd:c3:45:2d:42:06:15:05:0f:88:
         64:19:90:38:34:2f:d5:9b:e7:dc:31:d4:11:1f:f1:15:d2:97:
         bc:46:4a:30:a0:58:44:82:e7:06:ba:82:9a:e0:36:6f:84:35:
         4e:46:5f:52:de:ba:0e:6e:1d:be:e6:e7:29:59:34:18:a0:80:
         a2:d6:53:14:b0:af:c6:8c:8a:78:09:15:89:73:3c:a7:fb:5f:
         a8:fa:ff:1d:b8:ef:79:20:70:d3:b2:a2:0f:38:41:b1:e2:7a:
         7b:42:f4:ff:de:ce:d7:14:9e:3e:34:6f:4d:6a:8e:bb:ab:5f:
         5f:77:03:f7:84:1f:1c:f9:3a:44:38:0b:01:10:7a:9b:34:17:
         ef:e1:ac:69:5f:4f:90:10:02:2a:40:3a:e2:ea:30:02:5b:d8:
         fe:c6:87:bb:9a:b4:6f:aa:87:ab:c4:5c:89:63:bc:4a:27:cd:
         f8:a8:65:47:58:6f:32:01:96:b1:55:db:e0:65:e7:70:21:34:
         82:0d:bc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:33:29 2024 by rpki-client on console-fra.rpki-client.org