Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
File:                     58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer (raw, json)
Hash identifier:          MswUo0BvPoxZpXJ06MRLlziIQvfoOIy2F0gKh9Fzhv4=
Subject key identifier:   E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E
Certificate issuer:       /CN=ae85d24a-77d4-4cf7-80aa-c071199c2889
Certificate serial:       010D0C9F4328584215D6169DC2CCA0DC6A447A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 11:08:36 +0000
Certificate not after:    Thu 04 Sep 2025 11:08:36 +0000
Subordinate resources:    AS: 395841
                          IP: 64.4.168.0/22
                          IP: 208.91.188.0/22
                          IP: 2604:7c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:15:d6:16:9d:c2:cc:a0:dc:6a:44:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889
        Validity
            Not Before: Jun  2 11:08:36 2023 GMT
            Not After : Sep  4 11:08:36 2025 GMT
        Subject: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:a2:e3:b6:84:97:ae:72:5e:a7:71:74:ee:
                    b4:c6:d4:9d:4d:f2:f3:6d:86:9c:f1:a8:65:46:83:
                    8d:b1:be:9e:c2:8b:e6:b0:d4:df:b8:e8:cf:95:af:
                    77:a5:64:f7:cd:70:45:2c:17:b5:ec:53:3d:c7:e7:
                    ab:0a:e4:f7:c2:f9:60:93:93:14:5f:3a:2d:15:0c:
                    50:73:f7:b7:b8:43:22:fc:22:8a:04:f4:71:d4:25:
                    9b:5b:fd:17:14:7f:d7:48:2a:a8:51:24:60:a5:44:
                    3d:71:dc:00:b3:40:71:af:09:da:c5:7d:3b:f9:18:
                    0c:78:5b:71:c9:a8:9f:8c:81:f7:05:1f:61:2e:7a:
                    e7:9a:57:a5:3e:20:0b:e6:a9:ce:db:7e:25:aa:03:
                    a9:f7:86:79:c5:1c:da:62:79:03:23:f3:db:49:93:
                    69:3a:fd:0c:c0:7d:21:10:9f:ff:58:53:1e:4e:22:
                    d7:8e:d4:9d:21:5b:e0:06:23:b3:4c:81:8a:f0:3a:
                    df:47:d3:4f:92:3c:61:3f:5d:b8:7c:be:8c:38:94:
                    1e:3e:62:7b:87:a7:08:60:38:a9:9a:9a:d9:54:3e:
                    58:9f:73:49:46:0e:d5:f5:02:50:84:52:af:c2:5b:
                    be:e3:fa:d0:64:db:2c:14:dc:a3:05:0c:63:3c:e8:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl

            X509v3 Authority Key Identifier:
                keyid:7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.168.0/22
                  208.91.188.0/22
                IPv6:
                  2604:7c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395841

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:7d:dd:98:c1:f8:25:ba:76:47:73:1b:7f:64:1f:09:6b:
         b7:d1:60:5f:30:a0:8f:ba:c8:7f:38:90:6d:04:53:13:9b:4e:
         15:9e:dd:e4:6e:e3:78:14:60:35:86:dc:e5:ce:54:0e:65:00:
         b9:3b:00:8d:65:49:73:5b:0f:1c:5f:7b:38:a1:c0:94:f2:29:
         7c:b1:c6:0d:a9:b2:ee:d2:3e:5c:fa:80:fd:47:e7:8b:a7:88:
         64:87:83:3a:3f:39:24:97:96:2f:3a:22:3a:ae:41:cf:45:9d:
         2c:72:b2:5a:82:96:4d:7e:d8:dd:8b:ba:60:5f:59:f5:65:b9:
         71:b6:21:32:fb:3f:d5:99:16:17:f4:9c:0b:bb:54:ef:6b:0f:
         89:47:3d:87:26:91:a5:65:c9:10:33:f9:40:b5:74:e3:cb:86:
         3e:5a:b9:d1:4a:07:f1:89:e5:75:01:bb:63:60:29:f8:b1:7b:
         c1:ac:ad:22:95:ff:77:6b:8a:93:d6:4a:4c:16:ee:21:aa:a4:
         8f:5c:43:ff:bd:be:bd:65:e3:27:6e:c0:c3:a9:2a:a3:5d:3b:
         42:8e:c0:ff:07:72:dc:17:d3:98:4f:2a:fb:20:8e:d2:ce:fb:
         c7:44:48:4e:ef:ef:24:b7:8e:8b:ff:d7:f5:34:a9:fc:f3:ab:
         77:85:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:06:13 2024 by rpki-client on console-ams.rpki-client.org