Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/95A38A1816A990804357FCAC49C09B0CA3A221E5.cer
File:                     95A38A1816A990804357FCAC49C09B0CA3A221E5.cer (raw, json)
Hash identifier:          pXP2C2wPATLU0y3Cz11FiMKde78YnC6MKgge6nYkmVE=
Subject key identifier:   95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       3832450D11C16E94D29F06B440E1859DDA9254D9
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Manifest:                 rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
caRepository:             rsync://rpki.co/repo/AS199203/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Thu 20 Jun 2024 06:37:35 +0000
Certificate not after:    Thu 19 Jun 2025 06:42:35 +0000
Subordinate resources:    IP: 2a12:dd47:3000::/40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:32:45:0d:11:c1:6e:94:d2:9f:06:b4:40:e1:85:9d:da:92:54:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 06:37:35 2024 GMT
            Not After : Jun 19 06:42:35 2025 GMT
        Subject: CN=95A38A1816A990804357FCAC49C09B0CA3A221E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:6e:94:15:3a:99:61:87:69:41:b1:68:96:
                    27:98:fb:93:22:87:8f:bf:f7:55:99:66:c5:8a:92:
                    de:29:a5:62:13:e5:18:e7:ba:16:df:ee:49:4d:3e:
                    f8:db:99:e1:1b:18:91:69:60:f4:48:da:41:06:12:
                    40:3d:5d:35:93:c6:e4:ac:65:f6:77:84:d4:24:0f:
                    90:8d:92:ae:52:d9:f5:da:e7:61:e7:af:73:68:ea:
                    70:0a:4c:d2:b4:13:d6:2e:f5:5a:f1:f3:09:19:c1:
                    b5:63:a9:9a:0e:c8:c0:a0:0b:fa:a6:8e:3a:46:b0:
                    e7:d9:b9:a2:35:3e:0b:56:3a:53:c4:d4:19:f7:aa:
                    e9:56:b9:4e:7b:96:cf:5d:d4:f6:e5:4d:58:ee:1c:
                    76:cc:62:90:db:d5:11:41:dd:e0:43:7c:7c:47:7b:
                    d1:0b:2a:1a:58:e2:f8:7e:ac:7b:ed:99:d9:b9:23:
                    3e:05:ab:c7:0f:37:b6:9f:03:21:17:15:ba:39:fd:
                    90:14:18:70:60:aa:4a:23:56:0d:00:1d:b6:a3:f9:
                    45:a4:c1:81:c4:1a:b6:71:95:02:6d:40:b4:ca:38:
                    72:88:62:31:ae:98:af:14:a5:ee:76:59:dc:32:97:
                    ad:59:08:27:f0:b2:2d:15:57:9c:4c:c0:ef:7e:d2:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:A3:8A:18:16:A9:90:80:43:57:FC:AC:49:C0:9B:0C:A3:A2:21:E5
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS199203/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS199203/0/95A38A1816A990804357FCAC49C09B0CA3A221E5.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:62:98:e9:78:ed:8e:a0:d1:d3:2f:f0:25:bb:bc:c8:3e:
         65:0f:34:e2:b1:be:fa:3b:72:53:c9:64:04:eb:68:f7:1d:dd:
         69:3a:91:3d:fd:e9:3a:6b:39:56:17:bf:4f:c9:15:1b:4e:09:
         e6:20:6e:e9:27:4e:58:52:f5:9a:df:e0:af:80:25:a6:08:04:
         37:7f:c7:21:7b:3a:6d:1c:cf:5f:e0:32:e1:7a:36:33:7a:45:
         9d:c8:bf:21:24:fb:2f:34:32:e2:78:f5:1c:32:36:c3:5a:9b:
         91:49:04:3e:54:1d:85:0b:97:ec:bf:d7:04:11:94:55:ed:2a:
         b7:5a:c4:a2:39:be:75:58:99:c7:31:ad:35:6a:2c:26:84:42:
         e4:bf:bc:34:90:e9:99:13:4f:00:ea:d9:51:94:88:d3:c4:b3:
         56:c1:dc:09:0a:8c:78:cc:f3:27:41:d1:fe:d5:67:25:04:9f:
         44:d4:03:c9:e2:80:1d:02:c7:d9:e3:35:e9:48:a6:ed:5b:73:
         d9:39:91:60:3e:0c:df:33:41:57:60:45:14:ac:ee:ee:42:a2:
         33:6c:7f:dc:21:f1:36:03:11:e8:5b:9a:21:1b:2e:f6:a8:af:
         79:66:4d:bd:18:30:fd:48:93:80:ca:46:73:8f:b3:fa:64:b8:
         5a:7b:5b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org