Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
File:                     1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer (raw, json)
Hash identifier:          anxZaYVOhf9w2UyHLw5sxcJqe0wPgRFDzcteY99QTMk=
Subject key identifier:   31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285842CFAC9B97F3E656F639757480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Aug 2023 00:45:22 +0000
Certificate not after:    Mon 10 Nov 2025 01:45:22 +0000
Subordinate resources:    AS: 18507
                          AS: 18628
                          AS: 36822
                          IP: 204.10.8.0/21
                          IP: 208.112.128.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:cf:ac:9b:97:f3:e6:56:f6:39:75:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug  8 00:45:22 2023 GMT
            Not After : Nov 10 01:45:22 2025 GMT
        Subject: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:46:de:35:1e:f8:51:89:ab:1f:25:53:e9:
                    92:81:4b:79:8d:0f:1e:b8:d5:63:40:3f:bb:d3:ca:
                    fb:21:0e:bc:9c:b7:cb:d8:3f:1c:6b:28:74:10:dc:
                    f8:fe:0d:ee:15:ef:67:e8:ed:cd:5b:95:e4:68:1c:
                    f2:03:7a:f5:43:2f:93:a0:4a:3d:1d:b1:4c:17:28:
                    ad:dd:9d:15:01:f1:0a:a8:6a:c0:02:d1:37:a2:a8:
                    fc:a2:1b:d2:1a:ec:ef:39:13:cc:15:69:70:7c:1c:
                    5c:b1:70:4a:a9:ac:2d:60:74:ee:97:ed:d2:7d:99:
                    c7:54:1a:15:42:e5:99:4f:3b:1a:2a:f2:7a:05:ae:
                    85:12:5e:14:22:57:1e:15:fd:2a:23:f9:0a:42:7e:
                    7a:cd:2d:f8:a9:c4:b6:3e:6d:08:37:d4:30:44:c7:
                    56:3e:ed:22:82:a2:e1:c5:8e:05:4b:95:a7:f9:08:
                    c4:50:3f:ff:e7:d2:aa:0e:a1:19:cd:0a:dd:24:53:
                    a2:19:1b:f1:be:42:ab:49:d7:d9:16:a6:6f:60:f8:
                    79:e7:db:7a:8e:e9:20:2c:9a:ee:fc:0b:44:a4:52:
                    ef:b5:d2:bb:1d:d4:ce:d1:87:b9:1c:a8:24:4c:ee:
                    33:00:bf:49:d9:86:1d:f8:60:90:3b:ea:2d:4b:8d:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.8.0/21
                  208.112.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18507
                  18628
                  36822

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:0b:d0:79:62:eb:24:1a:d5:02:92:e3:70:22:36:8d:cb:
         93:8c:3a:cb:ce:7f:c0:05:51:23:a7:da:48:70:66:3c:7a:dd:
         b6:63:ea:ad:bc:4e:4a:dd:2f:f2:af:6d:39:f2:74:80:5d:c1:
         ba:b8:cc:35:b6:b2:99:46:25:ca:e1:93:bb:fe:80:34:90:e6:
         6f:c4:cf:73:29:e4:98:21:76:49:9c:41:bb:c2:c4:1c:62:4e:
         e1:8a:85:d5:7e:e5:04:51:a3:0c:9f:ec:12:9c:f5:0f:2b:30:
         e9:11:36:e2:6b:55:ae:6e:61:5d:d4:1a:df:11:b9:6d:d9:11:
         eb:fa:c6:2b:f0:27:8a:2f:8f:03:d7:d3:a2:37:23:f2:01:9e:
         6a:02:85:ef:a6:2d:1b:6e:f3:2a:5e:38:f4:45:de:a9:6e:a6:
         ca:70:98:67:a4:98:cf:e7:ca:59:e8:71:d9:db:55:02:7e:a4:
         80:89:ce:d2:d9:3a:37:dd:49:c4:cf:03:fc:90:0d:a2:60:74:
         09:8e:c6:59:41:02:a2:77:55:ef:48:77:d7:52:7b:de:aa:ba:
         26:69:86:35:fc:12:41:ad:78:25:43:b6:e5:30:2d:34:c5:38:
         22:37:b6:78:b9:cd:f5:08:12:25:c8:18:3e:ef:14:6f:3b:5a:
         7b:aa:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:47 2024 by rpki-client on console-ams.rpki-client.org