Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
File:                     6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer (raw, json)
Hash identifier:          Gh6ZNoI6nP6HW2IHIx5QJFC6khW8fBJE+driV651zrY=
Subject key identifier:   F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority key identifier: EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60
Certificate issuer:       /CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
Certificate serial:       010D0C9F43285841D1DBACAAF95B67640B29B700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 09 May 2023 02:44:53 +0000
Certificate not after:    Mon 11 Aug 2025 02:44:53 +0000
Subordinate resources:    IP: 23.142.24.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d1:db:ac:aa:f9:5b:67:64:0b:29:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3098fc14-29c9-4916-b03a-ae4a2af101cd
        Validity
            Not Before: May  9 02:44:53 2023 GMT
            Not After : Aug 11 02:44:53 2025 GMT
        Subject: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:6a:16:51:6d:17:b0:ad:c5:e1:e7:f0:58:
                    a8:9f:51:d5:77:47:1e:7a:69:08:50:79:92:7a:99:
                    9c:d0:7b:6c:29:9e:2e:fe:41:fe:b0:37:18:4a:3a:
                    fa:2a:20:21:69:b5:5e:17:68:73:36:29:43:fd:63:
                    96:9b:a8:47:f3:73:5b:45:b5:da:9e:83:9d:37:4d:
                    cf:8f:19:76:9f:8d:10:6d:76:28:25:3c:c8:63:d5:
                    e1:0a:77:64:a9:81:6a:d4:ed:13:13:64:3d:73:4c:
                    81:e4:74:8b:72:78:2e:49:d9:2f:1a:c1:10:4f:92:
                    0a:d4:96:c8:e9:27:fb:4e:2d:76:18:47:88:7e:31:
                    ce:66:0a:05:69:bc:07:a1:c4:2f:2b:aa:75:6c:76:
                    89:84:8d:32:03:c8:65:fc:e0:26:e5:43:84:bb:81:
                    0c:41:ea:ad:4c:fe:31:9c:56:4f:a6:4b:ba:48:c2:
                    d4:e5:32:18:58:27:a3:ab:d1:93:0d:cd:a1:81:90:
                    c3:df:d5:b0:e9:ae:cc:2d:03:8b:88:b1:f6:4c:43:
                    25:20:a3:fd:8b:83:ef:0c:78:20:81:9d:da:7c:86:
                    51:5a:c7:7a:69:20:37:41:be:c7:36:2b:7f:7d:d2:
                    ae:7c:00:0b:86:d6:e9:10:81:cf:00:ce:e7:5b:89:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/3098fc14-29c9-4916-b03a-ae4a2af101cd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:69:D0:59:BE:FA:2E:FC:09:C7:8C:FF:6B:28:F3:19:44:A1:70:60

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:60:e9:74:f6:2b:39:94:df:a0:74:cc:04:ce:aa:2e:0f:1d:
         32:b2:c6:a3:c7:05:95:5d:cb:63:ca:16:95:46:9a:ab:47:f9:
         78:e6:6c:3d:f3:b0:57:4f:4e:38:96:6f:03:94:a5:c3:b5:7d:
         c7:ca:2d:dc:c1:55:5f:70:9f:8c:9a:2b:52:02:51:22:0d:36:
         a4:ee:79:7f:92:76:d6:6a:22:59:cf:59:43:c0:47:50:db:59:
         2a:53:b2:d1:f0:be:be:42:52:1e:11:93:a3:ba:67:77:b9:fa:
         68:05:ee:21:ce:d8:fd:cc:d9:be:95:8c:85:ec:a8:f9:86:60:
         c1:3a:0f:07:85:b4:1c:20:3f:97:b8:9a:4e:f7:43:ca:e7:3e:
         79:68:25:82:5e:b8:04:f3:71:28:49:64:03:2f:15:87:bc:1b:
         2e:6b:e1:bb:d3:56:78:f2:16:06:44:6c:47:32:05:a6:03:cf:
         7b:cb:38:89:07:d8:a8:a6:b2:0e:6b:ed:e1:09:e5:63:41:b7:
         74:ab:a6:2d:0e:b8:74:94:26:1f:9c:94:34:7d:b3:6c:e0:6e:
         9a:51:01:bf:90:99:6e:ae:30:64:47:cb:e8:22:9b:8b:d3:4c:
         11:29:3c:3e:d5:99:b7:55:2c:1b:38:e7:94:7c:4e:ed:7b:05:
         3e:16:5d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:59:30 2024 by rpki-client on console-fra.rpki-client.org