Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer
File:                     43290c87-c43c-46a1-8633-9c4624dc1aaf.cer (raw, json)
Hash identifier:          An524A9VpbGUCHzmMAZjHEUkP2Bw2Oo1zEzZcQUkLYA=
Subject key identifier:   6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285843CB0BE455CA49072A2EA12400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 01:45:15 +0000
Certificate not after:    Sun 08 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 15301
                          AS: 53708
                          AS: 395492
                          IP: 52.129.64.0/19
                          IP: 74.121.28.0/22
                          IP: 2620:c8::/48
                          IP: 2620:10a:c000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cb:0b:e4:55:ca:49:07:2a:2e:a1:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov  6 01:45:15 2023 GMT
            Not After : Feb  8 01:45:15 2026 GMT
        Subject: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:f9:a3:87:a3:23:71:aa:88:39:2d:d1:6c:
                    ee:c8:2a:0a:af:fb:49:2b:ba:65:be:9e:dc:8a:ea:
                    67:72:7a:af:32:66:99:c9:39:45:d7:53:b8:ee:83:
                    df:53:9a:7c:b5:ce:16:9a:ef:9a:7c:62:10:1d:b0:
                    55:19:0f:cf:01:4d:28:aa:65:a4:e8:76:c5:90:2f:
                    95:e3:18:82:ae:91:95:7e:83:bd:41:86:5a:70:1f:
                    4f:d1:05:1a:36:88:0b:39:14:51:ce:f4:58:d4:de:
                    62:2a:8f:4f:01:ac:f8:4b:c0:a3:fc:9f:90:1a:f5:
                    3c:30:50:cb:79:7f:24:66:3d:a5:27:dd:a5:aa:80:
                    04:60:8d:d2:92:81:3f:56:f3:f9:fe:08:a0:2e:57:
                    52:6c:f9:6e:24:09:ba:a3:dd:f0:cc:78:3b:a4:78:
                    cd:54:51:4c:6d:be:03:ef:00:50:5b:be:56:8e:26:
                    f9:a5:de:58:43:04:36:3a:85:a6:37:73:e5:d2:16:
                    0b:e3:2b:6b:ae:0b:13:fe:0f:af:cd:62:85:d3:09:
                    0a:fe:10:96:40:d2:be:1b:67:da:e3:b0:de:51:08:
                    99:e0:e4:b3:50:6e:9f:e1:9a:45:12:af:d9:d4:ee:
                    18:7b:bf:f7:c7:f9:94:9f:4c:0c:17:69:67:05:a2:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.129.64.0/19
                  74.121.28.0/22
                IPv6:
                  2620:c8::/48
                  2620:10a:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15301
                  53708
                  395492

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:e4:a4:5a:37:c4:4f:a8:33:13:be:9e:be:fc:6c:2b:f1:
         17:1d:8c:cc:81:c8:f3:85:b6:51:f5:7c:00:95:9a:f4:6e:1b:
         9e:b9:e5:71:43:85:9d:19:bc:18:08:ac:3d:02:3f:6e:9d:3d:
         fd:ae:54:28:e0:b3:5f:f7:46:ed:b4:b7:74:0a:c7:b6:06:cc:
         59:fb:80:5c:89:53:be:14:16:29:01:04:9e:d8:54:03:8f:e3:
         d5:d1:5a:92:2b:e3:86:4c:fa:0f:92:c9:62:54:c8:c3:02:9e:
         58:90:ef:5e:af:a6:e4:40:59:71:ea:06:6f:9d:79:5c:e9:5a:
         98:d9:87:54:e6:cf:3b:97:60:b4:6f:ef:5d:75:4e:65:6e:80:
         f6:04:32:65:14:1a:a8:26:c6:9b:67:a6:08:02:b3:72:a7:ea:
         7d:e4:bc:b2:5c:aa:2f:46:86:a6:4e:72:b0:f6:48:75:69:8a:
         2e:fd:fd:d0:db:19:33:7f:61:c7:1a:bb:80:a3:cf:c7:bd:33:
         13:c8:60:24:95:70:a4:45:37:48:35:79:cc:53:08:ca:a7:02:
         a3:ae:ea:44:6c:6b:6a:1f:85:6f:9c:7d:5a:20:28:30:22:af:
         84:c9:8c:bb:c0:d9:45:1a:92:28:49:c2:81:eb:e7:28:9f:73:
         0f:18:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:03:56 2024 by rpki-client on console-fra.rpki-client.org