Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
File:                     43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer (raw, json)
Hash identifier:          xM0bNs6jhSFPthr8XZgfqyYwrSvoIstso3mFvkda9dA=
Subject key identifier:   96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844FA585DA30F4D5356249BB480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Feb 2024 17:09:16 +0000
Certificate not after:    Fri 04 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 157.254.0.0/16
                          IP: 192.231.16.0/24
                          IP: 199.103.94.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fa:58:5d:a3:0f:4d:53:56:24:9b:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 22 17:09:16 2024 GMT
            Not After : Jul  4 19:06:39 2025 GMT
        Subject: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:b5:c3:87:2c:62:7b:bd:d3:f3:c3:e7:6d:
                    6e:79:ef:bd:2e:63:72:45:87:55:83:16:b3:33:f4:
                    9e:ad:5a:c6:4e:ec:57:c0:36:3f:2a:b1:93:4b:39:
                    86:1a:85:88:f1:74:57:80:37:4c:39:eb:d0:f0:44:
                    34:60:25:69:b9:62:83:64:cb:f8:3b:a8:0f:e8:c6:
                    7e:e0:02:77:2e:d5:27:af:a6:b4:30:36:da:c7:fd:
                    7f:33:3a:e8:bb:33:60:44:28:19:f7:84:8d:bd:5b:
                    96:49:7e:8f:c5:bd:f3:49:2e:b7:37:56:b8:a5:ad:
                    6c:ff:d1:ed:75:34:c2:a0:2e:31:52:ea:13:33:77:
                    56:df:f9:15:e6:53:3d:17:cb:32:55:ea:32:a1:98:
                    93:03:6e:8a:fc:32:28:0f:e4:0a:5b:b6:e9:68:4f:
                    0a:e7:c4:e9:be:cf:78:24:62:f0:a6:b9:f0:39:82:
                    7b:b1:a1:70:46:2d:02:92:bd:d1:d0:fd:0c:f7:d6:
                    a2:f5:04:c4:36:76:ec:90:7e:8b:eb:b4:a1:b4:28:
                    a4:51:1b:11:03:bd:ba:29:ac:a9:fe:3d:d6:c2:17:
                    53:04:2d:c6:95:d5:31:15:30:90:3c:f0:36:d3:ad:
                    1f:15:24:b4:0f:d6:bb:5e:93:f7:ff:0c:49:12:e8:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/16
                  192.231.16.0/24
                  199.103.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:31:3b:b7:d1:6c:c4:37:c9:bb:56:73:eb:a7:5b:ac:95:8b:
         ff:cc:2a:f5:a0:ee:fc:cf:93:d5:e9:73:df:be:af:ab:4f:f7:
         4c:52:89:a4:da:1f:e4:e7:6f:ce:f4:d3:57:cb:4e:27:cb:58:
         d1:ce:9e:89:9b:22:c4:80:3b:e6:ef:36:86:fa:42:7f:03:20:
         4f:23:dd:c4:7a:bc:04:3c:a0:e3:ad:03:8b:c8:f3:84:8c:45:
         cb:56:c1:bf:ef:37:e3:63:3f:e1:10:02:9a:92:00:b8:43:23:
         01:ae:77:04:8e:8f:73:cf:05:9c:80:91:d7:ba:ca:e2:1f:02:
         43:64:34:5f:5a:7d:8f:75:3e:a2:7f:95:8f:e9:2f:53:fd:65:
         4d:e6:22:f6:eb:96:bd:5f:e6:17:de:ab:10:ae:13:0a:87:59:
         ff:a7:54:6e:fe:63:51:ec:57:01:4b:c4:64:cd:ee:1e:2a:14:
         45:6a:f9:40:67:61:a5:d6:c9:39:a3:17:ae:9c:b6:41:94:69:
         00:fa:8b:de:d0:a7:7c:ec:5d:64:47:b5:4e:84:ad:95:19:3e:
         58:d2:a5:32:05:2e:15:ba:b7:4d:a8:34:55:e6:2b:02:73:62:
         81:2e:41:5b:57:64:79:31:c9:81:88:0b:c9:77:7d:a4:cb:ed:
         3a:87:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:08:39 2024 by rpki-client on console-ams.rpki-client.org