Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4a1c092e-061a-4095-8380-8e3c72fd70e4.cer
File:                     4a1c092e-061a-4095-8380-8e3c72fd70e4.cer (raw, json)
Hash identifier:          S/fmC3mP/GlYMjERee+b+ybISad2kjDwz1Kx/NmLMy4=
Subject key identifier:   40:BD:C5:50:BF:7A:A3:AB:79:27:A7:E1:DA:35:AE:B0:48:F1:AE:B5
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858420C40AC0879A16BEC4D7CF7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4a1c092e-061a-4095-8380-8e3c72fd70e4/4a1c092e-061a-4095-8380-8e3c72fd70e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4a1c092e-061a-4095-8380-8e3c72fd70e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 May 2023 00:45:16 +0000
Certificate not after:    Mon 01 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 14814
                          IP: 64.71.64.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0c:40:ac:08:79:a1:6b:ec:4d:7c:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 30 00:45:16 2023 GMT
            Not After : Sep  1 00:45:16 2025 GMT
        Subject: CN=4a1c092e-061a-4095-8380-8e3c72fd70e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:58:2a:d5:a1:a5:c9:0e:b7:cc:54:2e:e0:ab:
                    32:a8:e6:67:dc:91:29:0d:9b:89:e8:ee:2a:b7:c6:
                    1f:a3:21:58:52:2b:3a:fd:88:eb:37:0f:72:da:81:
                    78:01:c8:5e:b6:a5:8c:44:b6:61:6b:e4:6e:e9:f3:
                    35:1c:0f:e8:fa:09:fe:3e:1e:41:ce:a4:20:52:7f:
                    60:91:f0:59:0f:0c:70:1b:ba:88:34:f2:71:2c:2b:
                    aa:35:04:a6:7e:ba:d5:87:bd:e8:78:61:a9:2e:29:
                    b8:b4:5e:2b:ca:2c:06:a0:ff:f6:83:f8:d1:8f:29:
                    09:f1:9e:6e:0d:95:dc:b7:7f:80:6d:7d:c0:14:5a:
                    2e:12:a4:a8:4f:e0:ed:79:04:d4:d1:70:d5:9c:0f:
                    80:89:8e:24:09:7f:0c:fd:7e:10:17:42:21:d3:0a:
                    cb:c1:32:a0:0a:dc:e9:20:89:e1:fe:a4:90:e0:23:
                    bc:0c:10:51:b6:7f:5a:f0:37:b4:0b:f0:2d:05:fd:
                    4a:97:13:68:0e:7a:74:63:f5:66:2e:71:f9:77:95:
                    39:b7:d0:06:dc:2b:bf:9f:da:4e:ce:87:47:23:7b:
                    00:b9:59:c9:6e:78:e9:d1:4b:b1:8c:8f:90:41:5d:
                    e8:4b:ce:bd:99:56:0a:93:6f:aa:2a:b0:a9:93:6e:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BD:C5:50:BF:7A:A3:AB:79:27:A7:E1:DA:35:AE:B0:48:F1:AE:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4a1c092e-061a-4095-8380-8e3c72fd70e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4a1c092e-061a-4095-8380-8e3c72fd70e4/4a1c092e-061a-4095-8380-8e3c72fd70e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.64.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14814

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:a9:a1:75:cb:8c:b1:74:07:8a:a1:e0:d8:39:3e:e5:47:
         9e:78:e9:c5:ea:fc:9b:7f:49:64:41:ad:47:c6:23:ce:90:e5:
         e3:36:fe:c2:6a:45:d8:52:d2:34:5e:7a:32:80:4b:a5:73:0d:
         ee:e9:b5:34:70:0a:51:c3:85:8e:7a:57:f3:11:fe:77:d0:2d:
         df:4c:f1:67:aa:5b:90:d2:3a:f6:50:cd:eb:c4:cf:18:0b:95:
         6e:80:d7:3e:2c:f4:d4:00:e5:4b:74:c1:e2:8e:33:6d:9e:5b:
         6f:da:11:30:28:64:0a:1d:06:d5:9a:44:77:42:58:00:29:b7:
         76:1d:e4:46:c3:20:7c:5f:b6:0d:44:40:33:25:96:2f:96:c2:
         38:8c:f7:76:10:04:3f:0a:43:6d:f8:13:c7:0b:52:a4:1e:82:
         6b:5a:6f:94:47:03:96:80:c6:61:9f:3f:d0:1e:7b:64:67:38:
         91:d1:c3:54:2c:52:fc:65:3c:87:8f:3f:56:c3:24:ef:aa:d8:
         8b:e4:fd:f8:9c:55:23:84:6f:96:94:d1:fb:54:1e:85:3e:6d:
         af:d6:07:bc:b0:72:f6:84:86:02:1e:d2:61:e1:6e:75:98:21:
         a3:ea:58:10:d4:7f:fb:ac:b7:67:5c:ee:7b:f0:02:72:a8:e3:
         01:5c:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:03:09 2024 by rpki-client on console-fra.rpki-client.org