Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/8f538484e613ac07fb533d1cb63022443c0a799196d2ab210e.cer
File:                     8f538484e613ac07fb533d1cb63022443c0a799196d2ab210e.cer (raw, json)
Hash identifier:          PDJTqXIWqu77/obtIsXmFFn5Wa8Rqrv5R9Q/xUcDz2k=
Subject key identifier:   19:C7:82:7C:B4:38:84:83:98:3F:F1:14:35:1E:6E:B4:8D:E8:AF:35
Authority key identifier: BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0
Certificate issuer:       /CN=4bc2d813-8d01-4075-b634-fe23d86a0b9b
Certificate serial:       010D0C9F43285848780C3EEAE900C18FB2631380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401944261f5bf21a5/0/19C7827CB4388483983FF114351E6EB48DE8AF35.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401944261f5bf21a5/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 07 Jan 2025 20:08:34 +0000
Certificate not after:    Mon 12 Apr 2027 19:08:34 +0000
Subordinate resources:    AS: 401575
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:0c:3e:ea:e9:00:c1:8f:b2:63:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc2d813-8d01-4075-b634-fe23d86a0b9b
        Validity
            Not Before: Jan  7 20:08:34 2025 GMT
            Not After : Apr 12 19:08:34 2027 GMT
        Subject: CN=8f538484e613ac07fb533d1cb63022443c0a799196d2ab210e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:ff:14:c1:67:0f:31:06:0b:d2:1e:c7:ca:
                    74:b9:9c:94:78:61:3d:19:18:74:5a:86:b9:3d:ad:
                    1a:ac:17:57:fd:2e:67:5a:8e:a6:dd:64:5e:eb:4e:
                    50:85:8d:9b:04:d8:b3:b0:6e:a4:86:5d:b2:f3:a5:
                    a2:50:a9:32:1e:79:b3:d0:74:b7:ca:03:61:3f:56:
                    31:49:57:5b:e7:7f:09:50:a8:af:e8:ce:76:e3:e8:
                    d8:f8:00:d8:b3:61:f6:90:37:43:9e:0a:3d:21:16:
                    b1:b8:c1:e8:d7:47:6c:eb:14:ae:f1:64:ed:ec:bb:
                    b8:b7:42:68:90:98:91:c0:0e:2e:7f:22:f5:31:29:
                    6e:6e:da:70:a9:eb:48:8e:80:37:f5:6f:de:5e:7a:
                    84:f9:81:78:14:23:a1:fa:05:c5:f4:0a:9b:2c:66:
                    d0:84:be:3e:ea:84:52:75:02:1a:be:b1:d1:9d:60:
                    62:ea:48:ba:57:11:6e:5c:f0:ac:5d:a5:dd:d7:e2:
                    6a:ac:aa:0d:e0:ff:e4:54:53:58:46:20:23:fc:e1:
                    37:b3:d3:d4:0f:19:39:5f:ee:12:04:f4:d3:e6:1e:
                    cf:ba:c9:1b:ea:07:b8:31:fd:c5:a6:fd:f3:8e:df:
                    05:fd:2d:91:c9:a4:a8:75:4a:fb:cc:09:fa:e2:9e:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C7:82:7C:B4:38:84:83:98:3F:F1:14:35:1E:6E:B4:8D:E8:AF:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401944261f5bf21a5/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401944261f5bf21a5/0/19C7827CB4388483983FF114351E6EB48DE8AF35.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b/4bc2d813-8d01-4075-b634-fe23d86a0b9b.crl

            X509v3 Authority Key Identifier:
                keyid:BE:1F:2B:E9:4D:F8:71:B5:4A:0D:BC:6C:41:D7:87:59:FA:A0:55:F0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc2d813-8d01-4075-b634-fe23d86a0b9b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401575

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:12:10:63:a0:5c:0e:9d:6b:d0:7c:10:c5:71:5a:ca:69:24:
         83:ae:48:2d:d4:64:07:a8:e4:a9:4e:b0:27:7b:a0:64:51:6b:
         0a:4c:a0:46:c5:21:c4:bb:a3:00:c0:d3:ba:8a:fa:dc:e5:90:
         4d:bc:5e:da:3a:b4:c8:0a:48:6e:d8:45:1b:1c:d8:82:39:8f:
         40:cf:78:81:fb:0d:a7:60:05:b4:2b:14:0a:78:59:94:94:ad:
         71:b5:9d:ba:22:12:5b:cd:55:a0:3b:00:78:a9:b9:2a:48:83:
         03:d4:9d:0d:56:df:d2:3e:8b:6b:80:c0:e7:92:a9:65:d6:46:
         17:84:4d:4b:69:bf:f5:ec:03:c8:14:49:a4:07:d3:31:2a:28:
         8f:56:a6:b5:02:d1:fb:1f:25:db:4f:16:55:0c:cf:53:f4:89:
         46:ac:27:59:d6:8b:10:4e:7a:8a:d2:ba:88:81:d1:d2:2c:06:
         53:9f:47:79:ff:a3:64:36:30:8e:89:72:ea:73:b8:6c:39:c8:
         09:26:42:d1:0f:15:9a:87:de:44:eb:78:56:f1:2e:1a:e2:e3:
         f2:8c:5a:5e:8a:8e:0d:03:12:78:2c:1c:6e:25:a5:72:5d:83:
         a8:4c:2f:ae:65:16:ad:13:31:7f:19:9c:59:4e:be:bc:54:4a:
         aa:4f:d6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:57:48 2025 by rpki-client