Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
File:                     4bc701e5-cff5-4660-9102-08342e5ad35f.cer (raw, json)
Hash identifier:          oyS5f0FeZ7sMCBkL41vxAFa1Fpwnp0QbASIhHKn6UvA=
Subject key identifier:   62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584379F85599392E229B2EBE8900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Oct 2023 00:45:22 +0000
Certificate not after:    Sat 10 Jan 2026 01:45:22 +0000
Subordinate resources:    AS: 17120
                          IP: 2620:0:f0::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:79:f8:55:99:39:2e:22:9b:2e:be:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct  8 00:45:22 2023 GMT
            Not After : Jan 10 01:45:22 2026 GMT
        Subject: CN=4bc701e5-cff5-4660-9102-08342e5ad35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:73:90:62:a4:18:30:40:c4:45:2f:a5:68:
                    a8:37:a1:6e:4e:5c:fb:dd:ac:c1:08:b0:8f:7c:be:
                    05:56:7e:c3:5f:09:9b:3d:4d:27:65:eb:52:9d:1c:
                    f7:c1:6e:84:12:e8:d1:94:03:8d:81:2f:f9:f8:66:
                    7d:be:3b:59:56:38:59:a0:03:d9:de:db:b4:39:87:
                    5f:6f:56:ab:5c:ec:a1:45:a6:70:e8:98:10:67:c6:
                    86:ef:7b:e3:5c:df:e2:8c:c2:f7:7a:ae:ea:96:20:
                    7e:db:d8:43:08:3d:5b:a0:97:e2:11:f9:e0:b0:1c:
                    f8:64:56:93:e2:28:f1:32:67:23:32:f8:6c:52:96:
                    0d:9c:2d:b3:5e:ef:da:53:8b:dc:30:d0:54:97:5f:
                    e7:55:dd:8a:83:fa:83:fc:ff:09:49:a4:2e:f1:6a:
                    f4:18:53:1b:5d:a1:46:c7:4e:58:1f:65:01:b6:03:
                    cb:42:9d:47:cf:67:b3:55:d5:07:6c:81:98:6e:b8:
                    fd:e3:ef:50:23:a2:23:46:82:f7:46:4b:65:49:af:
                    8f:98:d7:99:4c:08:f3:10:ee:9f:2f:1e:30:57:39:
                    d3:4f:d4:b9:c7:52:64:22:d6:65:dd:76:fb:ce:57:
                    80:ec:4b:51:f2:fc:c1:12:e7:24:2b:21:72:16:65:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17120

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:98:3e:10:09:b9:f9:88:65:a1:53:14:06:f4:f9:ec:04:
         9c:fb:a1:ad:7c:8b:21:43:7b:7b:11:ff:6c:64:d9:02:db:e3:
         a6:a0:05:79:a0:01:dd:fd:88:66:40:06:b4:da:b5:bf:b3:c8:
         af:20:39:74:f9:52:1e:8e:ca:f7:47:84:e8:a6:df:98:07:01:
         ed:9d:65:5a:ae:2d:89:7c:43:4e:a6:78:66:46:85:c0:92:b6:
         4f:6a:e2:8d:6b:de:d0:9d:c2:bb:59:d8:37:f1:01:57:67:f3:
         99:42:f2:f4:c5:7a:86:67:ac:0f:2e:14:30:9b:0c:01:d0:80:
         32:70:6d:cf:99:19:94:e3:ec:a4:75:75:63:cb:b7:aa:24:54:
         42:6f:64:c8:95:d2:c5:92:ad:fd:54:4a:6c:af:40:e1:75:57:
         df:e1:e7:96:42:1a:f7:ae:c5:1f:0f:21:7e:91:a1:95:1e:3c:
         84:ab:4c:ec:2b:9d:8d:cd:2b:83:2b:3c:44:12:72:b6:16:53:
         a0:50:66:23:86:72:28:f7:49:b5:4c:b3:92:ae:ca:49:ec:60:
         0e:70:20:2e:b7:fc:e9:de:f4:87:23:d7:23:77:d7:6b:b6:28:
         af:f2:7a:53:f6:b7:cf:43:29:34:03:d5:5b:50:6f:7f:4b:0a:
         f0:6f:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:03:56 2024 by rpki-client on console-fra.rpki-client.org