Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
File:                     61e7cca0-e65d-417d-a651-371c91be9c95.cer (raw, json)
Hash identifier:          uOEpqQ7vrFPHsTmJhToqd+J76j/JocJiuUs7oYJVf/c=
Subject key identifier:   64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285845681B6805BB44469A25D41090
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Apr 2024 00:45:22 +0000
Certificate not after:    Mon 06 Jul 2026 00:45:22 +0000
Subordinate resources:    AS: 1448
                          IP: 156.146.128.0/17
                          IP: 158.41.128.0/17
                          IP: 158.51.140.0/22
                          IP: 2605:9840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:1b:68:05:bb:44:46:9a:25:d4:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  2 00:45:22 2024 GMT
            Not After : Jul  6 00:45:22 2026 GMT
        Subject: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:69:ee:6f:2f:f8:53:76:34:7b:fc:97:f1:
                    fc:95:0a:30:86:a0:d4:59:43:c4:bb:3d:51:1c:6a:
                    9f:c0:92:01:05:4b:4d:87:66:00:04:87:e8:5a:1a:
                    33:4f:d4:6c:3b:dd:ef:f6:c2:08:66:7c:ef:dc:a1:
                    e3:0d:64:8e:e1:46:fe:33:c7:ac:e5:9f:87:6a:57:
                    db:a6:6e:cd:fa:d6:5e:e1:6f:9a:28:fb:00:5c:da:
                    2f:77:f0:6a:fe:b0:00:2d:7a:a8:d3:8d:f6:6c:82:
                    bb:fa:36:45:29:48:82:fa:90:4f:27:2d:f1:88:34:
                    9c:64:ae:11:24:d1:21:35:6c:3a:85:54:3f:8b:f7:
                    6d:17:db:a0:62:f5:09:6e:8b:5f:e6:a7:c0:8f:b1:
                    60:d9:a3:27:0b:fd:a7:2c:ef:2a:a7:fd:27:6e:30:
                    cb:89:66:9c:a2:be:d9:1e:fc:16:e4:3a:f5:d6:43:
                    27:0e:6a:c1:2d:63:34:0f:0e:41:49:5e:6a:cf:d1:
                    a4:ad:c9:77:01:8d:1b:11:65:30:64:52:f8:1d:1b:
                    54:a8:04:85:b3:e5:73:1f:bb:f9:69:dd:b8:35:7e:
                    86:14:4d:c7:2b:ac:1a:a8:77:4f:bf:1d:e0:68:4b:
                    91:66:ee:0d:ce:d5:37:4a:7f:da:ee:2a:0e:df:11:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.146.128.0/17
                  158.41.128.0/17
                  158.51.140.0/22
                IPv6:
                  2605:9840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1448

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:ed:51:97:c8:5a:c6:10:cc:3d:de:cf:72:75:e2:23:3d:
         b5:e3:30:26:ba:f0:12:38:1e:f3:61:c4:bc:97:44:e9:0d:9d:
         12:30:9c:f3:4c:62:59:b2:61:4b:2d:47:e3:12:33:c9:1f:4e:
         66:0d:95:58:d0:81:88:e5:ab:f4:58:d9:62:e2:f1:d1:86:9f:
         65:91:9b:84:86:ff:09:77:0a:30:b5:da:2e:8f:ec:65:77:2c:
         4b:bd:f8:53:d5:ad:53:66:d8:fe:8b:a5:7e:7a:9f:f0:80:1f:
         c9:79:41:e1:ff:97:d8:db:89:49:b7:40:05:0f:35:56:6b:3f:
         6d:16:17:40:e5:03:e1:df:34:86:b7:71:b7:aa:70:7b:fa:ed:
         2a:e9:d2:5f:02:eb:31:33:64:09:bc:91:cd:92:f1:86:1e:2a:
         c8:91:31:56:a4:b8:9c:d9:28:72:65:e2:79:9e:db:68:3e:d3:
         26:fb:a5:c4:a4:c7:38:53:c7:ae:b2:e3:c5:9b:50:7a:d3:a2:
         f9:04:8f:73:9a:df:4b:91:ff:0b:ff:fc:9f:91:5c:c4:22:a0:
         fd:1c:5a:6d:ec:89:45:1d:a7:d7:86:a3:6d:29:b5:e1:2d:ac:
         2e:da:fb:10:f1:f4:60:93:71:d6:b7:bc:89:66:ea:2e:4a:49:
         fd:58:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:03:57 2024 by rpki-client on console-fra.rpki-client.org