Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
File:                     9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer (raw, json)
Hash identifier:          94AIgrnakhwKDHZdxMS3MHHireV2HTSVm2IuiN45kV4=
Subject key identifier:   6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority key identifier: F6:88:4F:B4:78:9E:B1:EB:12:70:B8:6E:3A:83:45:F7:FD:20:05:72
Certificate issuer:       /CN=6755970c-4747-499d-9774-5e1308c501a7
Certificate serial:       010D0C9F43285844BF6312304C01527698078100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e72d8db0-4728-4fc1-bdd8-471129866362/notification.xml
Certificate not before:   Thu 01 Feb 2024 14:18:09 +0000
Certificate not after:    Wed 06 May 2026 13:18:09 +0000
Subordinate resources:    AS: 699
                          AS: 801
                          IP: 35.96.0.0/12
                          IP: 2606:7b40::/32
                          IP: 2606:8140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bf:63:12:30:4c:01:52:76:98:07:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755970c-4747-499d-9774-5e1308c501a7
        Validity
            Not Before: Feb  1 14:18:09 2024 GMT
            Not After : May  6 13:18:09 2026 GMT
        Subject: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:74:1b:54:47:16:50:43:b0:da:91:b7:1b:
                    cf:14:3c:4c:3c:4f:8a:a7:5d:27:c5:0c:6f:2d:86:
                    70:c5:72:cc:7a:97:01:37:e0:bf:58:fa:89:a7:06:
                    95:90:ab:7a:09:9c:bd:4b:9a:ed:88:f0:79:4a:9e:
                    4b:1e:b2:5c:0c:c7:23:57:b6:e2:04:d8:ea:e4:ea:
                    b5:1f:6e:a3:2f:5b:4b:4d:4b:48:6e:12:73:60:31:
                    41:07:84:01:ed:14:7e:1d:ca:dd:80:b1:ca:47:12:
                    3a:6e:0b:33:3b:86:bd:fb:e5:e9:4f:ce:67:0d:d0:
                    17:7d:20:69:35:73:df:92:89:bb:c4:c6:ec:00:8d:
                    f3:49:72:84:a0:22:ae:68:b3:e8:da:f4:95:9f:34:
                    a2:40:de:7a:62:a5:d0:f3:15:f0:08:4c:aa:78:2f:
                    0a:21:2b:c2:a4:c8:e2:98:9e:c0:89:fe:39:7d:67:
                    c8:5a:58:d3:e9:db:0c:97:ca:09:af:70:e8:29:0a:
                    66:e9:75:10:11:50:7b:a4:4c:e2:90:c7:5f:c5:4a:
                    7b:9f:ce:05:db:6b:3a:fa:a9:96:34:e2:f4:fc:26:
                    bf:ed:c7:7b:38:7e:88:b4:0c:68:37:77:2d:2c:5e:
                    01:0a:32:a3:88:ae:a8:1e:71:50:9c:5f:02:47:9b:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e72d8db0-4728-4fc1-bdd8-471129866362/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl

            X509v3 Authority Key Identifier:
                keyid:F6:88:4F:B4:78:9E:B1:EB:12:70:B8:6E:3A:83:45:F7:FD:20:05:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12
                IPv6:
                  2606:7b40::/32
                  2606:8140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  699
                  801

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a8:d0:03:d6:5b:38:e2:da:87:22:d7:8a:d4:ed:b7:3b:0b:
         61:ce:10:3b:fd:e8:fc:57:72:ee:e1:86:d2:a4:f6:47:b9:8a:
         8a:ea:e4:66:d9:b1:81:33:9a:a5:de:ba:10:7d:55:78:19:53:
         58:bf:25:0a:1f:b1:95:27:d6:78:13:d5:fd:a4:c9:77:16:02:
         a1:7d:ee:10:70:c3:f6:26:63:a3:1f:62:1c:de:b7:c9:09:34:
         15:ad:48:73:2c:4e:01:4a:35:df:cd:c4:e8:aa:0c:eb:2f:2f:
         18:85:46:b2:31:10:7a:88:b7:7b:62:31:46:69:58:33:70:3b:
         48:17:ea:41:aa:64:32:83:ed:aa:5e:c9:b9:4e:8c:47:6d:28:
         0c:e9:e3:ac:98:6f:cb:6b:ea:2c:de:7b:ac:4c:de:70:de:05:
         20:d2:38:f6:5f:d6:5c:af:6f:f1:3a:59:99:1f:50:81:65:7a:
         af:17:33:f1:4c:6d:c8:a2:c9:ed:fb:6a:a2:32:85:2d:79:9a:
         80:8c:65:5e:ae:5f:16:c7:33:eb:bd:22:a7:b4:d2:17:a4:a3:
         c1:91:6a:98:f9:df:33:c6:4f:4d:96:23:57:c4:c6:65:f0:30:
         0f:db:27:80:5c:ef:52:72:46:62:a1:88:cd:f1:89:91:6a:7f:
         23:30:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:57 2024 by rpki-client on console-ams.rpki-client.org