Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
File:                     a20363da-11e1-47d9-ac51-fe156737c8bb.cer (raw, json)
Hash identifier:          98GneRuL0FQK7k+qG3LQmOrzIB4HyB9AwHPzVd+1vG4=
Subject key identifier:   D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844129E9701245BA2FA516E3E28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Dec 2023 17:03:14 +0000
Certificate not after:    Thu 23 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 55039
                          AS: 63298
                          IP: 52.144.56.0/23
                          IP: 66.187.28.0/22
                          IP: 76.164.220.0/22
                          IP: 104.245.108.0/22
                          IP: 148.59.192.0/22
                          IP: 162.142.100.0/22
                          IP: 162.218.180.0/24
                          IP: 162.218.182.0/23
                          IP: 162.222.252.0/22
                          IP: 168.245.212.0/22
                          IP: 169.197.75.0/24
                          IP: 172.87.224.0/22
                          IP: 192.195.253.0/24
                          IP: 199.45.252.0/23
                          IP: 199.231.248.0/22
                          IP: 205.220.208.0/21
                          IP: 207.244.136.0/22
                          IP: 209.127.236.0/22
                          IP: 216.87.44.0/23
                          IP: 2602:ff7c::/36
                          IP: 2606:4b80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:12:9e:97:01:24:5b:a2:fa:51:6e:3e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec  1 17:03:14 2023 GMT
            Not After : Oct 23 00:45:16 2025 GMT
        Subject: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:bb:e9:eb:b9:ac:af:bf:50:63:86:d9:78:
                    c8:69:03:0e:3f:ca:85:47:78:ce:7b:07:07:8d:22:
                    36:0d:18:1a:40:37:2e:17:cb:86:5e:3c:88:b3:4f:
                    5b:69:21:01:08:39:66:c3:ab:f9:1c:e4:8d:81:6f:
                    74:5d:05:4a:f7:82:dd:89:55:b1:bb:6d:12:47:1f:
                    66:82:77:6b:3c:5f:ee:61:fe:a6:ac:c5:5c:44:dd:
                    36:51:91:6c:38:22:d5:c9:db:88:96:3a:80:0c:91:
                    12:7f:c6:fb:c8:47:77:5c:4d:ff:81:d6:84:f8:47:
                    2a:a1:74:25:ac:48:9d:32:89:dd:33:f0:3c:2f:1a:
                    e1:cd:c9:6e:7c:bb:38:d4:09:c0:d4:b7:b3:e1:6c:
                    48:b2:97:6c:86:ee:1a:ce:10:32:08:97:bb:c1:41:
                    cb:d6:c0:75:e9:b9:b3:ac:50:36:2a:ea:e7:3d:df:
                    b0:8a:cf:f3:47:1b:34:37:15:de:cd:59:ec:3e:d1:
                    95:f0:f3:9f:e5:3e:0e:89:e1:b1:a9:f5:ea:af:7c:
                    71:e2:53:92:33:ca:31:3d:7f:a3:ba:ca:a7:2f:57:
                    53:23:58:e8:e2:97:59:74:06:9d:b0:f2:ff:6f:42:
                    65:67:32:21:40:33:74:6f:95:e5:be:c4:c5:4e:47:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.56.0/23
                  66.187.28.0/22
                  76.164.220.0/22
                  104.245.108.0/22
                  148.59.192.0/22
                  162.142.100.0/22
                  162.218.180.0/24
                  162.218.182.0/23
                  162.222.252.0/22
                  168.245.212.0/22
                  169.197.75.0/24
                  172.87.224.0/22
                  192.195.253.0/24
                  199.45.252.0/23
                  199.231.248.0/22
                  205.220.208.0/21
                  207.244.136.0/22
                  209.127.236.0/22
                  216.87.44.0/23
                IPv6:
                  2602:ff7c::/36
                  2606:4b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55039
                  63298

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:96:2f:e9:cd:f5:80:0e:85:7f:44:2a:d1:86:31:0d:fa:
         25:88:85:b0:c4:e9:ad:ec:53:2d:bd:90:24:b1:63:7b:08:ca:
         34:a8:6e:f3:49:6e:df:0e:91:cc:af:40:f0:9d:d2:c2:c0:69:
         f0:ad:50:d6:2b:af:0d:02:52:e0:d7:74:d0:c1:61:f5:75:f3:
         5d:70:c8:a6:08:de:f9:8c:27:5a:d8:69:09:40:1e:57:3d:90:
         0f:e6:ac:2d:af:5f:b5:87:92:7b:95:df:d7:6b:07:59:ae:a1:
         74:93:30:39:83:b8:84:87:45:2b:37:dc:1f:86:90:fc:8d:da:
         b8:9b:34:70:9e:56:db:9f:d6:d5:d2:c8:a8:fa:6f:05:3e:43:
         4b:11:41:b5:26:89:8b:c0:0c:98:c2:4c:32:3a:b3:57:dd:d1:
         ea:8b:34:b7:94:c0:3f:6d:7a:48:68:4f:5d:02:a1:16:1e:46:
         6a:bf:41:c6:da:2d:09:c4:32:d7:4d:60:3e:ef:e5:77:3e:25:
         c0:2c:7d:b5:bc:a1:6d:d2:6e:1c:0f:4c:68:7c:8a:4d:8a:cd:
         46:8f:9e:57:ee:ab:d3:9e:4a:c8:d6:08:7c:5c:dc:14:98:8b:
         9b:bc:33:28:cf:e8:c4:b7:35:4d:a4:74:10:50:80:6f:24:e3:
         22:72:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:36:44 2024 by rpki-client on console-ams.rpki-client.org