Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer
File:                     bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer (raw, json)
Hash identifier:          RwD23HV1ihzCKCL4k/FoD9nbPyhFTIJ0xcpk2ZrOAMI=
Subject key identifier:   64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858489FC9144FAA5E5E2318E3F100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Jan 2025 01:45:33 +0000
Certificate not after:    Tue 27 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 35891
                          IP: 192.83.205.0/24
                          IP: 199.59.120.0/22
                          IP: 199.254.124.0/22
                          IP: 208.93.248.0/21
                          IP: 216.211.240.0/20
                          IP: 2606:bf00::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:c9:14:4f:aa:5e:5e:23:18:e3:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jan 22 01:45:33 2025 GMT
            Not After : Apr 27 00:45:33 2027 GMT
        Subject: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:aa:25:91:8a:b1:95:0e:8b:6f:d3:ac:d6:
                    52:e4:41:8c:fc:f6:58:0f:90:ac:8e:a7:e8:1e:9a:
                    fb:12:1f:c2:2e:be:87:0a:c7:d6:7a:4e:4a:9b:21:
                    a6:12:68:f7:f1:33:ca:d2:60:15:5c:65:c9:1b:fc:
                    e4:09:16:fb:45:90:2e:1f:48:3c:78:ff:b3:c4:d9:
                    ee:c8:af:3e:8e:b9:04:99:4e:1a:50:48:bd:b5:23:
                    01:af:48:cc:44:b6:92:28:02:e4:74:96:18:f9:46:
                    bd:43:a9:34:8e:73:a2:6e:20:32:47:75:65:d4:14:
                    89:9b:eb:1d:d4:a7:ad:08:ce:01:bf:56:8b:7a:52:
                    af:5b:48:7b:55:51:8b:42:ca:5c:15:92:52:04:b8:
                    e8:91:dc:1d:ad:92:88:8d:fc:a8:ce:51:ac:92:13:
                    1f:c2:51:d9:53:64:cf:00:14:74:05:e8:5d:50:5e:
                    78:5a:da:92:60:46:b6:d4:e2:75:fa:9a:a9:27:d6:
                    f0:e9:b5:3a:66:23:04:79:f1:8d:4b:16:c6:22:bc:
                    c7:72:2a:4b:91:0f:14:8b:a4:7e:49:14:c4:e1:11:
                    db:c7:0b:ec:b7:f3:fb:dd:fd:bd:12:93:a0:95:72:
                    24:99:fe:10:7f:74:a0:8e:90:59:87:00:7f:64:03:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.205.0/24
                  199.59.120.0/22
                  199.254.124.0/22
                  208.93.248.0/21
                  216.211.240.0/20
                IPv6:
                  2606:bf00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35891

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:f5:41:2e:18:40:4d:07:fb:78:b0:9a:77:69:46:88:36:
         60:9c:d5:b5:f4:19:52:9a:ec:ba:29:59:b7:1a:f3:42:1d:fb:
         af:31:bd:29:57:14:de:e5:e2:0d:e8:a6:63:9c:e1:ba:32:48:
         e1:cc:55:84:b9:03:cb:7f:df:e5:18:31:be:ab:dc:81:35:c1:
         43:fd:25:62:1d:d4:af:c0:9e:82:f3:d2:df:d6:a4:32:3e:01:
         4b:ad:c6:ed:01:83:7a:dd:da:fc:64:2a:62:a2:da:24:4d:ce:
         f3:a7:59:8a:8e:2d:9a:ee:f1:a3:4d:61:e1:43:8e:da:0a:04:
         6e:7a:3d:f1:70:6a:cd:95:df:df:1f:dd:03:b3:26:01:61:4e:
         14:b2:46:4f:46:59:4a:f3:8a:6c:34:b9:97:87:a6:6b:31:8b:
         65:09:b9:be:be:bd:cf:8b:7a:b5:ba:9e:ce:86:82:10:22:54:
         4d:d2:90:ad:17:c2:ce:eb:88:a5:45:49:22:11:44:75:05:b4:
         97:7c:44:54:ca:d2:e7:6d:10:de:24:bb:12:36:fd:1e:e0:e0:
         48:43:59:46:94:56:1a:31:77:90:5e:a2:68:a5:1d:28:45:7f:
         6d:18:a8:75:4c:72:cc:bc:db:37:d2:93:e6:c2:61:75:20:16:
         ed:eb:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 22:58:26 2025 by rpki-client