Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer
File:                     bc4d5614-d1d4-42eb-a171-b3d234aef7a3.cer (raw, json)
Hash identifier:          K49pPXAfYnp2yCxg9DAflI587RD5Cou9JPPTVocSV8Q=
Subject key identifier:   64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858439B787D08DB65253F588E2300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Oct 2023 00:45:15 +0000
Certificate not after:    Thu 22 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 35891
                          IP: 192.83.205.0/24
                          IP: 199.59.120.0/22
                          IP: 199.254.124.0/22
                          IP: 208.93.248.0/21
                          IP: 216.211.240.0/20
                          IP: 2606:bf00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9b:78:7d:08:db:65:25:3f:58:8e:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct 20 00:45:15 2023 GMT
            Not After : Jan 22 01:45:15 2026 GMT
        Subject: CN=bc4d5614-d1d4-42eb-a171-b3d234aef7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:aa:25:91:8a:b1:95:0e:8b:6f:d3:ac:d6:
                    52:e4:41:8c:fc:f6:58:0f:90:ac:8e:a7:e8:1e:9a:
                    fb:12:1f:c2:2e:be:87:0a:c7:d6:7a:4e:4a:9b:21:
                    a6:12:68:f7:f1:33:ca:d2:60:15:5c:65:c9:1b:fc:
                    e4:09:16:fb:45:90:2e:1f:48:3c:78:ff:b3:c4:d9:
                    ee:c8:af:3e:8e:b9:04:99:4e:1a:50:48:bd:b5:23:
                    01:af:48:cc:44:b6:92:28:02:e4:74:96:18:f9:46:
                    bd:43:a9:34:8e:73:a2:6e:20:32:47:75:65:d4:14:
                    89:9b:eb:1d:d4:a7:ad:08:ce:01:bf:56:8b:7a:52:
                    af:5b:48:7b:55:51:8b:42:ca:5c:15:92:52:04:b8:
                    e8:91:dc:1d:ad:92:88:8d:fc:a8:ce:51:ac:92:13:
                    1f:c2:51:d9:53:64:cf:00:14:74:05:e8:5d:50:5e:
                    78:5a:da:92:60:46:b6:d4:e2:75:fa:9a:a9:27:d6:
                    f0:e9:b5:3a:66:23:04:79:f1:8d:4b:16:c6:22:bc:
                    c7:72:2a:4b:91:0f:14:8b:a4:7e:49:14:c4:e1:11:
                    db:c7:0b:ec:b7:f3:fb:dd:fd:bd:12:93:a0:95:72:
                    24:99:fe:10:7f:74:a0:8e:90:59:87:00:7f:64:03:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:08:97:B0:47:B2:70:8B:F4:56:D8:DC:21:88:B7:5B:F4:2C:6C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc4d5614-d1d4-42eb-a171-b3d234aef7a3/bc4d5614-d1d4-42eb-a171-b3d234aef7a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.205.0/24
                  199.59.120.0/22
                  199.254.124.0/22
                  208.93.248.0/21
                  216.211.240.0/20
                IPv6:
                  2606:bf00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35891

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:72:1c:2d:ae:56:bf:e5:4d:6c:ef:6b:e1:39:b5:d4:bf:
         f0:94:50:31:52:db:68:80:c0:ea:17:13:88:84:0b:98:5c:98:
         90:ed:db:93:ec:70:02:6b:c9:f2:28:8d:46:c9:e0:47:6b:79:
         6f:c9:95:63:37:e1:5c:81:f6:3e:84:67:25:61:71:3e:39:da:
         a5:a7:94:ee:5f:58:2d:1e:bd:be:0e:0b:eb:b0:a2:82:99:63:
         73:c1:76:92:72:82:c7:af:42:61:50:13:46:35:ba:e8:23:c4:
         26:a2:f1:0c:11:ed:f6:31:cb:ad:4d:d0:f1:1c:7a:f6:d5:e7:
         50:86:bc:b0:6e:03:01:60:c6:5e:80:2b:52:8d:58:f7:49:82:
         c6:78:16:25:ca:6f:26:d9:7f:4b:74:81:82:ca:bf:f9:ae:fc:
         b9:b5:de:43:08:55:7a:18:80:f7:13:96:29:e5:b3:14:6a:83:
         d7:97:43:9f:5b:42:62:ce:81:2c:78:1d:ab:c3:7f:5a:a2:f0:
         c5:e7:4c:2c:16:de:fb:61:4e:15:2e:98:53:ae:1b:fd:5e:8c:
         be:4a:d9:a5:2e:39:cd:66:38:14:9d:c6:8a:e8:55:9c:6e:20:
         8c:c7:c0:6d:66:a9:50:69:82:65:47:b1:8b:f8:25:4c:aa:4b:
         a4:c4:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:37 2024 by rpki-client on console-ams.rpki-client.org