Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
File:                     c235459b-705a-42fb-9059-b6a9bf0c853f.cer (raw, json)
Hash identifier:          HBzUYmUUrNQwFVnIpLBFoezNZh5uSJ8ztMA8bB4O91w=
Subject key identifier:   15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858450E46E5DF90F273F5166E2D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Feb 2024 20:30:15 +0000
Certificate not after:    Wed 09 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 393905
                          AS: 398865
                          IP: 136.175.187.0/24
                          IP: 164.152.122.0/23
                          IP: 216.245.176.0/23
                          IP: 2602:2c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:46:e5:df:90:f2:73:f5:16:6e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 29 20:30:15 2024 GMT
            Not After : Jul  9 19:06:39 2025 GMT
        Subject: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6c:35:f9:3d:16:e0:2d:d2:f0:be:16:57:d8:
                    b7:18:68:3f:36:29:4a:2d:61:eb:8c:40:36:1f:fe:
                    3f:8a:68:7b:58:70:21:cc:9a:8a:8e:fb:31:52:35:
                    af:da:0e:25:9d:fd:bf:25:d4:c7:6c:e5:8f:47:4c:
                    62:c0:c5:07:bb:58:e1:b3:d5:71:42:a3:14:9e:24:
                    bd:dc:84:a6:e1:ef:38:26:6e:fe:fa:14:3d:28:5f:
                    95:33:44:9d:f8:73:87:3a:0d:20:58:33:d8:b4:e1:
                    9b:a5:38:a5:99:20:7f:46:21:c8:ba:29:43:35:ec:
                    e0:65:05:5f:80:1d:b9:8a:f0:df:14:c5:56:67:5e:
                    4f:5f:6d:7c:3c:89:f1:2f:ad:df:57:68:7a:9f:4e:
                    14:99:83:40:a2:a0:91:08:80:d9:37:b5:07:8b:b2:
                    73:dd:d2:77:2f:ad:95:8f:74:62:65:67:7f:38:ce:
                    44:7c:9e:b4:47:ed:c5:ea:73:33:fe:81:90:d0:bb:
                    56:11:35:0f:1e:fe:d5:47:b1:4a:c2:d7:5e:95:a2:
                    df:7f:6e:ca:82:81:35:ab:ee:6b:28:89:51:c3:f9:
                    95:69:2d:89:3c:89:6d:e9:f5:92:8f:71:d8:35:bd:
                    84:64:ab:08:53:3d:74:2a:15:16:d1:c3:40:40:64:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.187.0/24
                  164.152.122.0/23
                  216.245.176.0/23
                IPv6:
                  2602:2c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393905
                  398865

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:f6:fd:5e:35:26:30:ea:7f:45:58:10:4e:17:c5:cb:14:
         2f:20:8f:63:b0:d3:05:55:af:3e:06:4e:63:74:66:70:b0:d7:
         a1:42:dc:83:59:5e:02:67:26:61:9d:2d:18:02:9a:38:5d:f5:
         c7:ea:a0:04:65:c4:fa:46:fa:5b:9a:b9:8a:ef:db:5f:d4:77:
         8f:c0:55:db:03:68:d3:e8:71:05:dd:19:d3:77:8e:22:8e:7a:
         6c:3c:67:01:27:4a:6a:fe:86:39:24:d3:f2:29:f5:7e:88:31:
         29:6c:c1:a0:94:d6:98:0b:a9:f7:3a:7a:1b:63:85:54:dc:66:
         7e:c2:52:33:eb:9e:78:4f:8e:7e:f0:d3:35:5d:1b:00:77:18:
         f2:a5:79:63:09:c7:85:4e:95:14:c0:4c:79:88:0a:78:5c:60:
         d2:75:e8:6c:5d:01:d6:53:bc:47:e7:99:ca:0b:d8:f1:71:ff:
         dc:8b:5e:b9:35:51:00:88:50:5a:91:91:b0:51:88:55:34:29:
         cf:e0:e7:d9:a9:c2:6f:34:a6:c1:1d:67:5d:89:16:d8:10:6c:
         af:73:3b:73:61:e8:65:b0:13:52:6b:29:50:20:af:38:83:49:
         e0:c9:7c:34:19:a9:a9:b3:2e:da:74:17:a9:97:7b:5a:ea:37:
         11:4f:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:40:54 2024 by rpki-client on console-fra.rpki-client.org