Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9d3e54f-dda3-490f-a25f-0e0434d89f0d.cer
File:                     c9d3e54f-dda3-490f-a25f-0e0434d89f0d.cer (raw, json)
Hash identifier:          G5rFWPDnsNYavs/jOEiQB6Z3BuiWE8JGn9zjF5/5Q/0=
Subject key identifier:   56:99:34:5D:1D:63:46:98:FA:4D:43:B0:53:71:3E:29:44:89:1F:9A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285843CF3DE7E2DB61B16E31BDD600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9d3e54f-dda3-490f-a25f-0e0434d89f0d/c9d3e54f-dda3-490f-a25f-0e0434d89f0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9d3e54f-dda3-490f-a25f-0e0434d89f0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Nov 2023 13:49:16 +0000
Certificate not after:    Mon 09 Feb 2026 13:49:16 +0000
Subordinate resources:    AS: 40794
                          IP: 162.255.184.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cf:3d:e7:e2:db:61:b1:6e:31:bd:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov  7 13:49:16 2023 GMT
            Not After : Feb  9 13:49:16 2026 GMT
        Subject: CN=c9d3e54f-dda3-490f-a25f-0e0434d89f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:ca:47:e3:cb:b2:a8:a3:9e:2c:73:4d:97:
                    79:f6:77:ea:e9:03:bb:93:06:10:ec:90:c8:8c:fa:
                    11:b1:c6:ca:52:3e:34:60:72:e1:c5:3e:f1:af:dd:
                    10:e0:54:fd:8d:a5:5c:3f:f6:68:de:98:29:67:9d:
                    cb:1c:77:8b:ba:69:d8:54:b7:9a:fc:a4:08:88:f6:
                    0e:7c:91:52:54:c0:17:84:ec:e8:64:76:92:58:3a:
                    70:48:42:ef:c5:dc:2d:1a:e4:85:15:ce:ee:23:c3:
                    3d:19:22:f2:bc:6c:77:28:3f:c7:3d:d7:d3:cd:69:
                    88:ad:d1:cc:fb:00:53:55:09:e2:8d:c2:03:08:bc:
                    f5:1a:5d:9b:f5:23:9d:dd:4a:53:2c:49:66:c6:a4:
                    da:dd:b8:9b:c4:3a:77:3d:25:a7:09:df:cf:c7:c1:
                    52:6b:1a:50:65:ad:8d:8e:d5:28:cd:dc:98:1e:31:
                    5f:ae:89:5d:6b:94:09:4e:b9:bf:c3:57:8a:42:95:
                    fb:0d:f1:0d:71:7f:dc:93:04:69:f7:b9:03:3a:d6:
                    52:aa:84:6b:53:7f:94:94:e2:dd:d8:26:df:b9:0b:
                    5b:7b:3b:8e:cc:d7:43:0b:cc:45:81:cb:5d:fa:55:
                    b2:63:f0:71:fa:e9:30:ac:13:63:a8:2b:11:79:c7:
                    5d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:99:34:5D:1D:63:46:98:FA:4D:43:B0:53:71:3E:29:44:89:1F:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9d3e54f-dda3-490f-a25f-0e0434d89f0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c9d3e54f-dda3-490f-a25f-0e0434d89f0d/c9d3e54f-dda3-490f-a25f-0e0434d89f0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.184.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40794

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:32:67:be:15:bf:d7:dc:5a:ce:4d:28:71:0c:08:ae:91:73:
         ea:06:f7:d5:5d:4a:4c:d3:14:2e:17:c3:59:5c:29:a1:fd:f7:
         89:86:f8:b5:df:9a:83:0d:06:23:76:1b:e5:3e:ed:14:95:0e:
         95:1a:45:79:5c:91:27:7f:46:b9:e9:53:43:6a:c9:96:4f:04:
         7c:c7:67:4e:75:64:0b:f6:97:a6:e4:1b:fe:5a:74:1f:a7:83:
         1f:61:5d:54:3c:c4:49:1b:19:2c:6d:67:e6:07:55:39:84:0d:
         34:16:f5:e4:e8:a7:88:b6:62:41:cf:2e:7f:38:85:f5:8d:b0:
         c8:74:1a:ac:bc:4c:7d:c1:0f:da:b2:ce:ce:a2:02:29:42:3c:
         7b:38:73:f0:c8:ad:3b:a8:8c:bd:8b:e6:be:61:bd:92:b0:6d:
         c4:77:30:ea:e7:5c:9a:ca:6f:f3:35:aa:b5:b4:5a:80:70:1b:
         d8:b9:63:a9:63:35:b6:a4:f9:ae:b8:93:3f:cc:10:fd:32:32:
         cb:0a:d8:a8:00:1f:b1:56:7a:90:69:44:ee:29:5b:bc:58:97:
         0f:bf:9a:cc:eb:c9:54:5a:fa:48:ee:17:df:3d:a8:4c:07:1b:
         6b:f4:46:a7:56:bd:94:db:97:4e:98:99:b9:fe:36:ce:fa:7f:
         bd:99:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:38 2024 by rpki-client on console-ams.rpki-client.org