Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
File:                     caf392a1-07e9-49f4-9a03-df5005333708.cer (raw, json)
Hash identifier:          37gEFalTTFK/f6lddbN4Hy4iZ9J0EXV9RsCh8MKjqRA=
Subject key identifier:   44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858457610D0C269346DFC4B1BC410
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Apr 2024 00:45:20 +0000
Certificate not after:    Sat 11 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 46962
                          AS: 63058
                          IP: 23.133.120.0/24
                          IP: 64.93.68.0/22
                          IP: 66.118.224.0/22
                          IP: 104.255.180.0/22
                          IP: 2606:2ac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:76:10:d0:c2:69:34:6d:fc:4b:1b:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  7 00:45:20 2024 GMT
            Not After : Jul 11 00:45:20 2026 GMT
        Subject: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b3:29:f4:27:80:cc:fb:c5:ce:2f:4b:5c:65:
                    8c:2e:ca:5d:f5:b3:10:df:79:0e:00:4f:ea:ad:93:
                    8b:b8:a4:2e:4f:d2:a0:d3:7b:da:3a:6c:2e:25:2e:
                    40:0f:36:a2:b3:c1:a0:c0:44:f7:7c:24:6a:bb:ed:
                    56:b0:e5:03:ff:93:35:b9:d0:f3:35:46:03:d7:25:
                    33:24:dd:5b:a0:5b:8a:7c:05:3c:13:6d:49:59:dc:
                    c1:70:5b:61:03:24:fe:d0:85:7e:79:72:34:12:9e:
                    e2:24:05:bf:fb:8b:73:1a:0b:54:a9:68:b1:41:03:
                    67:c7:0e:de:39:25:88:8a:f7:fe:ee:de:58:cb:78:
                    09:0a:5d:78:56:5d:a0:83:d2:bb:4f:e2:d4:ae:38:
                    68:db:53:13:2f:b5:85:3e:59:61:32:9a:cd:86:c9:
                    e9:6d:c3:9b:ae:a4:e0:72:c9:5e:29:31:e5:8e:95:
                    25:55:77:37:90:ab:7e:e5:6c:43:d5:ee:f2:77:21:
                    78:51:53:8d:50:bc:a3:9d:2a:2b:cb:d4:59:3b:ce:
                    4d:19:04:51:56:9e:70:ed:3f:92:a7:ff:4e:9f:ba:
                    41:f3:4a:62:53:12:3f:f6:14:54:6b:6b:61:62:c6:
                    9a:87:6e:90:72:72:a4:80:04:5e:a3:7e:64:06:f4:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.120.0/24
                  64.93.68.0/22
                  66.118.224.0/22
                  104.255.180.0/22
                IPv6:
                  2606:2ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46962
                  63058

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:df:87:f9:78:af:8a:a4:77:a6:79:1e:12:b6:30:88:e5:d1:
         03:02:6c:a6:27:12:55:47:4e:0a:47:79:76:e4:80:3a:85:0d:
         c4:af:63:22:87:dc:1f:d7:db:7e:b1:b2:a3:0c:15:39:8b:47:
         61:c9:17:02:0b:ad:c5:b9:f7:91:1d:0f:45:b9:a3:13:b8:b4:
         b8:a8:0f:dd:42:84:60:f7:5b:36:79:8d:97:e4:da:d8:e0:89:
         da:2a:89:b4:2f:92:5b:a5:a3:41:c9:82:c0:06:78:10:90:ce:
         a5:f5:a9:ad:39:ee:8f:05:15:8f:54:16:3e:a2:68:7e:e3:e4:
         18:c1:5e:4c:00:32:4a:5f:c0:43:bb:94:11:99:65:86:89:15:
         52:71:42:30:6d:58:fd:aa:63:29:5b:84:1e:0f:e9:e4:d2:ef:
         44:0e:43:80:00:89:94:ba:e0:bd:9c:73:2f:80:0f:ab:7d:ec:
         ae:17:da:89:c0:96:45:37:5b:6b:4f:85:3f:c4:19:95:dc:e9:
         82:06:f6:2a:59:22:7a:df:3c:ae:a1:83:77:3b:f7:0d:c9:42:
         c4:af:73:76:92:e4:ce:24:7a:1b:cc:fa:83:01:20:60:2e:2b:
         c7:86:60:57:e6:ef:dd:3f:73:83:f9:c1:72:61:01:f0:c9:57:
         12:b6:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:38 2024 by rpki-client on console-ams.rpki-client.org