Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer
File:                     cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer (raw, json)
Hash identifier:          c+z9GYGBtso0e8r769a4rtzMJqwm0uCR/69J+bZtajU=
Subject key identifier:   A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584244165C91CDC79BE72EB52360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Jun 2023 00:45:17 +0000
Certificate not after:    Sun 21 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 11614
                          AS: 11889 -- 11890
                          IP: 216.49.192.0/20
                          IP: 216.168.160.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:44:16:5c:91:cd:c7:9b:e7:2e:b5:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jun 19 00:45:17 2023 GMT
            Not After : Sep 21 00:45:17 2025 GMT
        Subject: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:11:03:01:6e:e1:bd:f8:7b:a9:c3:18:de:
                    29:12:c6:b3:26:3e:a0:5c:fb:8c:95:e0:33:ac:20:
                    96:97:a7:95:bc:13:b8:84:56:cd:26:d1:0b:fd:30:
                    05:ce:a4:7c:a0:45:87:4f:94:53:93:6f:9f:9b:cb:
                    e0:75:36:79:e6:98:66:88:d8:40:bb:1f:c2:8f:5b:
                    42:a8:8a:b6:05:67:9d:dc:1d:c4:92:d3:10:de:19:
                    3c:f6:2f:98:f8:88:ca:10:f5:de:13:89:34:f2:7a:
                    99:a8:9a:d1:6c:f0:2d:11:0d:a1:db:83:d8:16:25:
                    fd:75:24:49:0c:d7:d7:f1:3f:40:30:96:db:22:e4:
                    c9:8c:1a:30:84:69:9a:3b:4e:ec:e7:4a:f7:ce:d2:
                    38:6f:6e:77:9b:7b:54:82:69:76:bf:7f:3e:5f:85:
                    9c:c9:b5:bf:59:7c:45:f6:a2:aa:0c:36:8e:b2:55:
                    0a:f8:3c:22:71:7d:37:d4:c4:c0:59:e9:2b:1a:68:
                    79:72:e8:5b:43:5c:30:1f:11:16:95:ce:b8:e2:55:
                    b2:dc:a5:61:76:07:f7:94:13:35:e1:97:a0:31:67:
                    69:8c:01:9c:93:31:ea:2a:1a:6f:2e:a4:7b:5a:50:
                    7e:8b:61:85:46:3b:31:1d:de:2a:06:fa:4a:cc:6b:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.49.192.0/20
                  216.168.160.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11614
                  11889-11890

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:69:7d:b1:9f:b5:94:87:c7:3e:bc:de:8f:32:b0:af:35:63:
         f3:51:86:17:d3:53:34:69:ca:37:eb:1d:e3:5b:fe:ef:0d:b9:
         31:7b:61:dc:88:59:dd:cf:40:f2:fb:0f:af:20:78:ef:9b:e9:
         aa:76:6d:53:a4:c2:bc:84:7a:b7:d7:48:86:90:9c:e8:0d:dc:
         f7:00:8a:59:aa:5a:ed:97:aa:ee:c2:0f:a1:0b:26:91:da:20:
         78:20:77:7f:07:5f:21:a5:46:b8:dd:37:ac:91:6a:c8:08:d9:
         00:ef:fd:a3:b8:51:2c:3c:36:56:93:53:b7:5f:07:a0:dc:86:
         a8:5c:dc:fd:f4:b8:89:c0:b6:6d:1e:b2:a0:d4:32:2e:0f:90:
         86:ae:a4:de:1a:d7:e8:7c:3c:5e:fe:7a:f7:b2:6b:76:e5:21:
         77:6e:16:45:15:84:1a:05:c5:d3:43:e4:79:5c:70:ac:95:88:
         b8:99:33:23:ce:36:5e:5d:b6:41:6b:e8:a6:03:4a:b5:43:00:
         9e:31:f5:01:9e:31:06:6c:17:11:86:24:f4:df:8f:f7:7a:60:
         2c:10:7a:cf:be:ab:61:cd:62:60:80:75:5d:d6:f8:b6:d8:a6:
         48:ca:8c:4b:3f:c7:9d:20:65:82:2c:5f:06:91:b5:09:85:f5:
         c6:fc:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:14 2024 by rpki-client on console-fra.rpki-client.org