Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
File:                     1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer (raw, json)
Hash identifier:          06BR8MklVfbXc9S78tFepRYG2Jhm+ufkbKJCvLw4K1Y=
Subject key identifier:   4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858451743558DB49753154A89B980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 Mar 2024 01:45:20 +0000
Certificate not after:    Sun 07 Jun 2026 00:45:20 +0000
Subordinate resources:    IP: 98.143.64.0/20
                          IP: 104.254.8.0/22
                          IP: 216.8.128.0/18
                          IP: 216.174.64.0/18
                          IP: 216.252.208.0/22
                          IP: 2600:dc00::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:43:55:8d:b4:97:53:15:4a:89:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar  4 01:45:20 2024 GMT
            Not After : Jun  7 00:45:20 2026 GMT
        Subject: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:91:ac:e2:08:9e:0c:9f:e7:13:77:f1:df:
                    0d:5d:7d:17:68:d6:cd:62:c9:c5:11:59:45:e2:9c:
                    f5:a5:89:41:54:5d:dd:a5:73:18:1a:f9:d5:3d:0f:
                    6b:fa:40:ea:b8:c9:97:f8:53:bd:d1:03:3c:64:4f:
                    af:c0:69:b0:1e:c6:62:da:bb:f6:6c:b9:75:cd:71:
                    58:80:c2:96:2c:3f:ba:56:ea:51:c8:71:92:9d:47:
                    99:c2:25:e5:b4:de:64:86:14:b4:a2:32:99:e7:bc:
                    c1:ae:72:a4:e9:75:6e:ec:4a:da:eb:c0:16:67:cc:
                    e7:6d:5d:0e:0b:74:ff:3a:ca:bb:b7:69:1c:b8:b0:
                    19:4e:da:11:36:0c:4e:0a:46:03:d5:19:ef:3f:18:
                    de:46:f1:bb:d3:e9:f5:22:ea:fd:58:0d:54:f5:65:
                    69:28:93:38:ca:d2:e0:70:95:73:e6:f6:bb:1f:04:
                    47:c0:bd:ec:06:8d:21:3b:6d:2e:44:ff:29:33:fa:
                    58:5b:a3:de:ce:2c:c3:1b:bf:e3:36:67:d0:37:d5:
                    24:67:f1:8d:85:93:26:ab:80:ef:54:11:87:bc:34:
                    d1:85:7f:8c:9a:09:13:51:2e:27:80:6b:03:27:d4:
                    36:b9:d6:66:3c:a2:31:22:58:96:4f:71:48:43:64:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.143.64.0/20
                  104.254.8.0/22
                  216.8.128.0/18
                  216.174.64.0/18
                  216.252.208.0/22
                IPv6:
                  2600:dc00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:03:af:b6:36:57:13:94:18:78:2a:c5:3b:bb:7b:74:9b:
         b2:cf:99:4e:74:f6:eb:67:81:d0:3d:2e:b0:d4:29:14:f3:85:
         3c:68:c1:ab:21:6b:90:fd:71:e3:2c:9e:bb:97:2d:3e:25:01:
         37:ae:6b:56:03:21:76:65:b0:e2:71:1b:d5:61:5a:66:1b:8f:
         0c:bc:fe:39:8c:40:41:8c:a1:a2:47:57:8a:c4:aa:cf:40:ea:
         86:65:1c:02:c8:6f:33:67:16:70:e3:c1:79:b8:3f:ae:8e:bc:
         4d:28:0d:7c:03:72:d0:e0:3a:a0:83:15:e8:b3:c5:d1:40:f7:
         35:b7:d4:34:6f:a8:4a:ed:20:65:2a:8b:29:6f:f2:cd:bb:9c:
         e6:57:ff:fa:c3:12:f6:51:55:91:8b:6f:10:9d:85:46:71:2b:
         97:5b:37:99:de:ee:7d:64:78:ea:86:8a:99:bd:e1:09:0c:51:
         45:ad:b6:d1:a4:86:4c:37:3a:99:cf:83:27:ae:a0:46:74:1a:
         10:a2:16:57:85:cf:8c:b5:af:49:a3:bd:1d:63:c4:96:44:68:
         50:a9:ac:0c:d8:84:4e:9e:5d:6b:21:6b:c5:94:db:5c:aa:dc:
         33:22:19:54:bd:d2:e4:32:06:d3:aa:4a:3e:85:95:cc:ff:1a:
         d4:2b:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:40:58 2024 by rpki-client on console-fra.rpki-client.org