Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
File:                     3df29669-3733-4127-bbde-a71cc4b5a661.cer (raw, json)
Hash identifier:          bJk2cdHvQTK5AityuFiMIVkOnQGqPEx6SKcidhs1mJs=
Subject key identifier:   95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844B2C2B5E54C816D19A965BF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Jan 2024 01:45:20 +0000
Certificate not after:    Sat 02 May 2026 00:45:20 +0000
Subordinate resources:    AS: 55247
                          IP: 162.211.140.0/22
                          IP: 208.82.168.0/22
                          IP: 216.162.208.0/22
                          IP: 2602:ff32::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b2:c2:b5:e5:4c:81:6d:19:a9:65:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 28 01:45:20 2024 GMT
            Not After : May  2 00:45:20 2026 GMT
        Subject: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:fd:53:43:04:95:97:3d:1f:70:7f:91:26:
                    62:f5:6c:68:cf:31:8b:32:b1:ed:fe:7b:2b:8f:3b:
                    67:5f:f0:b8:7b:1c:c0:05:37:9c:50:d1:d6:66:af:
                    8f:6d:ba:e1:07:f4:3d:28:d2:1c:19:4d:82:bc:03:
                    07:42:20:0f:bf:9f:90:03:f0:eb:18:6f:63:29:80:
                    d6:43:0f:db:45:f7:f9:b4:26:96:8b:0c:4a:6b:e6:
                    ed:61:a5:4f:5e:ac:4e:c8:bd:73:22:a3:1c:f2:df:
                    8b:ff:29:42:1b:9e:dc:49:a8:b9:c8:be:8b:d8:82:
                    ad:03:09:8f:28:05:c3:2f:e1:2c:b6:3c:b8:8e:c7:
                    ba:3f:9f:a3:56:9a:3b:92:a2:30:7e:f5:c0:15:ae:
                    34:ea:2c:ad:23:21:f8:1c:a4:d2:b6:ed:f5:c1:eb:
                    92:97:80:15:48:40:a7:10:ad:04:c2:c6:0f:fc:7e:
                    9f:5a:b4:a3:2f:ab:9d:de:35:55:fd:5c:ac:6e:a2:
                    dd:34:3c:f2:20:97:52:13:2f:aa:e9:aa:9c:fe:9f:
                    7e:7d:79:28:42:19:98:9f:51:e9:3e:6f:55:da:6d:
                    34:71:5d:70:b0:dc:33:a3:1c:c9:a1:a7:8c:cd:94:
                    70:22:ee:10:1a:59:30:c2:1f:47:42:1f:04:10:9b:
                    f5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.140.0/22
                  208.82.168.0/22
                  216.162.208.0/22
                IPv6:
                  2602:ff32::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55247

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:63:d0:53:2f:66:3f:c3:24:bb:b2:7d:f7:28:ff:4a:f0:
         ef:69:95:d7:09:6e:3c:84:aa:ea:6e:18:a5:6b:8f:31:82:b6:
         d0:be:ec:27:94:35:1c:78:0b:ca:62:1f:49:cb:db:b2:79:41:
         75:c6:07:cd:4a:ef:a9:f0:2f:50:bb:30:4c:78:75:b4:0e:20:
         72:ab:a8:8c:0c:42:0c:e7:28:90:3f:4f:ab:69:42:60:d0:2b:
         d5:ee:6e:61:64:73:f3:74:a1:33:92:ae:0f:e0:87:51:b5:8b:
         b4:6c:06:dc:17:b6:64:4d:9f:62:b4:91:cb:5e:7c:04:52:82:
         7f:b2:31:2f:e6:cb:9d:fb:91:97:90:cd:18:0a:d5:a5:43:ef:
         1e:55:0c:bc:f0:50:24:11:0f:5b:df:88:2e:b1:41:11:00:37:
         18:5c:8f:7f:a4:47:9f:9d:73:65:14:0d:b1:43:5f:b1:d9:dc:
         b4:0a:e9:ea:b5:45:12:75:bd:a0:56:e4:97:92:f1:64:63:64:
         6c:76:5b:94:e0:a7:fa:e1:95:2c:e4:e0:d4:7b:57:04:1f:8e:
         2c:e7:91:44:66:7f:23:84:d6:c5:cc:8f:e3:1c:4c:de:73:bb:
         12:74:d4:5f:13:d9:c3:fa:33:e4:5c:bd:eb:9e:9d:1e:0d:57:
         c0:8d:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:06:14 2024 by rpki-client on console-fra.rpki-client.org