Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer
File:                     7386a5e1-ba73-408c-a7e4-df88e2f52603.cer (raw, json)
Hash identifier:          NJVf8Y9zJvCVL0ey6h5V1reLtuSSBZpwdIQzEF7aGXc=
Subject key identifier:   8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842FC57903C44A0999D7045F480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 00:45:23 +0000
Certificate not after:    Wed 26 Nov 2025 01:45:23 +0000
Subordinate resources:    AS: 13910
                          IP: 96.9.0.0/18
                          IP: 207.204.0.0 -- 207.204.55.255
                          IP: 209.16.96.0/20
                          IP: 216.21.224.0/22
                          IP: 216.21.231.0 -- 216.21.232.255
                          IP: 216.21.234.0 -- 216.21.238.255
                          IP: 2607:f408::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fc:57:90:3c:44:a0:99:9d:70:45:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 24 00:45:23 2023 GMT
            Not After : Nov 26 01:45:23 2025 GMT
        Subject: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:0d:53:d5:4c:0c:10:15:de:2b:31:a9:a7:
                    5d:19:fa:f0:3e:f4:60:04:10:f5:64:4b:08:29:e7:
                    33:e8:76:7b:cf:12:e3:93:ca:e1:e0:72:c7:22:91:
                    56:c2:b2:f2:42:7e:ad:1f:7c:d3:cc:fa:2d:8f:b9:
                    c4:ba:02:f7:8a:1e:41:61:aa:8c:fd:2e:6d:6a:4a:
                    87:48:fa:1c:00:46:d9:1d:a9:77:12:1d:c8:44:33:
                    a3:9b:6f:dc:42:d2:2d:9f:90:0d:df:95:42:b0:53:
                    19:47:1f:33:92:ea:96:46:61:ba:2a:03:e5:98:a8:
                    8d:b5:81:83:f7:b9:da:7a:d9:39:65:a6:1c:8f:d0:
                    93:92:e2:2d:02:31:80:24:9e:75:73:54:57:27:fa:
                    17:22:12:e3:3b:04:18:b4:3e:bb:42:ec:b1:9a:89:
                    13:18:3b:b0:33:21:b7:07:67:e1:0d:1a:02:81:33:
                    d4:3e:4a:b5:65:a0:cf:64:aa:37:4d:15:50:bb:1a:
                    a2:c8:5c:17:55:78:5c:e8:5c:5f:9e:74:7c:bc:78:
                    10:fa:fe:d4:38:4e:29:58:59:0f:11:79:f3:1f:4a:
                    88:44:57:60:36:6d:14:33:58:d3:a3:e1:36:ef:60:
                    07:d7:43:91:25:61:6a:13:6f:a3:51:eb:e8:0f:bc:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.0.0/18
                  207.204.0.0-207.204.55.255
                  209.16.96.0/20
                  216.21.224.0/22
                  216.21.231.0-216.21.232.255
                  216.21.234.0-216.21.238.255
                IPv6:
                  2607:f408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13910

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:55:c3:30:c2:08:e7:89:38:a6:6b:45:04:20:6b:3d:2f:
         14:04:0a:5e:bf:d5:fe:26:e0:f9:1c:0a:3d:8a:f2:82:f3:a1:
         2e:dd:b9:69:7c:1d:55:be:5c:9f:dd:12:05:73:fa:9e:9c:6c:
         1e:c7:6a:ef:4f:43:4e:f1:1f:14:c8:ca:1a:65:bf:80:9a:ae:
         68:98:4d:ad:2f:43:0e:cd:d4:d0:5d:f9:23:a9:33:0a:13:bc:
         7a:cb:9c:7b:19:01:7a:40:c9:36:9f:b1:be:2e:0e:c4:b9:26:
         fe:17:7b:79:21:2b:8f:0c:68:7d:3b:c0:38:53:83:2c:93:a2:
         39:e3:49:cb:43:ae:fa:fa:eb:ee:6e:9e:f6:90:bf:40:02:ac:
         cd:9f:de:ab:3a:c8:11:de:ce:36:46:23:20:fc:25:d9:37:1c:
         d4:aa:2c:9a:f1:a3:55:36:e9:0d:e4:9e:1c:f4:5e:a7:a4:00:
         be:ae:02:cd:b3:5f:ad:0a:cd:6d:53:c3:e6:45:74:fb:7d:0d:
         ee:5d:be:53:f6:85:37:20:d8:40:d2:f1:4d:59:b4:01:1c:0c:
         ee:7c:eb:92:66:ed:17:23:18:2b:7b:c7:20:cc:5d:fb:9f:5a:
         9b:96:e3:4d:59:c9:72:27:a8:e5:70:c6:41:a5:96:49:0d:a3:
         ac:2e:b7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:49:54 2024 by rpki-client on console-fra.rpki-client.org