Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
File:                     c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer (raw, json)
Hash identifier:          NwTgGxlCV2FNhNe8siD2uwftTPggOc97WXeF5W81j2c=
Subject key identifier:   AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834FF1C17ECA02BBFFF600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 06 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 53316
                          IP: 173.213.0.0/18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:f1:c1:7e:ca:02:bb:ff:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  6 19:06:39 2025 GMT
        Subject: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:62:26:ae:69:d1:c9:fd:d5:a6:22:49:38:
                    82:98:58:87:38:84:75:01:e6:aa:8a:f8:ec:83:69:
                    a7:a7:ef:5b:79:da:8e:bc:8e:02:31:9c:7e:9e:87:
                    d6:2d:90:99:2c:03:ff:2d:d3:f0:55:e4:8f:dc:43:
                    ab:a0:bb:21:bc:f1:42:65:33:35:1a:d8:b1:5d:83:
                    ec:12:7c:73:f0:01:77:17:9a:23:e3:4f:94:99:ad:
                    ce:38:cd:21:d2:5d:e8:b6:83:d6:51:fd:c0:1c:75:
                    fc:0f:81:40:96:87:e4:ff:ae:d2:aa:31:75:57:72:
                    15:4c:36:cb:72:3b:38:fd:72:02:94:d0:50:3d:45:
                    52:28:22:b3:af:40:c9:e4:93:75:10:93:7a:9d:d8:
                    62:08:aa:aa:36:0c:70:75:cb:ba:45:5a:2e:ce:04:
                    09:b7:0c:5c:ed:3a:d9:bf:fa:9c:bd:af:5b:d5:f3:
                    76:d5:49:d3:4d:a7:ac:de:61:08:4c:e6:75:90:6f:
                    38:7a:3d:a9:3e:86:a0:28:c0:70:55:45:e4:00:2e:
                    70:8f:12:ef:87:ac:8c:69:46:6a:28:ba:48:0b:36:
                    13:5c:f4:7f:30:bc:35:fb:2d:cb:5b:53:7a:3f:90:
                    4d:f4:f2:07:93:d9:d6:08:8d:53:23:66:0c:d3:ab:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.0.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53316

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:32:e8:da:85:33:e8:7d:b4:69:02:39:dc:83:3a:c7:a3:3d:
         1e:b2:00:7d:5a:82:72:87:22:5d:e3:49:0e:11:ae:bd:e9:28:
         70:59:e1:e3:69:dd:15:6d:fe:42:bb:fe:e0:b2:39:f3:e8:bd:
         ab:3c:e2:73:bc:4b:aa:5e:12:49:6f:d7:75:09:6c:8c:76:fa:
         d3:95:30:16:db:7d:50:2f:af:f2:cc:89:77:fc:8e:71:9c:88:
         47:f3:2e:8f:c0:21:e0:09:b9:bc:be:94:2f:63:90:70:28:04:
         05:ec:f8:f7:53:f3:6e:3b:f2:a5:f8:f6:9d:92:38:57:53:b8:
         9d:15:e5:dd:56:71:5e:7b:74:a3:9b:a3:21:c7:ff:94:bb:8b:
         53:46:37:67:24:94:1c:c0:cb:18:29:2a:4e:72:57:d9:86:40:
         f4:64:91:22:53:ca:99:d7:46:00:3a:22:25:b8:74:c5:98:95:
         2b:0f:71:3c:3a:b2:ea:d1:a9:a8:39:1f:85:6f:95:bc:72:76:
         45:78:95:73:36:24:64:bb:a6:a5:27:18:01:7b:0b:e1:18:7e:
         a9:f0:7f:c3:57:89:f7:0d:bd:b5:04:f5:36:66:a9:a1:3e:99:
         e5:43:b2:a1:a1:7d:91:3a:41:80:8e:55:00:d5:59:5e:98:50:
         d6:ee:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:52 2024 by rpki-client on console-fra.rpki-client.org