Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
File:                     d3a00337-0fdf-42e1-9343-424fd474da93.cer (raw, json)
Hash identifier:          Ad5YbQL942JDhhfcEVh8IpYVBOMghh9MKYplZTbNNI4=
Subject key identifier:   CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843C28E0F257F6F64175EAAEDF8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 00:45:15 +0000
Certificate not after:    Thu 05 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 27398
                          IP: 74.123.136.0/22
                          IP: 162.218.248.0/22
                          IP: 206.81.160.0/22
                          IP: 2602:fed5::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c2:8e:0f:25:7f:6f:64:17:5e:aa:ed:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov  3 00:45:15 2023 GMT
            Not After : Feb  5 01:45:15 2026 GMT
        Subject: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:73:3b:d0:c2:11:e5:db:78:0f:53:98:e0:
                    a8:7a:5a:a3:1e:16:64:01:19:84:cb:4f:a0:cd:68:
                    b7:4c:95:be:59:8d:b4:6e:04:57:32:10:40:d4:e7:
                    28:9a:f9:85:5a:da:d3:4e:cb:fe:97:da:bf:bc:91:
                    71:3c:6f:db:f3:75:6d:53:e9:75:05:79:c3:bb:42:
                    2b:0c:1c:0c:6d:fe:c5:d7:df:3f:4a:b0:9d:1b:7b:
                    d1:a6:1c:2c:e5:36:4e:07:a9:91:39:fd:cb:d3:b5:
                    2d:dc:61:8a:79:41:7b:15:39:03:3a:5b:95:0c:7e:
                    90:2b:0f:1f:9e:71:41:74:ab:5a:17:37:79:e9:75:
                    95:e4:63:a6:29:6d:7d:bd:ef:3e:fd:4a:03:bd:0a:
                    a7:26:bc:60:d2:13:1e:e1:4d:59:0d:44:dc:62:a4:
                    0c:b2:d1:32:d4:0c:15:df:ca:84:4f:e3:95:f2:8e:
                    16:b5:8f:a1:24:9f:17:53:d2:56:9b:2a:e1:61:fe:
                    0b:f4:61:ab:d3:a0:94:40:59:ab:13:f4:79:a7:c6:
                    cd:e5:62:d6:54:fa:b2:38:43:ed:df:fb:5e:76:70:
                    2a:9f:de:3c:14:d5:ca:50:d2:73:a1:70:d3:2c:12:
                    ba:1a:f8:42:92:cd:32:fd:b1:cd:ee:f6:13:87:a0:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.136.0/22
                  162.218.248.0/22
                  206.81.160.0/22
                IPv6:
                  2602:fed5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27398

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:d1:ac:ca:f1:7b:02:f4:2f:c6:44:3c:7c:98:7b:3e:1e:
         13:f4:c7:af:49:f9:f4:2e:6d:9f:40:91:47:65:07:f9:3b:35:
         45:b1:f6:f4:6d:9c:bc:69:9d:71:92:ad:bf:72:9f:b7:ff:50:
         eb:b2:77:9b:3e:76:84:2e:bb:5e:58:3c:f3:b7:26:88:35:06:
         60:7b:e3:8d:f7:09:58:3c:45:b9:dd:c1:da:d3:1c:04:ef:cd:
         5c:a3:74:2b:f1:c2:08:56:29:48:59:34:4e:68:74:dd:82:7e:
         f2:5b:ac:2f:96:3c:5e:8f:cf:21:f3:c7:2f:4c:fe:9e:4b:d7:
         48:8d:b0:c7:5c:dd:a8:c8:b0:23:7f:ab:50:60:c2:d1:8b:23:
         9d:13:4c:7d:c6:25:47:e9:cb:b3:fe:f5:5a:53:e0:f1:3c:a3:
         86:f2:85:18:b3:69:e9:28:6c:d0:c3:25:83:da:3c:0b:cc:43:
         a7:08:66:d2:73:d9:bc:fe:ff:04:37:f6:7c:a0:bd:e6:0a:cc:
         97:21:23:58:2e:99:b6:62:6b:9b:67:97:2e:14:57:84:d1:d7:
         d1:f7:a1:2b:e1:6a:44:d9:82:92:c7:66:29:7d:ad:97:1a:00:
         1e:75:1f:c1:74:b7:a0:32:7e:19:60:dc:d3:b5:d4:da:2f:b8:
         c4:2c:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:37:48 2024 by rpki-client on console-ams.rpki-client.org