Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer
File:                     ef0b1b44-6f91-4e5d-a42c-54259da394ab.cer (raw, json)
Hash identifier:          XUjlk6r4kPMTqtgfvStMllXQrCardbu2Wc8aTcT43N0=
Subject key identifier:   1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584244165CB9604021D902742AA8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Jun 2023 00:45:17 +0000
Certificate not after:    Sun 21 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 393990
                          IP: 192.33.167.0/24
                          IP: 192.160.255.0/24
                          IP: 2620:120:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:44:16:5c:b9:60:40:21:d9:02:74:2a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 19 00:45:17 2023 GMT
            Not After : Sep 21 00:45:17 2025 GMT
        Subject: CN=ef0b1b44-6f91-4e5d-a42c-54259da394ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:45:69:de:b4:81:74:e6:84:c1:d8:27:ed:
                    57:02:45:6a:81:d0:27:16:6b:ae:93:30:37:76:08:
                    46:60:30:a5:04:ec:cc:5b:17:4e:45:90:fc:39:76:
                    72:08:b5:b6:ed:bd:7f:6c:0f:2b:c8:39:3b:c5:06:
                    a3:b3:18:1d:d2:4e:ec:24:83:2e:35:9a:f8:48:26:
                    be:dc:c9:f2:ac:e6:4a:5d:d3:44:37:5d:63:43:c7:
                    6c:88:61:15:1b:56:41:f6:bc:bf:69:ae:9e:ca:05:
                    d5:9c:86:54:22:76:a7:57:70:d9:8e:4e:f0:d3:d0:
                    cd:6d:b2:37:95:95:50:f3:2a:d6:d1:22:ff:c7:5f:
                    5d:0c:65:4a:d8:7b:47:21:38:7b:ce:65:43:08:a9:
                    7f:d3:02:95:db:a1:5f:59:51:90:80:fc:d9:ef:f9:
                    c1:27:11:8f:47:0d:bc:b4:09:f8:9e:23:65:2b:91:
                    d1:bf:f0:56:a7:58:1c:29:5e:a4:56:b8:e7:7f:50:
                    0e:fb:fe:d5:7c:b2:b8:1d:f3:95:8b:e5:3c:a7:d4:
                    07:21:47:22:88:1b:3e:97:62:b8:60:62:95:e7:57:
                    80:71:ed:fd:c9:fc:62:84:0f:b0:d9:63:f8:91:ca:
                    fe:e7:59:be:19:41:00:6c:a6:c2:ed:32:76:38:66:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:1D:18:FD:64:C4:44:8D:CF:25:CA:BB:A5:70:87:31:12:91:AF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef0b1b44-6f91-4e5d-a42c-54259da394ab/ef0b1b44-6f91-4e5d-a42c-54259da394ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.167.0/24
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393990

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:65:6f:13:e4:08:33:59:04:67:39:87:3a:3d:68:6d:51:45:
         2e:e6:0e:b6:00:e9:27:d7:75:e7:2a:d6:13:26:95:0b:c8:a3:
         cf:2d:61:f7:9b:51:a1:46:0e:f4:20:81:b7:8c:70:b9:cd:0c:
         73:3d:61:b9:5a:a0:73:7a:18:87:1d:75:76:0b:58:03:1e:2c:
         b0:d9:8f:b0:40:08:9a:68:3f:24:b2:60:b3:7d:79:2e:84:1f:
         00:9a:01:f8:73:6e:1a:55:6c:4d:72:fa:87:11:08:0b:33:6d:
         af:14:35:13:75:ff:da:73:20:05:0b:56:07:23:a4:5c:16:f0:
         da:f8:65:16:04:48:8e:4b:cc:53:16:e3:7d:eb:c5:68:34:4c:
         2c:15:0f:13:1f:2b:1d:58:f0:90:41:5b:b0:03:e0:47:6e:7a:
         fb:55:0e:e2:21:e0:5c:8b:25:2c:b3:a6:0e:5c:05:7c:af:24:
         63:85:66:23:d3:8a:2a:35:3c:f6:86:40:18:9c:a9:d2:be:43:
         06:2f:bb:52:5e:e0:1d:f1:16:cc:66:85:17:e4:73:f9:8e:8e:
         84:5e:4d:db:2c:99:cb:c4:53:60:60:b0:1a:9f:82:25:a0:a7:
         80:52:6f:a5:e1:0a:d0:43:d2:d3:f4:9d:e4:ce:69:b6:28:e5:
         5f:60:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:11:46 2024 by rpki-client on console-ams.rpki-client.org