Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer
File:                     f397700c-ac8d-4e3f-a06d-cb330dbb1e47.cer (raw, json)
Hash identifier:          H2b+GW6CfT1qTbVUUEQF0kNOKvjPAL4gKC17QQPzwtU=
Subject key identifier:   93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858457346210EF85D60000C020980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 06 Apr 2024 00:45:20 +0000
Certificate not after:    Fri 10 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 4138
                          IP: 23.129.192.0/24
                          IP: 2604:55c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:46:21:0e:f8:5d:60:00:0c:02:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Apr  6 00:45:20 2024 GMT
            Not After : Jul 10 00:45:20 2026 GMT
        Subject: CN=f397700c-ac8d-4e3f-a06d-cb330dbb1e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:78:bb:09:b7:db:37:f9:f9:5c:f9:02:74:81:
                    6d:50:62:27:fd:20:84:f2:64:35:3f:08:c6:6a:32:
                    38:76:2f:81:1f:73:0f:60:09:f6:85:c6:e3:f5:3d:
                    41:4a:0a:0e:60:50:4a:db:8a:35:e2:47:80:d3:2b:
                    99:b8:77:95:2f:1e:82:f8:b8:75:24:44:f8:02:df:
                    61:06:02:53:26:5b:9f:16:ed:5f:c7:5c:28:93:75:
                    38:99:be:82:8c:55:3b:34:ba:29:3a:49:4d:50:56:
                    3e:9b:03:a5:9e:0c:cf:92:64:21:c1:72:bd:e7:f9:
                    8d:62:aa:e1:4a:59:49:07:1f:0d:81:d2:d7:b7:bd:
                    06:46:87:77:49:62:47:f0:8e:9b:ae:a5:9d:c3:c5:
                    9a:67:06:b1:e1:9f:e3:67:f3:38:61:2e:dc:a3:95:
                    8a:26:d9:bd:59:cf:ed:15:ac:95:be:4d:07:e5:b1:
                    a0:a9:6c:42:b6:12:9f:fe:b8:eb:a6:87:09:db:af:
                    d9:2b:22:fd:1a:22:a8:d2:58:2a:ed:89:64:81:0d:
                    db:3f:41:f0:b5:bc:cb:13:ee:7c:49:29:86:71:78:
                    28:da:5b:7d:b0:ea:f4:03:c7:d5:b4:4a:1b:f5:52:
                    b3:c7:f4:41:45:93:ab:4a:72:29:20:c8:45:50:99:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2A:B8:09:27:73:39:47:E0:95:80:7B:05:73:B4:1A:08:F0:8C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f397700c-ac8d-4e3f-a06d-cb330dbb1e47/f397700c-ac8d-4e3f-a06d-cb330dbb1e47.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.192.0/24
                IPv6:
                  2604:55c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4138

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3a:90:d2:54:46:2a:04:6d:31:cd:a7:af:3b:35:19:fb:ac:
         b0:02:a7:5f:f3:7d:4d:9c:61:f1:48:fc:b6:24:cc:0f:55:62:
         70:80:57:bc:1a:cd:a2:bb:c1:89:49:a4:c0:43:60:00:12:89:
         44:92:33:e6:0a:ee:bc:11:ab:9a:6c:6a:81:17:a9:2a:49:2d:
         40:18:0c:b3:cb:e0:1c:55:e2:fe:d9:cf:3c:cd:31:3b:e7:0a:
         49:cd:83:08:67:ed:c3:53:0e:c4:39:d1:e0:d1:d7:df:6a:d7:
         eb:a7:97:e7:a4:07:98:51:d5:c3:4a:97:97:e9:39:3a:81:bf:
         b7:99:13:7d:43:3e:6f:d8:5b:f5:b0:71:3d:1c:6a:67:42:bf:
         6b:2d:58:12:66:69:1b:48:30:ff:27:17:b0:49:17:57:cf:60:
         be:25:10:5e:7f:25:90:aa:64:8d:b5:82:36:8f:16:d9:5c:61:
         db:72:98:4e:d8:01:b1:30:d6:08:ff:52:20:46:14:75:5c:56:
         3d:3b:25:12:41:62:b4:40:08:79:2c:e1:94:4e:71:29:a6:f1:
         21:9d:d9:f0:31:10:83:f3:35:8d:48:d4:cb:39:cd:66:72:18:
         70:42:0c:70:1a:39:b3:f9:47:a4:0e:a7:5c:08:a8:53:15:8f:
         3f:0a:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:56:59 2024 by rpki-client on console-ams.rpki-client.org