Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer
File:                     f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer (raw, json)
Hash identifier:          NrDJCxA6M2BuFx2Efw78Yl1iUYMhuPSoR9Gl06QIH4s=
Subject key identifier:   6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
Authority key identifier: D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5
Certificate issuer:       /CN=02c7706b-3baf-42cb-bdf7-782b036252b3
Certificate serial:       010D0C9F43285845E1EA905DAD7639FFF7300300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Wed 15 May 2024 15:55:34 +0000
Certificate not after:    Tue 18 Aug 2026 15:55:34 +0000
Subordinate resources:    AS: 26556
                          IP: 23.172.120.0/24
                          IP: 23.178.72.0/24
                          IP: 2602:f96d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:ea:90:5d:ad:76:39:ff:f7:30:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c7706b-3baf-42cb-bdf7-782b036252b3
        Validity
            Not Before: May 15 15:55:34 2024 GMT
            Not After : Aug 18 15:55:34 2026 GMT
        Subject: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:0f:1f:2d:49:16:6a:48:b9:81:aa:af:79:
                    ca:82:7a:d7:81:c2:09:d1:8f:6e:b5:3b:a5:98:75:
                    b5:b7:1e:f4:59:fb:a7:62:35:93:35:69:69:11:78:
                    c6:c8:f3:b4:3e:79:42:1e:55:f0:ff:1c:3b:b5:66:
                    c2:2e:74:7f:dd:35:37:cb:8b:1f:a8:c5:b2:f7:a1:
                    2e:6f:96:01:0e:64:e4:e8:95:ac:8e:b7:33:b8:b1:
                    68:9a:8a:9a:93:d3:f7:2a:dd:ab:f0:44:59:64:3d:
                    be:20:b1:86:57:a1:f7:3c:dd:ad:b7:47:6c:27:41:
                    fb:c5:cf:62:65:d6:3f:dc:02:b0:ed:4f:c2:25:22:
                    18:63:fe:3e:44:8b:97:8c:61:0f:b4:9b:09:83:fc:
                    64:36:b5:4d:80:2f:c3:30:9f:07:6a:ac:b8:9c:87:
                    fc:4f:4b:90:68:4f:00:00:af:67:dc:b5:ac:9c:7f:
                    d5:a6:50:82:80:3b:d0:33:56:7d:fd:75:6e:4f:fd:
                    a9:65:6e:0b:f3:e6:20:19:12:d0:a9:48:72:74:25:
                    ba:ab:52:27:a6:f5:7c:48:6c:eb:45:d2:be:22:ea:
                    85:bc:9a:ea:c4:01:78:cd:7a:f3:ac:b4:b7:3e:bb:
                    ea:1e:10:bd:73:43:35:0a:80:f8:05:d4:30:fe:f6:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4F:20:B1:A7:C4:06:D9:A3:43:21:ED:FF:F4:B7:9E:99:15:A0:E5

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.120.0/24
                  23.178.72.0/24
                IPv6:
                  2602:f96d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26556

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:44:4a:63:47:35:8e:a4:e5:72:4b:34:1c:22:8c:42:e3:92:
         56:a9:f7:e7:27:a2:55:0c:ed:38:81:31:05:9f:53:d6:96:92:
         81:3e:75:fd:50:df:33:be:29:60:a0:c0:fa:bb:a8:53:94:7e:
         55:0e:38:9d:0b:28:64:c1:13:08:7b:f1:83:99:64:e1:bb:fc:
         f2:22:fd:e1:38:2a:3d:61:b6:1f:19:0f:ef:d2:8b:04:dc:99:
         0c:1f:03:24:02:a9:d9:4a:7a:b1:e3:d9:ac:45:d6:04:87:10:
         39:20:80:87:0a:60:be:79:47:ee:be:53:97:99:ea:9a:d7:ca:
         a1:b3:9b:cc:da:ca:41:c7:dd:9d:41:cb:ae:7f:d9:57:de:12:
         e5:5b:1d:c2:16:33:09:e1:74:a6:33:7b:be:14:cf:cf:1a:0d:
         81:0b:c1:23:02:b3:68:0d:e2:b6:38:8a:c0:b1:62:5a:14:2d:
         bc:f3:06:be:6a:4b:5a:0f:76:03:6b:f2:3d:89:5c:4e:6c:90:
         be:29:b3:c8:d2:16:ea:08:82:13:0c:5d:82:39:1b:7a:5a:22:
         bc:cf:7f:8d:5f:84:14:8a:1e:b0:99:0e:e6:60:12:6d:7b:f6:
         a4:d2:5c:5a:24:ea:b3:91:f7:cb:6a:e8:96:a7:bd:4b:d4:46:
         59:c8:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 11:47:59 2024 by rpki-client on console-fra.rpki-client.org