Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
File:                     a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer (raw, json)
Hash identifier:          nKd68GmmjLDjwjgJPkFgUJpaN//jrFQWN2lvrG0hD7o=
Subject key identifier:   2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority key identifier: 3E:39:55:F8:01:27:92:F8:FF:56:DA:75:0A:21:D9:56:9A:05:D2:DF
Certificate issuer:       /CN=b915810d-b97a-4696-955d-495d5d12c3b5
Certificate serial:       010D0C9F43285844CA9D4AEAE01E4E9BC8492680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Mon 05 Feb 2024 14:49:21 +0000
Certificate not after:    Sun 10 May 2026 13:49:21 +0000
Subordinate resources:    AS: 63390
                          IP: 23.170.216.0/24
                          IP: 2602:f992::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ca:9d:4a:ea:e0:1e:4e:9b:c8:49:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915810d-b97a-4696-955d-495d5d12c3b5
        Validity
            Not Before: Feb  5 14:49:21 2024 GMT
            Not After : May 10 13:49:21 2026 GMT
        Subject: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:3e:32:ff:0a:ed:ee:80:93:85:19:e3:4f:
                    07:2e:8a:6e:70:64:2e:fd:c8:b4:10:a7:40:af:0d:
                    99:ab:b4:f2:ba:95:b8:3c:a5:d5:86:fe:14:81:4f:
                    a1:43:73:55:4e:89:f1:0b:9b:d6:88:40:5c:dd:60:
                    51:96:9b:17:d8:20:c0:58:14:30:cc:5c:39:a6:e8:
                    61:94:e3:ad:a8:23:af:f5:cb:59:51:74:70:84:2a:
                    f5:0f:24:16:ea:cd:98:3b:11:60:4d:46:50:19:e4:
                    5e:05:99:f9:c9:64:e6:9b:ce:62:a9:e3:98:c7:77:
                    ca:77:2f:69:d3:c1:3b:a5:c0:26:51:e9:64:d6:cc:
                    dc:66:19:dc:01:fe:de:6d:36:a1:4b:c4:b2:8f:03:
                    75:3e:7d:94:2e:dc:0a:b5:11:c8:ff:66:81:e8:74:
                    a6:9f:d5:d2:db:7d:85:f8:7f:af:9d:e9:c1:b6:e0:
                    b6:19:50:37:5d:a8:9c:5b:41:72:d2:a5:6b:79:b2:
                    62:f8:a6:23:e9:6f:04:de:da:da:f5:4a:74:a5:b6:
                    2a:74:ff:f0:3f:4c:e0:9d:04:17:55:45:eb:a5:47:
                    ee:7f:47:81:4e:a4:d8:92:a3:1e:f9:26:f4:ca:95:
                    fe:67:09:7d:7c:e6:52:ce:c9:76:49:ab:c9:f6:9f:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl

            X509v3 Authority Key Identifier:
                keyid:3E:39:55:F8:01:27:92:F8:FF:56:DA:75:0A:21:D9:56:9A:05:D2:DF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.216.0/24
                IPv6:
                  2602:f992::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63390

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:e6:a5:f8:c4:99:e6:78:86:59:21:84:de:cd:e7:65:5b:
         26:52:8b:3e:b4:37:0d:98:4f:b8:44:c0:67:c6:86:f6:07:8e:
         e2:ef:a0:3a:a7:27:13:31:be:23:67:38:80:c4:2f:72:34:5f:
         cb:ba:be:e0:d6:76:0e:3c:58:3f:cd:41:28:a0:91:d5:fd:6d:
         79:c9:f3:f9:9d:33:ba:97:df:fd:4a:cb:fa:f5:c1:ba:41:b8:
         6a:dc:3d:77:af:c9:ca:77:5c:6b:a4:48:31:e8:fc:43:9f:30:
         53:1e:3e:00:74:99:9b:8c:0b:b2:b9:38:01:6c:06:ab:f2:a4:
         bb:ee:b4:f3:b3:80:df:79:bd:1b:ed:1d:a4:9e:1e:3d:6c:54:
         06:e1:a0:94:7f:20:a5:8c:63:3f:2e:07:b0:18:bd:b8:72:16:
         0d:c3:88:e1:1d:32:17:d1:60:95:fa:ad:36:61:0f:e7:e3:fa:
         78:5e:9c:25:3c:33:ed:b3:4d:9e:12:70:31:74:8f:e4:78:1e:
         1b:98:f4:41:7f:22:8e:2c:a4:58:da:12:a2:20:ed:6d:11:4b:
         f3:5e:7c:9c:3b:bf:8a:15:5d:4d:cf:39:41:fa:9a:b4:48:4f:
         09:02:13:fc:ad:a1:50:5c:cf:e1:5e:51:ed:43:91:ac:4f:82:
         8c:07:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 18:34:51 2024 by rpki-client on console-fra.rpki-client.org