Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca.cer
File:                     1265cc41-1464-4ca3-818d-917a36c8afca.cer (raw, json)
Hash identifier:          AXZnySw+mNfDwDGBWTn2NOShcattdune5jzik0fFvMI=
Subject key identifier:   33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844A2029B3AD5264C89EBF75E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 26 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 397046
                          IP: 23.135.32.0/24
                          IP: 158.51.80.0/22
                          IP: 170.39.168.0/22
                          IP: 2604:b2c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a2:02:9b:3a:d5:26:4c:89:eb:f7:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 22 01:45:20 2024 GMT
            Not After : Apr 26 00:45:20 2026 GMT
        Subject: CN=1265cc41-1464-4ca3-818d-917a36c8afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:52:a9:ec:0e:3d:5c:6d:d6:5e:7b:d0:c1:5a:
                    eb:1b:50:cd:35:2e:9f:84:90:7a:a0:22:b4:8d:36:
                    e2:0b:da:00:d5:42:35:67:ba:65:2b:8f:16:57:09:
                    df:8b:22:5d:f5:6c:13:a6:07:6a:5d:30:be:96:63:
                    ea:da:04:4e:f5:9e:f0:90:cf:88:e8:6d:ce:6a:30:
                    66:cf:bd:0e:e1:d5:8e:dd:60:7e:2b:44:39:b0:91:
                    7c:5a:c3:d2:c3:69:61:19:0b:72:08:36:f5:e6:83:
                    2a:09:96:87:81:43:d4:e7:72:bb:54:30:6a:bc:5a:
                    14:5c:cf:bf:2f:83:04:94:8f:74:b2:07:cb:09:18:
                    dd:1d:7e:ab:6d:a3:c1:e9:9e:e8:e2:0b:d6:f6:c5:
                    6d:8c:2d:f1:e5:d0:ee:0a:63:18:05:4c:0f:01:6c:
                    f7:20:5a:ae:44:e9:b0:44:3a:af:42:58:8d:95:3f:
                    c1:fe:62:4a:ed:21:5a:45:2a:e3:51:72:77:08:f1:
                    23:79:33:87:0e:f1:2d:26:ed:1b:93:f3:fd:4d:6e:
                    a4:e0:c6:24:8d:89:3b:e4:de:2c:53:f4:34:0c:85:
                    ed:4c:92:ba:66:bd:9e:95:58:41:62:67:1a:57:07:
                    59:fe:02:e3:b1:96:77:fd:94:32:0c:5a:ed:75:46:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:2A:43:E3:17:30:45:4E:10:FE:49:6A:9A:EC:86:29:34:ED:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1265cc41-1464-4ca3-818d-917a36c8afca/1265cc41-1464-4ca3-818d-917a36c8afca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.32.0/24
                  158.51.80.0/22
                  170.39.168.0/22
                IPv6:
                  2604:b2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397046

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:be:29:ce:84:00:74:d6:a7:45:b5:21:6d:75:e1:7a:65:
         36:f2:e1:48:22:58:ac:39:2b:63:fa:1c:3a:3a:ef:0d:be:9b:
         b5:4a:8e:d0:ea:98:c8:cc:f1:0b:1b:a5:c9:40:9c:bf:8b:67:
         cf:34:ba:99:f5:57:15:31:ef:f2:80:a9:03:17:b9:47:2c:b7:
         b4:7c:a5:5e:b8:12:70:3b:46:24:bd:10:6c:8d:dc:15:52:3c:
         f7:11:4f:3f:2f:90:44:58:f1:60:d5:aa:1e:aa:d1:45:3a:a0:
         ab:f4:ab:fc:a6:6d:2e:59:31:82:f8:d4:17:88:d1:69:30:66:
         87:48:e0:c4:b9:e4:cd:b7:38:14:58:db:dd:5c:77:99:4d:0d:
         82:20:96:25:50:dc:40:20:2d:d8:a8:ff:be:01:27:91:e5:02:
         f4:d7:a0:0f:60:64:19:58:f1:a4:9c:24:58:d6:58:4c:fa:5f:
         21:35:d4:bb:85:37:5a:33:04:c4:48:ab:ad:96:85:a1:90:84:
         58:c3:b9:53:da:ec:31:82:b5:2d:d1:18:9f:67:6e:1c:00:2f:
         bc:c8:3e:89:bf:b9:12:83:4b:1e:c0:82:20:97:83:b3:73:ca:
         1f:35:e1:94:26:8e:06:b8:52:34:0d:33:81:24:fa:50:2a:d8:
         7e:5a:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:50:36 2024 by rpki-client on console-fra.rpki-client.org