Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
File:                     4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer (raw, json)
Hash identifier:          Ce5Y5LtJV4AbSJKBonjH+/+g1qYY0TFx4XhHmGLaYG4=
Subject key identifier:   1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843C28E0F36DFB4A6CD3AE6FA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 00:45:15 +0000
Certificate not after:    Thu 05 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 394449
                          IP: 199.68.53.0/24
                          IP: 2604:3dc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c2:8e:0f:36:df:b4:a6:cd:3a:e6:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov  3 00:45:15 2023 GMT
            Not After : Feb  5 01:45:15 2026 GMT
        Subject: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2c:e0:f0:44:d5:74:92:58:f0:62:75:e6:99:
                    35:82:c7:20:ff:29:5e:23:f0:bf:19:43:59:f4:e7:
                    b3:ec:d8:aa:c6:74:eb:75:70:2f:79:76:47:b3:d8:
                    16:e1:7a:a2:53:84:c8:ec:0e:2f:e0:5e:08:31:de:
                    ca:90:f5:5a:0e:c1:d1:fd:b5:07:69:00:45:9d:7f:
                    67:55:c8:cb:3e:21:ff:93:88:67:3d:e9:ed:e4:4c:
                    81:81:c0:7b:5d:d6:5d:d9:dc:40:05:24:4c:d2:2a:
                    f8:b5:85:97:dd:9f:66:f8:b2:10:8f:59:49:26:f9:
                    e4:8c:5e:d5:3b:72:75:f8:c0:08:75:2c:01:01:9c:
                    04:5a:fc:37:cc:93:3f:c0:03:aa:4a:af:35:ac:56:
                    82:45:24:85:76:c5:e2:23:a9:45:52:11:22:ae:66:
                    7d:1e:58:c0:49:6b:9e:b0:4c:db:0d:e6:7e:97:d7:
                    82:21:fc:1a:06:11:52:dc:cc:7e:de:c9:0e:1f:8c:
                    20:2d:c7:77:06:e6:29:0a:c3:e6:5c:b7:e7:38:3a:
                    08:e6:8f:90:cf:18:c1:1c:2b:96:d2:87:b8:d7:d8:
                    b2:a0:47:35:88:48:55:80:ce:93:c6:ab:5b:f5:a6:
                    4f:e2:fd:82:ea:30:1b:87:af:5b:d5:a4:8a:26:0c:
                    63:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.53.0/24
                IPv6:
                  2604:3dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394449

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:3d:0e:cf:a7:bc:34:ea:c3:e0:2e:dc:5a:a1:59:46:45:
         59:09:92:84:1c:af:01:19:d1:e4:3a:c3:8a:c2:85:c7:1f:64:
         57:8a:92:ca:ef:26:09:bf:3b:42:6f:0c:ee:79:4f:4b:32:d5:
         62:c6:d5:34:46:42:52:4a:21:df:19:b9:96:e4:0f:93:11:c8:
         c3:0c:c0:f5:8f:16:5a:ee:cc:28:82:7c:54:17:33:14:71:4e:
         a2:90:92:b2:56:6c:0e:c6:6a:59:19:4d:44:66:37:c3:7c:49:
         80:88:56:5b:9b:37:d7:ea:eb:9c:39:1f:7e:76:81:dd:0a:b6:
         f6:13:f4:48:a4:0a:cb:8c:33:20:e1:9d:3e:0e:b7:20:e4:d0:
         42:a2:48:9d:6e:0e:45:7c:4d:15:f7:0b:e0:5a:ed:db:12:44:
         80:9c:26:dc:a0:21:ce:b8:af:60:ca:05:17:60:b2:f0:1a:32:
         3a:6f:e5:8a:56:12:ba:18:63:14:08:60:19:05:e2:a3:7d:a0:
         40:c3:72:98:0c:86:df:06:e7:26:8f:cf:ce:f6:a3:b8:fc:1a:
         1c:0a:2f:3d:bc:90:d2:4e:dc:68:40:16:8a:65:8e:99:63:a2:
         cb:4f:4b:14:da:85:3e:7b:7c:b1:2d:d0:b6:41:a1:3a:f5:e7:
         72:ff:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:51:22 2024 by rpki-client on console-fra.rpki-client.org