Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
File:                     0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (raw, json)
Hash identifier:          Aiw9eyrHj8+wsA+/Ic8trn8yeX6UWePoQkxm9wFwn/U=
Subject key identifier:   09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F
Certificate issuer:       /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780
Certificate serial:       010D0C9F432858435F07BC7F6C881A996F41CA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
Manifest:                 rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
caRepository:             rsync://rpki.roa.net/rrdp/xTom/52/
Notify URL:               https://rpki.roa.net/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 09:09:35 +0000
Certificate not after:    Wed 31 Dec 2025 10:09:35 +0000
Subordinate resources:    AS: 32727
                          IP: 23.144.160.0/24
                          IP: 2604:eb40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:07:bc:7f:6c:88:1a:99:6f:41:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780
        Validity
            Not Before: Sep 28 09:09:35 2023 GMT
            Not After : Dec 31 10:09:35 2025 GMT
        Subject: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:14:75:7f:4c:90:50:67:3b:c2:91:ca:c2:
                    81:c2:8f:f1:70:07:32:2a:3c:9a:58:60:9c:47:5c:
                    5d:dc:d3:0c:5e:73:26:7e:3d:5e:4a:a2:e3:73:64:
                    03:1a:a6:1e:bc:f8:18:8b:e0:66:a0:c8:56:f4:b9:
                    55:98:82:6c:81:3d:b2:d6:30:26:a0:cd:2c:84:51:
                    2d:56:b2:49:26:1e:2a:da:58:c4:6c:67:f2:1e:52:
                    fb:1e:22:79:87:26:68:1e:7a:08:a7:c5:da:a1:23:
                    b3:6f:78:3d:94:0b:21:10:a8:4a:1b:b5:9d:5d:25:
                    97:7a:df:39:b9:e6:d5:d3:2c:9c:80:33:7d:d1:ee:
                    18:cf:8f:6f:e0:85:f5:9f:e6:3b:28:ea:8c:53:f5:
                    cd:89:cc:71:9a:05:ac:5f:e1:f4:f6:66:c2:53:c7:
                    ec:12:c0:30:40:74:80:bc:ee:10:ab:10:a3:18:11:
                    b0:4e:19:22:d6:45:0e:f1:e3:1c:68:b3:60:4f:ec:
                    99:6a:05:a9:2a:4a:fd:52:02:06:1d:ca:c2:d7:76:
                    76:75:4d:08:70:f9:08:99:c2:84:8d:31:ce:fd:88:
                    01:ee:61:f7:45:d6:a5:07:1f:bf:78:8d:cb:67:bf:
                    66:4d:ea:a4:03:8e:80:fb:c7:04:33:b8:6e:4b:95:
                    b6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/52/
                RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
                RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl

            X509v3 Authority Key Identifier:
                keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.160.0/24
                IPv6:
                  2604:eb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32727

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:5c:d6:da:e9:26:a0:5b:0b:ad:ad:03:42:f9:d2:47:bd:
         1a:c3:38:2a:64:15:5f:5b:bd:34:1f:b8:33:ea:6d:bd:ae:3b:
         79:af:61:5c:aa:f7:f2:17:0a:09:e1:bf:eb:94:ac:88:aa:62:
         e0:13:f5:56:0e:e3:6e:83:a4:f4:f5:b3:df:2c:82:5b:c7:d7:
         22:f3:24:5b:88:f2:10:50:87:6c:f8:12:09:7c:35:e0:bf:83:
         73:ef:33:96:7c:4a:50:42:fc:0c:13:c0:fc:3b:da:84:02:b4:
         a0:13:f6:5a:bf:40:29:fa:ff:49:9d:fb:81:2f:23:e2:9a:5a:
         93:af:f9:4a:7c:44:54:74:0d:e3:c7:5e:f3:7b:10:c6:fa:d8:
         37:35:ca:67:c6:00:ea:80:44:bd:4d:bf:41:d1:6d:ea:ea:69:
         73:e0:69:16:ef:66:91:12:67:9a:0e:c8:49:98:08:d1:57:fb:
         b3:42:d9:24:dd:d5:67:93:ad:fb:a8:c8:1b:bc:cf:f3:69:0d:
         ef:44:d7:b4:88:0c:a2:2c:61:4d:1b:bc:2c:e3:30:73:6d:5f:
         12:01:eb:10:02:63:0d:0b:11:45:97:27:40:d4:9d:23:ce:97:
         56:c3:1a:65:66:8b:f5:cb:e7:00:3c:d4:d0:90:5a:4e:36:32:
         8b:3d:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:30 2024 by rpki-client on console-ams.rpki-client.org