Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da.cer
File:                     6edf1958-c03a-4505-9a75-2b1c81b948da.cer (raw, json)
Hash identifier:          /23j8YtYtDSm5LtNRQnGBo0/PaOdS6yvPryDWbrbkMU=
Subject key identifier:   B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285848F389998233224010A68F8530
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 27 May 2027 00:45:33 +0000
Subordinate resources:    AS: 63416
                          IP: 104.251.119.0 -- 104.251.120.255
                          IP: 2607:f8b8::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:89:99:82:33:22:40:10:a6:8f:85:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 21 01:45:33 2025 GMT
            Not After : May 27 00:45:33 2027 GMT
        Subject: CN=6edf1958-c03a-4505-9a75-2b1c81b948da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:58:c6:36:6a:a3:da:89:dd:15:b5:10:58:
                    81:9d:29:e6:88:fc:b3:17:be:ee:0a:aa:fa:81:c2:
                    0a:e5:83:6d:b8:13:71:e9:11:ab:4b:fd:fc:ca:f3:
                    ca:a9:ab:0a:6d:74:05:89:2a:41:c8:d9:b5:4a:23:
                    66:12:9a:4b:3d:4e:a4:e1:d1:8e:6e:fd:55:5a:9b:
                    30:85:9f:1c:b6:6e:fc:01:03:fc:81:c4:49:cd:2d:
                    68:79:28:46:8d:39:19:50:ef:52:66:b4:14:8d:d0:
                    30:2e:bc:8b:4f:26:78:7d:62:73:1d:30:d1:2d:96:
                    3e:6c:cd:93:db:d9:67:a7:b6:67:e8:8f:ce:9e:7b:
                    a5:5b:50:d7:fd:4f:47:f3:ff:76:ea:33:99:fe:47:
                    08:e9:61:bb:d3:7e:96:b2:ad:74:f3:0b:c3:5e:89:
                    40:37:ac:36:6c:ff:ee:bb:32:53:62:73:a6:94:22:
                    fc:ff:9b:e4:b4:f4:c4:c3:be:8f:43:1e:df:56:91:
                    60:32:25:ea:90:97:d8:7c:cf:60:b1:93:f6:a5:08:
                    8f:7f:9c:ce:e9:a1:b7:fe:eb:e3:b2:7c:36:6e:56:
                    e7:9f:5f:05:50:a7:bc:51:e1:63:f2:2c:ca:16:79:
                    d1:fe:8a:32:94:e3:5f:f2:da:c7:e7:04:ee:9a:2e:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.119.0-104.251.120.255
                IPv6:
                  2607:f8b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63416

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:37:e0:b2:13:74:d4:03:72:c2:b6:e9:78:6c:29:9f:83:93:
         4e:ee:d2:7d:58:ec:d0:93:87:ff:89:f8:a7:82:83:f6:74:c3:
         11:56:48:27:50:88:e3:77:a3:e1:4a:22:8c:ca:66:8e:5c:9d:
         ee:7a:e0:f8:ee:24:d7:d3:47:d9:d9:66:04:f2:d1:87:56:68:
         19:d7:97:ed:4c:d5:5c:68:76:74:86:df:0f:19:ff:65:0f:27:
         3e:46:51:60:79:ff:b7:be:40:20:04:78:3b:d0:a8:0b:15:e8:
         87:c8:69:75:55:78:08:6e:03:5c:00:a1:1d:32:e9:58:3d:de:
         84:1a:21:25:3e:9d:53:54:4b:a1:d5:be:b0:5b:60:7b:b6:5b:
         ad:66:46:2a:ff:04:b0:73:3d:bb:e2:72:e9:f2:d1:92:8f:c1:
         fc:ca:b2:99:16:21:11:27:52:64:fb:9f:a8:e0:f7:36:a4:cf:
         3e:c9:2d:b5:53:c9:e3:bd:c2:4d:1f:a3:6c:d3:85:d9:c5:eb:
         ce:79:48:9a:b8:eb:b0:bd:53:1a:cc:0e:b0:6c:42:c4:ac:b0:
         78:c6:b1:c8:23:34:80:3d:5b:31:c0:44:f1:04:72:b6:f9:85:
         ad:49:70:b5:f8:c0:ad:fb:b9:fd:aa:16:fc:e2:3c:25:6f:7d:
         ed:b9:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:58 2025 by rpki-client