Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
File:                     0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer (raw, json)
Hash identifier:          ST3F3lruP+GvuAs03UF+053U/g35jO2HPMXnU/pcp2U=
Subject key identifier:   54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority key identifier: 8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF
Certificate issuer:       /CN=1a4b6836-4e28-439c-9ea2-50482aa15b68
Certificate serial:       010D0C9F432858434CC4D3A3525DBC97B1601B60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 20:10:13 +0000
Certificate not after:    Wed 24 Dec 2025 21:10:13 +0000
Subordinate resources:    AS: 40850
                          AS: 399535
                          IP: 138.118.116.0/22
                          IP: 177.128.128.0/22
                          IP: 191.5.56.0/22
                          IP: 2607:2ec0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4c:c4:d3:a3:52:5d:bc:97:b1:60:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4b6836-4e28-439c-9ea2-50482aa15b68
        Validity
            Not Before: Sep 21 20:10:13 2023 GMT
            Not After : Dec 24 21:10:13 2025 GMT
        Subject: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:32:df:8b:7a:dc:c7:52:c2:3d:3a:a4:19:
                    f5:1d:f9:a1:fd:48:59:75:5b:f9:ad:81:22:ba:9d:
                    1c:bc:fa:ec:8a:56:88:bd:ad:8b:a2:7f:8c:51:ab:
                    f5:89:eb:ac:ac:8f:1b:1c:9a:c0:d4:93:6b:17:98:
                    e1:b6:29:3b:f5:bf:58:4b:7a:fb:e4:23:86:7c:6d:
                    b0:51:78:6e:ea:49:91:86:74:fc:4a:66:98:99:14:
                    92:b5:e2:97:1c:49:fe:d2:a9:a8:e6:64:04:1a:77:
                    4c:83:f6:31:a6:db:43:b8:76:6f:9e:51:45:53:93:
                    81:0f:f1:1c:99:b3:b4:ac:3c:66:d8:2a:85:0a:27:
                    1e:1c:79:8f:fa:7c:83:ab:1b:2c:ae:4e:1c:02:a3:
                    6a:e0:a2:f1:78:b5:00:31:bf:d8:05:26:ef:84:58:
                    62:14:c8:02:22:e4:85:af:c2:24:66:6e:43:4f:e4:
                    18:38:c0:6b:9f:1b:c2:8f:7d:25:39:a8:80:23:98:
                    97:b3:6e:af:72:dc:a0:f0:3f:d2:cc:7e:b3:76:f2:
                    95:10:7c:27:64:c7:a8:c9:65:08:4c:47:22:b0:1a:
                    47:34:00:a7:be:64:f3:69:b5:3b:89:f2:b1:e6:f7:
                    3b:7c:9e:a0:1b:bd:f4:93:b0:8e:10:ad:b7:6a:21:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl

            X509v3 Authority Key Identifier:
                keyid:8A:0D:28:B8:D7:AB:A6:A3:3D:FD:71:30:65:C2:D9:F1:F9:A3:0A:BF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.116.0/22
                  177.128.128.0/22
                  191.5.56.0/22
                IPv6:
                  2607:2ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40850
                  399535

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:02:bb:e6:5d:60:f7:ae:b0:6d:d7:92:b7:b5:73:44:e4:11:
         32:8c:20:86:5d:3a:f8:8a:c4:bb:71:5d:64:c0:c3:d9:f5:fb:
         db:18:a7:dc:bb:02:4f:91:c5:5e:54:40:fa:1c:cd:68:e1:b9:
         07:88:e8:75:6e:56:01:47:ae:c9:99:41:6b:81:51:8e:42:d5:
         b6:a8:e8:8e:36:7a:37:11:05:56:7a:82:7d:66:d2:8b:d3:63:
         51:04:c2:1a:41:a0:59:f1:59:47:57:4a:f4:de:76:2c:4f:50:
         89:6f:51:37:1e:7d:e4:48:f1:58:e6:27:2f:8c:21:a9:d1:1c:
         4a:07:2d:a8:8f:d6:e8:a6:47:a8:69:63:5e:e2:25:2c:69:94:
         48:1a:bc:e5:c9:91:c3:69:50:f6:51:bf:2a:df:4f:64:b5:3f:
         65:b3:e1:f7:e5:2f:4f:09:1e:67:f8:ac:cf:69:a3:83:e6:38:
         39:c0:42:88:f9:aa:0f:b7:82:22:4b:48:71:98:1b:a9:53:b8:
         5a:ca:a2:3c:e5:c7:e6:84:bd:16:4f:7c:35:1b:52:fe:3f:c3:
         1c:f8:c2:83:3d:aa:c6:1c:16:65:0e:8d:2a:9d:ed:9a:0b:e1:
         c5:6a:ef:f8:d2:d1:d6:df:77:fa:c7:9c:8c:c9:98:11:00:b2:
         14:fd:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:03 2024 by rpki-client on console-fra.rpki-client.org