Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc.cer
File:                     30be0583-c369-4138-b01f-80edadf288fc.cer (raw, json)
Hash identifier:          HUxrCYvm8X2hj6PSu6sV4Er4TjjXcqauHiL3fzwhceU=
Subject key identifier:   46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842C11D9E637BB336E351EA2E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 19:35:57 +0000
Certificate not after:    Tue 04 Nov 2025 20:35:57 +0000
Subordinate resources:    AS: 19751
                          IP: 64.18.140.0/22
                          IP: 75.103.128.0 -- 75.103.223.255
                          IP: 172.96.132.0/22
                          IP: 209.132.160.0/20
                          IP: 2606:b500::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:1d:9e:63:7b:b3:36:e3:51:ea:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  2 19:35:57 2023 GMT
            Not After : Nov  4 20:35:57 2025 GMT
        Subject: CN=30be0583-c369-4138-b01f-80edadf288fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:68:8c:d5:99:9b:da:56:d6:ac:36:85:c8:06:
                    33:9c:04:7a:1e:bf:e3:4b:b8:aa:b0:1c:53:81:2e:
                    dd:0a:8b:9b:51:aa:81:2e:64:63:f5:e9:f6:1e:23:
                    c1:97:0f:3e:95:d5:7c:7c:a8:51:ec:ce:a1:2c:77:
                    10:fe:e4:f6:15:b6:ce:5c:40:35:ec:1f:16:ea:28:
                    83:b0:8a:ef:ab:11:40:23:12:88:2c:3b:a1:62:d1:
                    f4:89:0b:1f:20:2a:18:2a:e8:8b:fd:e7:5c:c3:4c:
                    58:47:61:0e:63:02:d6:d6:82:18:ef:17:82:cd:60:
                    ec:6c:b1:28:b3:8a:cd:37:16:1b:59:db:13:b7:8c:
                    2e:b4:94:3f:23:ca:24:71:f5:ea:6c:af:09:36:d6:
                    c1:4b:19:13:67:26:3a:de:e7:e0:9e:99:b3:54:cb:
                    08:f9:86:6a:51:88:15:3d:56:f8:da:2d:ff:ec:8a:
                    57:80:04:95:70:6e:5e:a0:2f:3c:a2:b2:0b:a1:0f:
                    ed:88:34:45:b2:6a:f0:cb:29:0f:18:2d:77:6c:67:
                    50:23:c4:91:9f:64:fd:fd:27:1d:14:70:f1:4b:a5:
                    6e:5c:6b:05:ae:cf:2e:e3:ea:74:41:f2:03:c3:50:
                    c2:61:21:0b:c8:fb:c5:d4:2b:8b:26:b8:ec:15:c5:
                    50:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E4:2F:1F:4C:B8:98:5F:8C:11:5A:54:C1:B9:08:F1:88:C0:5F:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/30be0583-c369-4138-b01f-80edadf288fc/30be0583-c369-4138-b01f-80edadf288fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.140.0/22
                  75.103.128.0-75.103.223.255
                  172.96.132.0/22
                  209.132.160.0/20
                IPv6:
                  2606:b500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19751

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e8:b7:5e:c1:43:9a:24:47:8f:47:0e:23:37:98:97:82:bb:
         11:ae:9e:30:93:af:c6:a4:97:a3:d4:c1:c2:17:54:0c:a0:50:
         dd:3e:8f:24:35:f2:ac:69:d7:44:59:64:7a:62:79:33:d3:81:
         29:ab:51:9d:ac:04:20:c6:82:2c:2e:59:c3:6b:8a:09:8e:7c:
         6e:d2:2a:4e:c4:0c:ca:b8:69:20:d3:51:3e:4b:b2:8c:4a:5c:
         06:9a:ca:d1:78:48:ac:25:3c:c6:07:a6:11:bd:68:8d:a0:5d:
         ff:a3:aa:26:8d:e5:2c:6f:34:41:46:ef:7e:78:cc:45:e2:16:
         b5:cd:24:3d:8b:3a:1c:73:39:ca:87:63:e3:ab:43:df:21:d7:
         a6:3e:49:c0:72:41:54:ae:6d:91:e0:a4:68:df:2e:cd:58:8e:
         57:63:89:08:88:bf:d4:9b:32:c0:36:50:09:49:e1:00:2b:a8:
         47:70:e5:8e:f4:14:0e:c6:0e:86:7f:61:04:79:4a:c6:e4:4b:
         7a:02:42:37:c4:c4:c8:33:8c:3b:1b:2a:89:db:2a:e4:71:50:
         59:fb:66:46:af:c8:7d:f1:39:54:5e:8f:e0:98:b4:ab:23:07:
         b0:fe:81:19:7e:9a:8b:54:1b:38:ef:44:be:b8:38:4b:ac:d4:
         4a:cd:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:15 2024 by rpki-client on console-fra.rpki-client.org