Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
File:                     4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer (raw, json)
Hash identifier:          LrOBZCkNEMnaCUS/Y/icrFWAnUBsqpjgf4QvSnmqSVM=
Subject key identifier:   87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority key identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E
Certificate issuer:       /CN=3eb60598-76ca-49b0-9a1f-01270603d8d9
Certificate serial:       010D0C9F432858474F74EF4162C13114BD168F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    AS: 399781
                          IP: 45.45.156.0/24
                          IP: 108.160.212.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ef:41:62:c1:31:14:bd:16:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60598-76ca-49b0-9a1f-01270603d8d9
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:30:ab:92:39:dd:d1:54:30:a2:41:e6:88:
                    58:b8:8d:da:f8:ff:a6:79:a3:f5:e1:27:bb:92:7d:
                    0d:24:d2:04:5d:35:77:d8:7b:58:ed:bd:3c:3b:b7:
                    a6:c0:12:5a:a5:36:05:5f:92:64:07:6f:05:57:28:
                    67:a4:54:4c:3a:f7:95:da:e3:05:e3:45:e0:d7:a0:
                    55:5b:60:dc:ed:3a:4c:c6:47:ac:c2:f8:f9:8d:4f:
                    76:bf:ec:63:e3:fe:cb:5d:47:0d:d7:fd:21:b8:ec:
                    fc:49:d4:27:01:04:46:50:be:82:0a:45:38:71:bc:
                    6d:0c:48:df:77:a9:17:e1:e6:fe:ed:72:8b:ac:f8:
                    b2:47:ab:c3:89:d9:f0:7b:8f:49:13:e8:ea:64:db:
                    bc:88:43:3d:33:48:cf:58:3c:bf:f1:c9:9f:f8:59:
                    93:11:a3:f4:2a:3f:73:bf:5d:28:03:f4:3d:df:e8:
                    88:a2:78:b2:0b:72:9f:e7:fa:2f:e6:e1:bf:44:5d:
                    55:6a:62:67:cc:e1:84:16:12:e9:a5:c0:d7:c3:7f:
                    07:ee:ba:a2:8f:b1:96:3b:9f:b1:07:6d:9f:4c:6c:
                    42:47:73:d5:1a:9b:d6:df:ed:c7:5f:69:d9:0f:56:
                    8c:04:b1:a2:df:41:e3:3b:24:7d:1f:7b:3e:8a:6a:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl

            X509v3 Authority Key Identifier:
                keyid:88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.156.0/24
                  108.160.212.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399781

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:be:e7:fe:71:17:06:c3:04:24:aa:83:4f:40:d5:13:8d:0a:
         25:d4:1e:5e:c2:d9:c1:a8:67:4d:2c:ff:d6:b1:a9:4e:4a:75:
         b7:73:8c:96:0b:e9:ca:1c:41:20:04:60:16:8b:6f:43:40:1a:
         16:f9:25:40:98:62:7b:ef:9c:9a:b5:25:5e:94:c4:8e:ad:22:
         2e:9a:9d:87:be:68:ac:d9:55:3e:c9:f8:61:6e:59:ba:b6:b7:
         57:11:65:73:df:8e:4e:e8:f0:3d:ce:4b:23:54:47:77:5b:29:
         5a:94:f1:f0:86:11:fd:9a:f1:66:bc:78:92:fd:0b:bb:72:bf:
         a1:d6:4b:30:93:86:4b:0d:b0:9e:e3:a8:e8:0a:ce:9b:10:b3:
         8d:c4:9f:7c:75:1b:1c:4d:80:a5:b9:41:dd:97:fd:0c:f4:c5:
         4f:29:a7:57:24:65:86:18:57:3f:6f:51:ca:31:d8:72:01:ff:
         22:91:e0:d4:1a:d0:ba:32:20:e6:8e:c9:08:b0:69:cf:66:d7:
         32:63:9a:66:ad:a9:1f:c6:2a:a6:34:78:4c:90:9e:17:7f:ec:
         5e:b6:ec:e6:57:20:4d:db:00:37:a2:10:c9:58:ca:19:eb:1a:
         59:e4:f8:c5:94:c8:92:14:d2:b1:6b:7a:3d:a7:f0:69:2f:e4:
         70:a0:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:58 2025 by rpki-client