Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
File:                     69cd8bc4-5e3c-4cc8-941e-084043efb520.cer (raw, json)
Hash identifier:          BftZkyzkn3k5u18b6mNfVaeOrN+nyyHviVeokkefoCU=
Subject key identifier:   F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842271AAA5583A098E825713100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 08 Jun 2023 15:35:31 +0000
Certificate not after:    Wed 10 Sep 2025 15:35:31 +0000
Subordinate resources:    AS: 3695
                          IP: 70.36.0.0/20
                          IP: 142.202.130.0/23
                          IP: 2604:ca40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:27:1a:aa:55:83:a0:98:e8:25:71:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  8 15:35:31 2023 GMT
            Not After : Sep 10 15:35:31 2025 GMT
        Subject: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:c0:51:0e:3b:68:90:0a:5a:b7:ea:24:cf:
                    29:01:68:d8:15:ec:40:9a:a0:6d:d7:c7:44:06:f5:
                    cb:4c:43:63:64:5c:4b:f9:63:d0:b4:1d:2d:da:ed:
                    cf:57:bf:b3:bc:e1:e9:85:9e:d6:27:29:14:96:45:
                    f3:5d:f0:a5:c4:56:e5:30:4a:22:6f:ec:8a:44:6c:
                    46:4a:94:88:35:2f:50:35:ef:76:7f:d9:f4:fe:32:
                    60:85:8f:26:81:dc:41:ed:f6:32:c9:06:4a:59:a7:
                    f0:01:40:08:a2:c8:7e:8c:c7:c9:30:2e:b4:b3:20:
                    d3:19:9e:e7:54:02:a7:57:6d:34:2d:b6:dd:f1:4c:
                    ff:16:f0:10:12:53:49:9e:3a:4d:a4:4e:c0:99:33:
                    a9:97:63:36:c2:da:b3:da:09:61:87:c5:6c:59:d4:
                    3c:65:b6:5a:d4:45:8a:43:f2:06:10:bf:80:41:30:
                    d5:22:58:13:39:28:7a:87:ac:b1:d6:f3:79:c9:27:
                    79:ca:b7:b4:e5:71:fe:b2:15:c6:aa:d5:43:0e:bd:
                    d4:a0:5c:9d:17:a7:4d:1b:73:eb:ae:95:7a:3f:fb:
                    0d:da:ce:5c:fd:3d:21:22:69:a0:bc:09:bf:9a:58:
                    39:d6:1d:ce:8d:63:52:67:bf:f2:e2:aa:96:d1:62:
                    f2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.0.0/20
                  142.202.130.0/23
                IPv6:
                  2604:ca40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3695

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b5:ac:8b:7a:58:06:f0:f9:b8:c7:92:77:e7:eb:e3:d6:f2:
         3c:42:22:ac:06:cd:59:18:34:59:28:43:ca:38:96:15:65:7e:
         c2:52:19:f8:c3:ca:14:4e:14:5e:f4:4f:83:72:53:11:25:ab:
         e6:e8:f7:2d:4b:d9:9a:f6:78:6e:b8:13:04:c6:d6:be:4b:d0:
         ed:3a:7e:e1:9f:ae:b7:da:d1:29:f1:8e:03:f2:dc:2a:bf:63:
         4c:37:f2:2b:6d:d7:13:cf:4c:1d:16:13:2b:4b:51:85:7e:6e:
         a9:74:5f:e9:fc:3d:5b:35:6e:ed:b3:d1:9b:8b:12:98:4b:68:
         8d:fe:3b:ea:57:65:2c:96:12:cd:b0:6d:cd:3f:6c:66:74:a5:
         59:0e:c3:82:61:69:4a:1b:c0:9d:02:1d:94:fc:c2:bf:57:39:
         4a:3a:b3:4b:d2:b5:74:c5:fa:f0:b9:ff:04:4f:5e:dd:6a:a9:
         7b:98:54:c1:58:24:2d:fb:d8:8d:14:9e:fd:5e:aa:f7:84:dc:
         ac:06:a2:3e:e1:b5:74:08:96:dc:92:6d:eb:f3:66:69:4b:b5:
         36:52:1d:60:dd:45:6b:6a:a9:86:76:1b:d9:9d:5d:9d:8d:1a:
         ce:7d:2b:c3:df:cd:91:69:47:a8:d3:af:30:72:4d:c7:84:8c:
         5a:62:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:06:18 2024 by rpki-client on console-fra.rpki-client.org