Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
File:                     c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer (raw, json)
Hash identifier:          IXkgYZXDO7vpKLkOWbIDscQ3DebA8eWmO09l2itz35Q=
Subject key identifier:   E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584766FEA1C4D689AEF20B5ADFA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Oct 2024 00:45:27 +0000
Certificate not after:    Tue 05 Jan 2027 01:45:27 +0000
Subordinate resources:    AS: 33125
                          IP: 66.97.96.0/20
                          IP: 204.9.152.0/21
                          IP: 204.11.128.0/21
                          IP: 204.15.24.0/21
                          IP: 204.15.104.0/21
                          IP: 207.200.224.0/19
                          IP: 2604:9540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:fe:a1:c4:d6:89:ae:f2:0b:5a:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  2 00:45:27 2024 GMT
            Not After : Jan  5 01:45:27 2027 GMT
        Subject: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:cc:a2:3d:a8:63:f3:6d:dd:b9:5c:df:3a:
                    00:1d:da:bc:a5:e1:f4:1b:fd:c8:95:06:3b:9b:6b:
                    db:e2:03:85:a9:97:a3:86:96:4d:d5:a0:b0:6c:b5:
                    b2:88:ae:18:ca:35:17:af:0d:1c:fd:d4:cc:29:55:
                    e6:65:61:62:15:f0:ae:d4:26:ec:3c:dd:08:1b:1e:
                    65:14:9d:86:e3:e7:80:c5:16:ea:79:89:b0:44:40:
                    38:7e:83:e2:a8:ec:9f:be:04:b8:b4:5a:c4:91:83:
                    34:b4:5a:41:bc:4e:38:8d:78:34:3c:02:39:b9:66:
                    7b:26:92:58:b0:3a:f9:fe:c6:bf:7e:15:b8:ec:74:
                    82:0a:cd:d1:5f:6b:1d:59:83:4b:b7:3c:64:49:2f:
                    d5:34:85:63:cf:de:69:7c:41:8d:10:9d:dd:43:a5:
                    25:19:07:14:06:cb:40:69:3d:c9:45:9e:0d:c3:ad:
                    07:dd:81:40:d9:84:1c:e6:16:a8:77:24:cd:a1:90:
                    f1:2f:4d:46:b7:69:f3:73:01:71:c0:f0:cf:76:00:
                    2d:5e:2c:43:18:61:42:aa:d9:20:d1:0b:11:53:be:
                    60:eb:64:42:41:44:7b:d4:a0:9a:e9:fd:3c:9e:d9:
                    93:02:63:01:ac:01:21:47:99:33:47:f4:bc:87:88:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.96.0/20
                  204.9.152.0/21
                  204.11.128.0/21
                  204.15.24.0/21
                  204.15.104.0/21
                  207.200.224.0/19
                IPv6:
                  2604:9540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33125

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:02:2f:a9:f7:3a:64:f3:f6:12:d3:42:0b:94:58:de:69:
         8b:31:7c:59:41:77:e4:33:98:81:2f:3f:c5:f6:c9:98:75:d7:
         87:c7:e0:6e:74:ed:88:a8:38:38:1a:4a:10:20:30:46:00:76:
         92:6c:8b:57:93:88:ca:ef:2f:01:ec:0f:f0:a5:4b:26:1b:6b:
         58:72:f4:ad:7e:ae:51:de:a7:ed:ae:76:4e:f3:3d:2d:1d:b9:
         3e:e8:2c:60:e5:8f:fe:77:e5:70:ca:2f:38:a6:77:97:5a:1d:
         35:a1:48:28:c2:f5:b0:73:fd:53:5b:1a:2f:a9:ed:5d:66:8c:
         81:40:0f:60:db:eb:2f:24:83:25:e9:26:69:8b:2c:69:e5:02:
         ec:1c:e4:ad:1c:34:85:c7:36:01:04:ba:ee:0e:51:6e:e6:c1:
         02:c8:4f:ae:4f:ec:9b:cb:d6:05:9f:2f:cb:cb:c1:b0:74:c7:
         d7:74:a8:e7:34:63:be:77:fb:aa:4e:1a:2d:58:39:0b:3d:c9:
         98:a6:5a:32:d5:37:b3:45:f7:cf:e0:38:16:9b:97:f8:ca:4f:
         70:95:f7:2e:a8:d8:bd:d2:d9:a8:52:dc:c2:53:a1:c8:fc:ab:
         0e:52:88:39:36:f2:4c:5d:8a:7f:23:18:38:86:0c:4d:75:89:
         50:99:a1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:30 2024 by rpki-client on console-fra.rpki-client.org