Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
File:                     032085af-3c11-4e53-8db4-4604b4f13aa1.cer (raw, json)
Hash identifier:          wOWttfczHeu8BuXjH84mg/pJgWWdEKBjp4TCqgZ70rg=
Subject key identifier:   AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A2F8FD8B4494D83FF7DAF700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 12:22:35 +0000
Certificate not after:    Tue 26 Jan 2027 13:22:35 +0000
Subordinate resources:    AS: 7150
                          AS: 398471
                          AS: 398573
                          IP: 148.137.0.0/16
                          IP: 151.161.0.0/16
                          IP: 157.62.0.0/16
                          IP: 192.149.243.0/24
                          IP: 204.108.180.0/23
                          IP: 204.108.184.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a2:f8:fd:8b:44:94:d8:3f:f7:da:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 23 12:22:35 2024 GMT
            Not After : Jan 26 13:22:35 2027 GMT
        Subject: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:63:52:56:5d:24:ff:1b:3f:e9:9d:15:b8:
                    bc:ca:ae:af:d0:fd:ad:6a:71:25:de:a3:fc:c9:12:
                    09:58:3f:a6:51:45:3e:8f:da:98:59:94:d5:5c:56:
                    6a:28:e1:bf:c6:35:b1:55:4d:ea:6c:3f:a3:1c:09:
                    dd:41:02:32:07:af:c0:42:8c:8f:be:12:14:02:b9:
                    52:03:d2:f8:60:fd:5f:1d:8e:ad:8c:de:57:a4:3f:
                    6f:1f:19:22:6e:6a:0b:5a:8a:39:98:cd:0e:48:d0:
                    85:f9:84:41:9b:81:4a:b2:e4:e8:b6:af:7d:61:44:
                    d3:5a:a9:05:1f:9a:91:77:01:b9:0e:b8:47:bb:4f:
                    ea:ec:8f:64:51:fb:fb:45:fc:79:f1:54:9c:ba:a5:
                    ee:d2:72:31:5d:87:3e:ee:fb:ad:ff:02:2e:18:8e:
                    4c:81:41:f4:a1:07:ed:42:b9:52:18:b6:c5:5e:0c:
                    e1:ea:42:c4:ba:d9:b9:f0:d7:31:7b:11:93:69:e5:
                    9e:39:a5:c7:d8:12:59:aa:f3:6f:33:9c:d3:d1:f0:
                    34:95:81:99:06:78:cd:a9:00:7d:1f:7d:ef:1b:4c:
                    a9:71:1a:59:b9:74:4a:ff:d5:5d:0a:11:8d:e3:74:
                    fc:31:ec:da:d3:90:5b:36:65:42:83:39:e1:c5:3a:
                    2a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.137.0.0/16
                  151.161.0.0/16
                  157.62.0.0/16
                  192.149.243.0/24
                  204.108.180.0/23
                  204.108.184.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7150
                  398471
                  398573

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:d0:ca:0e:8b:c7:d1:33:7a:7c:1d:5a:e2:26:a4:33:1c:
         37:23:6e:aa:fb:12:fe:4b:fb:4a:d2:cd:9d:13:99:a7:a3:04:
         bc:9e:07:e8:6e:b8:5b:ff:61:50:9f:23:67:ab:9e:94:fc:80:
         50:51:d6:54:92:d1:7e:45:8f:12:ed:51:01:aa:c9:31:b7:cf:
         f3:9a:47:62:7b:8a:fc:e9:97:72:8d:8d:24:77:4d:d9:94:cc:
         72:58:7b:96:fe:a4:09:8c:5e:a3:7f:4b:21:47:7b:04:f3:38:
         e3:9c:5b:58:7d:7a:be:70:73:89:73:cc:2d:5b:3a:00:7e:08:
         29:b2:91:32:60:f2:97:e9:b4:7d:4b:b6:3b:84:48:9b:f0:6b:
         15:9a:51:fd:18:09:c8:dc:eb:a8:32:33:c9:90:c8:fa:05:35:
         84:8b:9f:73:ee:03:b9:97:c3:b6:a2:22:a5:7c:ea:a0:ba:1e:
         60:ff:b4:ed:34:18:58:07:97:63:96:07:28:fe:ed:9f:43:02:
         e5:58:d9:9d:24:a1:c0:ec:ae:7c:a8:4d:9f:f4:49:b9:47:f0:
         86:4c:28:c6:a0:6e:62:ca:b6:23:d7:44:09:28:5d:0e:a1:fe:
         10:5f:62:cc:2a:8f:49:6a:2c:2b:2f:dd:97:3c:73:a0:4c:93:
         55:0e:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org