Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
File:                     0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer (raw, json)
Hash identifier:          QSTyX2Xp5ijbcuNykOhWVG2EWPoGodNhfEhBfn82weE=
Subject key identifier:   78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858481B3533BC4E2F7DEC955FF900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Dec 2024 14:00:55 +0000
Certificate not after:    Wed 10 Feb 2027 14:20:27 +0000
Subordinate resources:    AS: 8003
                          AS: 13847
                          IP: 23.128.236.0/24
                          IP: 2602:f7a8::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:35:33:bc:4e:2f:7d:ec:95:5f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec  5 14:00:55 2024 GMT
            Not After : Feb 10 14:20:27 2027 GMT
        Subject: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:d5:5e:e6:f7:08:c8:71:12:d1:59:10:97:
                    a8:43:00:d1:15:2d:e1:0e:3b:20:fc:d2:ec:fd:63:
                    5b:36:82:15:26:89:8a:07:57:98:c6:ff:81:aa:e9:
                    65:e5:6b:df:4e:3a:b0:42:37:e8:82:eb:4d:db:17:
                    23:58:18:4c:ec:ae:5f:0c:9e:43:f5:a9:96:10:91:
                    ee:46:8b:c3:f7:4f:ec:47:79:fe:c0:b5:2c:d6:ca:
                    9a:d8:92:09:61:5f:a6:e9:97:2e:e1:0d:0b:2c:8a:
                    c7:a5:4f:e5:57:6e:ba:05:7b:52:0b:e4:da:db:95:
                    5e:90:e1:60:07:1d:e9:7f:a9:6d:3f:b6:9a:50:d3:
                    95:b0:5a:70:b4:4c:3d:3c:2f:6c:9a:4a:70:e4:61:
                    a8:0f:dd:8d:3d:36:57:ea:23:09:c4:9f:d0:8a:41:
                    0f:49:f7:32:eb:0a:d8:e9:05:b6:50:a8:90:ce:4a:
                    e5:3e:09:08:b8:ef:b8:34:96:53:25:31:bc:3a:f2:
                    98:d8:4e:6c:3a:6c:59:d5:49:4b:83:d1:d8:28:68:
                    3f:03:ec:1d:37:44:21:2c:c3:0d:a4:3d:f6:a7:4a:
                    57:44:10:37:4a:26:b8:78:f6:91:7a:57:88:01:40:
                    1c:2f:ea:6a:23:6c:ba:fb:f9:b0:7c:4a:1a:97:7a:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.236.0/24
                IPv6:
                  2602:f7a8::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8003
                  13847

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:62:27:ec:aa:24:9f:a9:7d:5f:83:00:c8:f1:aa:a9:71:60:
         49:0a:25:ce:3e:70:57:cf:58:ae:c4:1b:06:a1:c5:f7:52:69:
         3c:9d:b7:9e:2f:39:da:2c:db:d7:10:33:81:ac:19:85:7a:50:
         72:c6:93:13:57:08:09:a1:ad:6f:e0:4d:30:96:8f:28:a9:19:
         b7:b7:7b:47:41:e0:34:d5:73:5c:af:f4:c7:13:35:c8:b3:5e:
         79:57:a2:4c:d6:9e:89:1a:42:6c:ca:6e:d8:37:61:61:f5:5d:
         91:b4:e7:6b:05:b6:89:82:59:04:62:cc:f2:33:59:90:b4:55:
         ec:bb:2a:4f:50:6e:11:5d:11:9f:63:4b:eb:d0:48:f5:b7:53:
         62:9a:b0:7b:e9:62:c2:66:08:d3:f4:e4:74:57:79:fc:cc:3f:
         1b:92:6a:42:93:f1:5b:44:72:a6:b6:7f:cb:eb:13:9c:e6:6d:
         be:b1:a1:0b:b8:b6:28:29:eb:97:4f:62:28:6f:de:51:b7:42:
         60:e1:79:53:70:1e:b9:c5:96:37:79:8c:54:f1:f5:88:23:a7:
         ac:0a:84:76:93:07:22:7e:75:a0:53:8f:26:01:df:7c:bc:f6:
         23:e9:f6:84:82:7f:cb:02:16:23:44:86:21:0f:83:1a:17:8e:
         9c:06:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 06:47:41 2025 by rpki-client