Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28.cer
File:                     79ed687e-27f0-4e68-83d1-1811e64f1b28.cer (raw, json)
Hash identifier:          VQr6Rd3hXz1g6XagJUFNV7JTV6jt1TRqjusFR/VibXE=
Subject key identifier:   C7:8C:29:37:61:DD:66:98:AF:4B:DC:E9:C9:B3:E1:A9:D4:5A:93:95
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A95098CDDB818C1F52003E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/79ed687e-27f0-4e68-83d1-1811e64f1b28.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Oct 2024 18:53:57 +0000
Certificate not after:    Thu 28 Jan 2027 19:53:57 +0000
Subordinate resources:    AS: 3361
                          AS: 11739
                          AS: 47088
                          IP: 173.225.16.0/20
                          IP: 216.168.32.0/19
                          IP: 2607:fdb0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a9:50:98:cd:db:81:8c:1f:52:00:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 25 18:53:57 2024 GMT
            Not After : Jan 28 19:53:57 2027 GMT
        Subject: CN=79ed687e-27f0-4e68-83d1-1811e64f1b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:79:79:16:48:55:bc:ad:68:1d:67:a2:29:
                    93:33:58:d1:e0:97:09:00:39:8c:ae:37:5d:b4:35:
                    9d:f1:6a:c1:68:e6:1f:6b:5a:0a:0b:90:f3:4a:72:
                    74:2d:b6:5e:84:ec:0b:99:ad:ec:50:a1:0d:4e:66:
                    46:8e:db:9a:ce:15:d4:56:b3:b1:a5:61:a6:2d:89:
                    47:c3:b7:0d:fd:1e:c3:65:e4:61:65:1f:b7:aa:60:
                    62:f6:60:af:bf:95:19:13:1d:f9:40:63:e6:e0:3a:
                    d6:34:59:c1:d7:43:76:19:ec:5e:5e:e6:d3:4b:d8:
                    6d:77:66:97:68:65:42:6c:b6:18:03:28:fe:9d:1a:
                    34:f5:18:da:c6:cf:59:45:26:4a:8b:d9:93:22:78:
                    29:65:13:e1:03:5c:c4:34:d1:28:82:1f:00:20:e3:
                    86:4f:e6:28:78:c9:37:b7:e1:9a:b5:e6:1b:86:3b:
                    b9:cd:44:b8:5f:99:13:0c:bb:f9:80:92:ed:8b:3e:
                    5f:61:74:76:d3:b4:fc:a9:c9:c7:cd:3f:74:0b:d1:
                    ed:67:82:67:23:1e:28:53:b8:98:eb:e4:f6:26:c4:
                    6e:f7:2c:a0:04:a5:53:5a:c4:56:4d:88:c4:b2:33:
                    52:39:9e:e9:f8:0a:6a:ca:2c:b5:e3:bd:d0:84:9d:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:29:37:61:DD:66:98:AF:4B:DC:E9:C9:B3:E1:A9:D4:5A:93:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/79ed687e-27f0-4e68-83d1-1811e64f1b28/79ed687e-27f0-4e68-83d1-1811e64f1b28.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.225.16.0/20
                  216.168.32.0/19
                IPv6:
                  2607:fdb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3361
                  11739
                  47088

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:33:fb:5c:a7:c0:4e:4d:92:ec:12:bc:c9:59:f6:46:8d:
         6c:92:0f:14:2c:2f:76:ce:27:fa:2b:51:74:80:8b:1e:fe:a3:
         e5:9e:6b:a6:12:3a:0b:bf:c2:67:02:e2:80:5d:76:69:95:47:
         1c:81:8f:6f:ad:0c:ba:09:8a:cc:a6:c7:47:6b:94:28:76:3c:
         0b:9c:27:50:de:da:c8:c7:f1:6c:3b:7d:f5:7f:5c:be:de:b6:
         f9:95:76:bb:eb:61:9a:7b:a3:e8:5c:aa:f7:18:fc:e5:38:bc:
         e0:b5:15:91:9d:a8:5e:6a:b3:87:f8:af:d9:f8:c2:5e:90:e0:
         b6:87:61:95:20:16:5d:4f:38:34:46:61:c5:ed:ab:64:73:83:
         54:9e:83:6a:91:fc:3f:3d:ec:bb:d4:31:24:03:83:b6:d2:c3:
         de:60:fc:e6:00:20:35:c1:75:c0:0b:6e:74:b8:8e:92:10:71:
         23:18:0b:a6:2f:a1:69:df:5c:df:61:48:5e:3c:dc:7a:e7:e2:
         c1:66:42:50:8b:23:69:3a:74:89:74:01:81:2b:ef:0f:76:26:
         a7:06:11:8f:cf:8e:c9:3f:4b:a9:25:d8:67:22:69:15:eb:0e:
         0b:e0:d2:93:57:d6:80:a9:bd:41:5b:ea:6e:08:ae:9f:b8:b7:
         1f:aa:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 06:12:23 2025 by rpki-client