Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
File:                     e3fada49-b353-4a69-9b32-1b6ab3729db1.cer (raw, json)
Hash identifier:          Kz87FsrOpWUXquiVsvABXLqbKtccBMWn1Qr5vBqArXo=
Subject key identifier:   26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285848433A41DEBA5091E13E58E400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 22:03:26 +0000
Certificate not after:    Fri 26 Feb 2027 00:06:26 +0000
Subordinate resources:    AS: 3855
                          AS: 13802
                          AS: 393440
                          IP: 66.55.112.0/20
                          IP: 104.218.168.0/21
                          IP: 142.54.192.0/21
                          IP: 162.255.216.0/21
                          IP: 198.207.16.0/21
                          IP: 204.13.24.0/21
                          IP: 206.188.128.0/19
                          IP: 207.228.128.0/18
                          IP: 216.249.32.0/20
                          IP: 2001:4910::/32
                          IP: 2606:b80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:3a:41:de:ba:50:91:e1:3e:58:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Dec 19 22:03:26 2024 GMT
            Not After : Feb 26 00:06:26 2027 GMT
        Subject: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:f0:a9:03:df:49:07:81:5f:1b:63:4f:c8:
                    2c:f6:6f:08:4b:09:db:cf:75:3d:86:5a:a6:f8:1d:
                    70:98:36:15:0b:81:04:93:4a:e4:56:bc:b6:e1:51:
                    f8:20:82:e5:eb:de:ce:d8:9a:3d:66:fb:52:64:42:
                    db:9a:61:de:c8:99:da:53:0e:7d:ca:00:ac:da:cf:
                    8b:8d:58:76:19:0f:cf:bc:01:88:11:c1:ed:1f:f7:
                    7a:a4:6e:9c:47:3c:9a:9c:af:84:64:6a:c7:bb:04:
                    b6:c7:00:0b:3b:40:c8:27:27:a3:f4:1d:6d:2d:28:
                    22:0d:df:57:d5:05:61:f8:1a:20:e9:de:22:b2:78:
                    c7:86:95:77:2b:26:c8:bc:8c:9f:58:34:de:74:c9:
                    7a:8e:e1:19:31:eb:29:e3:43:52:74:94:43:dd:91:
                    cb:81:7e:dc:3c:62:d0:b8:9c:cc:84:99:22:e5:cd:
                    3a:84:0e:ef:62:ac:82:e0:a7:75:8f:a9:1e:9b:42:
                    62:2b:20:c3:71:fb:77:db:0f:32:05:bb:e1:bf:e1:
                    36:bd:98:bb:cd:22:d3:79:fd:d8:28:47:e1:8c:da:
                    dc:09:15:50:df:66:ee:b7:c4:78:e7:7a:f7:cb:8c:
                    14:e8:85:49:01:81:5a:fa:36:21:7e:88:75:0b:ac:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.112.0/20
                  104.218.168.0/21
                  142.54.192.0/21
                  162.255.216.0/21
                  198.207.16.0/21
                  204.13.24.0/21
                  206.188.128.0/19
                  207.228.128.0/18
                  216.249.32.0/20
                IPv6:
                  2001:4910::/32
                  2606:b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3855
                  13802
                  393440

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:3e:5f:fe:85:3a:fc:9e:8f:c3:41:c3:e6:0c:da:f4:3e:
         70:78:67:ef:0f:d7:f6:9b:2d:d8:a9:1c:0e:b8:b8:fc:f6:a3:
         7c:08:a9:96:92:46:fa:6d:2d:0e:b3:a3:ba:de:1e:3d:7e:de:
         a8:1f:cf:2a:93:b4:81:9b:d1:6e:44:ec:ee:b4:36:a2:30:55:
         29:61:1b:65:b9:40:68:04:4a:24:03:0f:77:f8:39:db:b5:5c:
         b2:0b:10:f1:50:e8:26:e4:fb:dd:74:2f:9b:00:71:e5:de:d6:
         26:34:4e:39:78:75:47:55:1d:f5:eb:e0:6e:02:76:f8:cc:29:
         16:d9:c4:9f:89:1f:8b:29:f7:56:3b:2e:dc:e9:6a:b6:ea:4a:
         74:40:00:7f:ca:18:98:f4:ba:bc:da:d7:1c:c1:ef:f4:e7:8b:
         50:3f:8f:2e:58:1c:77:7d:bf:be:5f:ef:56:42:66:13:a1:04:
         2f:1e:20:e0:2d:71:d6:29:1c:b7:98:02:54:e7:61:6e:75:85:
         06:42:6f:2e:7c:46:e9:9a:ed:24:1c:50:45:6c:d0:36:16:be:
         4e:2b:ab:37:2d:b8:7c:af:54:14:00:e3:95:ef:fd:82:a2:0b:
         d6:73:ea:15:81:cb:5a:94:15:72:dc:0a:48:f3:99:da:b7:67:
         01:7f:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 07:59:58 2025 by rpki-client