Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e.cer
File:                     a29a724c-0ef8-416c-bb2c-359a0122375e.cer (raw, json)
Hash identifier:          6AHwpCKGx1Tex60EGyQgJC//ibnhbuV+gQCZkaLGMJw=
Subject key identifier:   E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845C0912909F9C4FE4DADA6C9E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 May 2024 17:13:45 +0000
Certificate not after:    Thu 06 Aug 2026 17:13:45 +0000
Subordinate resources:    AS: 398562
                          IP: 170.39.52.0/22
                          IP: 206.168.252.0/22
                          IP: 2602:fcb3::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:91:29:09:f9:c4:fe:4d:ad:a6:c9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  3 17:13:45 2024 GMT
            Not After : Aug  6 17:13:45 2026 GMT
        Subject: CN=a29a724c-0ef8-416c-bb2c-359a0122375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cc:3a:da:c1:85:ff:4d:fa:97:4f:df:5b:c4:
                    c2:6d:db:0b:79:96:58:ef:4f:de:12:e0:6b:b7:e4:
                    8e:0f:64:28:09:e4:09:f4:c0:68:c7:c8:83:e0:be:
                    4e:77:35:a9:e9:ee:fc:b9:40:f7:62:6f:cd:41:52:
                    ae:74:78:bf:29:0f:95:9a:11:cd:65:c1:0f:8c:ca:
                    ad:99:41:47:fb:41:9c:0b:15:65:44:cd:42:92:a6:
                    5f:87:63:a1:b8:1d:c8:0a:c9:76:e2:41:9b:69:4a:
                    e9:4c:4c:41:78:3e:f8:fc:59:c3:b4:2d:41:0f:39:
                    f5:7e:9d:b9:4d:66:41:72:ec:e2:12:86:b1:ed:46:
                    71:87:d7:ce:28:c7:0e:21:1f:0d:3a:dd:6f:5e:ae:
                    c2:d7:50:64:32:75:d9:ab:c9:e2:96:42:6f:3f:9c:
                    0c:f5:fe:0a:10:2b:4d:b4:72:5f:e5:41:db:3d:a4:
                    81:00:c4:b0:30:cf:ef:ca:7a:23:86:2f:07:55:30:
                    4e:01:7e:b5:fc:5f:14:b1:0a:b0:89:e5:c7:5a:0a:
                    86:4b:80:08:7d:b3:a7:06:d6:5e:16:1c:da:59:b1:
                    b6:e0:84:f7:b8:e5:92:05:64:93:f2:80:cc:f1:8d:
                    db:5a:69:c8:56:35:60:81:c4:d9:26:c1:72:d3:ed:
                    72:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:B1:1C:1C:92:10:0A:49:5E:E6:A0:9A:ED:24:A2:DC:70:58:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a29a724c-0ef8-416c-bb2c-359a0122375e/a29a724c-0ef8-416c-bb2c-359a0122375e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.52.0/22
                  206.168.252.0/22
                IPv6:
                  2602:fcb3::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398562

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:24:ed:61:13:cb:c6:1c:c8:a0:bc:44:65:18:67:6e:b9:
         6f:38:7f:5a:a9:ec:2d:45:6d:3f:60:4c:ed:5e:39:8b:3b:da:
         27:d8:bb:66:57:72:31:bb:df:b7:bb:df:24:8c:8f:0e:ce:5d:
         11:b4:24:13:42:f6:f8:8d:bf:b9:f1:fa:87:42:d7:8b:ca:7f:
         c8:27:75:6f:85:9c:95:f9:e4:53:54:66:db:95:50:65:66:48:
         28:17:83:d8:2c:1c:8e:dd:23:fc:0c:f6:74:ed:0d:c0:89:54:
         2f:db:1b:20:d8:be:62:69:00:c6:f8:0e:6e:44:f6:f5:5d:4a:
         2f:32:8a:89:06:90:89:ef:e6:aa:7b:35:fc:fb:95:7b:df:af:
         21:85:8d:72:fc:16:d6:db:40:3c:a2:c1:8e:3d:57:f1:a3:66:
         49:aa:07:3e:c3:f8:f5:df:64:b9:e9:a4:5c:f2:11:ab:63:00:
         a8:27:70:a3:2c:65:cf:01:9f:0f:ca:0e:15:0e:38:8f:e9:89:
         7f:89:e8:7c:86:2c:a4:13:68:e5:b4:a0:53:8e:60:70:fd:47:
         04:95:b3:01:58:e1:74:a6:f2:38:7b:ba:10:ad:92:e2:10:5e:
         80:e6:fb:76:0d:40:4a:cd:7f:42:5f:44:0a:7b:8d:e3:cd:31:
         c7:55:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org