Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
File:                     6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer (raw, json)
Hash identifier:          uAbp9OGLjCuIFt1C9aNYtDqb6PoY32Q/hUI52lPKsZw=
Subject key identifier:   DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority key identifier: 1A:7B:4E:AF:FA:E5:94:7C:BE:DB:6B:C1:51:01:82:48:52:74:77:90
Certificate issuer:       /CN=54c036c5-e20a-4ba1-8516-5ab3a356dbfd
Certificate serial:       010D0C9F432858435F069788D73A94CA7C7ED500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
Manifest:                 rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
caRepository:             rsync://rpki.roa.net/rrdp/xTom/46/
Notify URL:               https://rpki.roa.net/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 09:07:16 +0000
Certificate not after:    Wed 31 Dec 2025 10:07:16 +0000
Subordinate resources:    AS: 36828
                          IP: 104.245.8.0/21
                          IP: 142.147.88.0/21
                          IP: 2604:a840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:06:97:88:d7:3a:94:ca:7c:7e:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54c036c5-e20a-4ba1-8516-5ab3a356dbfd
        Validity
            Not Before: Sep 28 09:07:16 2023 GMT
            Not After : Dec 31 10:07:16 2025 GMT
        Subject: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:34:60:ce:9f:6c:46:ca:4f:9e:cd:c5:9c:d7:
                    33:ce:ff:57:b8:1c:38:e8:c8:a7:88:be:13:9d:f4:
                    c3:e1:14:a4:68:11:38:0e:5a:60:7a:0f:55:15:ad:
                    0c:2e:99:30:34:b5:b6:68:d7:4e:57:27:a2:91:6a:
                    58:e1:58:b0:6d:94:2b:dc:24:1a:29:31:96:ad:38:
                    ea:1b:dd:e7:c5:41:70:4c:91:77:b3:37:93:34:a6:
                    f2:7f:f4:be:98:f6:64:0d:7a:68:7f:5a:91:84:b4:
                    27:10:06:fd:e7:6e:20:70:05:9b:3b:d2:8a:4b:f6:
                    55:7b:db:30:6b:27:9f:d7:ad:6b:a9:84:46:e1:c4:
                    2a:0a:a7:7e:a2:b4:48:36:77:c0:c9:f4:aa:f2:8b:
                    13:a3:64:69:ba:b8:00:84:92:af:f9:b5:3c:53:b4:
                    f2:19:9b:d5:7f:b3:11:e1:fc:26:12:fa:95:ff:19:
                    a3:7f:95:b9:0f:5f:6b:6f:0b:2c:7a:cd:6e:d2:b5:
                    43:c6:59:61:70:61:a7:e0:12:13:08:d1:49:e5:62:
                    d7:a8:30:5f:ed:2e:5c:fa:a0:66:74:ae:f6:3d:a7:
                    67:3b:04:97:a4:80:c2:fe:31:86:9c:2d:1c:a2:7c:
                    2a:db:2a:33:2f:5f:32:07:0d:bd:09:bf:3a:e1:8a:
                    02:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/46/
                RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
                RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:7B:4E:AF:FA:E5:94:7C:BE:DB:6B:C1:51:01:82:48:52:74:77:90

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.8.0/21
                  142.147.88.0/21
                IPv6:
                  2604:a840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36828

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:83:b9:e6:d0:60:c6:a0:4b:27:71:50:b9:48:d3:00:7f:ad:
         be:d8:e6:b8:ed:17:85:51:cf:09:d4:80:64:f3:c7:40:a0:b9:
         cc:f9:d0:d9:95:6b:2c:7b:f1:38:90:7e:c4:77:be:8e:b6:d8:
         4a:0f:39:a0:66:30:45:1c:2f:cb:3e:a2:92:3a:77:fc:b7:0d:
         ef:9b:7e:9c:45:72:46:b1:f5:fc:1d:02:ca:b2:52:ca:e9:93:
         c8:ed:19:e2:b3:29:1d:24:59:fc:15:01:b2:74:da:c1:2b:91:
         e3:eb:39:b1:16:73:67:19:2a:51:5c:72:09:6b:ec:fe:3f:24:
         e5:6c:eb:44:36:8f:03:d2:19:b3:0a:3d:5d:9d:11:76:2c:29:
         f4:9b:40:31:06:3c:8c:70:70:54:7b:14:10:db:11:ab:3a:fb:
         8a:b3:db:4f:61:a6:fc:15:b8:ab:42:9f:a1:45:61:22:33:d9:
         11:98:bc:52:55:3d:05:7a:72:18:cd:f3:b9:af:d9:ef:36:74:
         fe:09:de:e9:ef:c2:5f:ce:30:f9:47:89:56:4e:b2:d8:68:30:
         ae:c8:a5:84:65:1b:d0:21:d1:8d:34:29:c4:1c:f1:1c:e3:81:
         a2:a1:53:f5:e1:b0:f8:b5:65:10:1a:0b:7e:93:71:79:90:49:
         ae:1e:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:20:58 2024 by rpki-client on console-ams.rpki-client.org