Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168.cer
File:                     9ababe4f-43a3-4db9-8e35-b85a7e592168.cer (raw, json)
Hash identifier:          pn+v3jmJGkkZ647F/vm+acPL+EEofe+p9Wm+WDZYbpA=
Subject key identifier:   23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858432046B042B8AF91174F9C0858
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Sep 2023 21:40:30 +0000
Certificate not after:    Mon 08 Dec 2025 22:40:30 +0000
Subordinate resources:    AS: 398496
                          IP: 23.134.176.0/24
                          IP: 45.41.208.0/23
                          IP: 66.248.247.0/24
                          IP: 2602:fddd::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:20:46:b0:42:b8:af:91:17:4f:9c:08:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep  5 21:40:30 2023 GMT
            Not After : Dec  8 22:40:30 2025 GMT
        Subject: CN=9ababe4f-43a3-4db9-8e35-b85a7e592168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:58:79:34:07:b5:58:69:83:bc:9d:7e:4f:
                    c2:53:cb:b7:8a:85:6c:c4:c0:92:de:ad:55:09:0b:
                    78:cd:63:67:ae:c0:72:52:3a:da:f0:4c:1f:e5:f2:
                    cb:4f:34:d9:78:fd:fd:f8:c3:b4:38:9a:44:b8:33:
                    1a:10:a4:5c:a4:f9:2f:55:28:9f:1b:8c:20:53:09:
                    77:c2:62:99:02:c7:ca:25:b2:e2:72:51:db:96:ab:
                    b6:cb:d1:43:bb:87:cd:64:30:2c:44:89:12:e7:0f:
                    79:57:aa:2e:2f:61:eb:3a:10:69:56:d1:37:4f:16:
                    80:88:b9:2f:83:f0:fe:0d:87:74:f9:15:90:dc:3d:
                    7a:2f:d7:e1:f7:81:ca:1e:25:3c:da:0b:2d:11:e7:
                    52:e2:86:85:33:6f:84:c4:33:c8:51:1e:57:d5:fc:
                    09:8e:25:8a:32:01:70:47:b1:ee:87:72:ce:00:99:
                    6f:f0:66:d2:00:2c:31:0c:c2:1e:51:a9:cc:1e:71:
                    ec:db:b5:76:a7:b3:0f:37:dc:20:3e:e1:60:9f:ec:
                    52:d5:bb:f9:ef:20:7a:74:71:35:d8:1b:8c:67:65:
                    7e:e0:5c:eb:1a:cd:ad:fd:9c:60:28:fe:1d:11:71:
                    0a:89:85:08:a8:37:9f:1e:52:52:d0:92:3d:a2:be:
                    7c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:2D:51:36:B3:25:5E:9F:20:37:D6:36:11:40:2A:4A:0F:E4:A1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ababe4f-43a3-4db9-8e35-b85a7e592168/9ababe4f-43a3-4db9-8e35-b85a7e592168.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.176.0/24
                  45.41.208.0/23
                  66.248.247.0/24
                IPv6:
                  2602:fddd::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398496

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:61:b2:35:c3:10:bc:59:59:25:1e:00:9b:4e:3d:47:6b:
         98:db:4f:c7:f4:9b:1c:76:1f:1d:d3:09:9c:a7:e7:3d:97:79:
         c2:67:7b:25:57:c3:74:cb:fa:f7:ff:e7:a1:e9:58:b4:14:cb:
         b6:ed:8d:58:60:e3:46:cf:20:b7:9b:b2:21:42:f3:62:ac:82:
         f8:de:b1:5c:1d:ef:23:85:13:f3:9c:cd:d3:a9:f2:eb:32:f0:
         63:12:df:7f:e3:36:cd:e5:93:a1:27:69:fb:22:ba:0e:ca:89:
         96:c9:37:63:75:42:f7:ca:44:a1:a4:0d:aa:b2:35:fe:2b:77:
         f4:b6:16:65:ca:4d:09:61:6c:3c:8f:a3:0f:8d:2b:5b:2c:ea:
         22:4d:44:1a:b4:33:74:49:78:f7:6c:dd:05:35:b7:8b:6e:ed:
         12:fa:7e:35:f0:1c:0a:a7:6b:7b:94:fe:59:10:09:3f:91:9a:
         af:1a:0b:33:9e:2e:d8:9b:b5:25:47:02:1d:e0:1f:5a:92:bb:
         ec:a3:14:ca:28:9d:78:78:b4:0f:1d:3f:20:87:10:07:38:3b:
         a5:76:85:90:73:3a:06:81:38:50:5d:7f:83:7a:bc:f7:db:fc:
         3d:0c:6a:ad:b4:37:8d:54:64:ea:d3:9d:b7:a5:d9:3e:6e:2e:
         d1:7c:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:26 2024 by rpki-client on console-fra.rpki-client.org