Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
File:                     a90f006a-b108-4757-9dfd-b36376534658.cer (raw, json)
Hash identifier:          l3RH1QSo8983dGcoo/ycSt3llUXizB5YPUIFE8KTjzA=
Subject key identifier:   56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584499A28E72999FE71F360A0F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 01:45:20 +0000
Certificate not after:    Thu 23 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 32288
                          IP: 45.43.0.0/19
                          IP: 66.11.112.0/20
                          IP: 104.192.100.0/22
                          IP: 104.255.224.0/21
                          IP: 162.253.64.0/22
                          IP: 2605:fb80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:a2:8e:72:99:9f:e7:1f:36:0a:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 19 01:45:20 2024 GMT
            Not After : Apr 23 00:45:20 2026 GMT
        Subject: CN=a90f006a-b108-4757-9dfd-b36376534658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:5b:03:ae:7b:52:7f:d6:7a:6f:8d:cf:a7:
                    42:08:15:4f:26:a5:09:5b:2f:6a:c8:e5:67:0a:3a:
                    cc:10:ad:e5:46:9d:50:f8:6a:b1:05:8e:4c:14:48:
                    46:bd:4d:43:55:18:36:19:6b:96:8b:5b:fa:9e:a7:
                    56:cf:3f:e5:58:31:55:e4:89:1e:a8:c8:57:b2:4c:
                    05:51:0e:5f:86:6d:42:b2:65:5c:98:aa:a3:e7:cd:
                    c3:21:2e:7e:b7:c7:e5:04:13:74:20:40:d5:b9:26:
                    58:3c:06:84:48:71:d6:7b:34:1c:0d:54:12:3a:ea:
                    dc:0a:93:16:70:62:06:5f:1a:9a:3b:1d:26:a4:57:
                    ec:7d:54:0f:7f:f0:c4:b1:71:5b:6d:24:d3:c7:36:
                    4c:c3:45:fc:80:17:7e:ad:95:87:bd:d3:dd:e2:5e:
                    d8:21:50:39:41:ef:ba:01:59:06:a8:21:38:83:31:
                    05:bd:9b:6e:7e:fd:e1:52:05:be:39:83:dd:38:9d:
                    f6:46:85:13:99:b5:28:5f:4c:de:f7:b6:2e:00:f2:
                    81:42:f7:4b:c3:79:53:38:75:b0:68:00:3d:d4:60:
                    7f:9d:24:5e:5d:b9:55:df:4c:ee:2d:33:db:57:00:
                    e4:af:24:9f:05:4d:5d:bd:01:c5:a1:49:30:06:6e:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.0.0/19
                  66.11.112.0/20
                  104.192.100.0/22
                  104.255.224.0/21
                  162.253.64.0/22
                IPv6:
                  2605:fb80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32288

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:43:8b:86:8a:95:e7:a9:22:53:f2:bc:c5:8d:6a:96:fc:
         71:9c:7f:dc:ca:11:f3:5f:7a:d3:e9:0b:c4:3b:91:a2:85:db:
         4d:dc:ee:b9:3b:71:e9:30:18:5c:ea:0c:de:29:87:34:f2:6c:
         c0:c4:5e:f4:21:3a:c1:88:ba:ce:44:6f:0f:d7:35:f6:d0:7a:
         1a:13:79:ea:d1:52:34:1a:13:63:1a:a3:63:14:4b:9c:d6:bd:
         3f:b0:e1:f5:bf:a3:aa:17:f9:e5:3e:2d:00:c1:2a:05:df:00:
         4e:0e:6d:94:07:bd:6c:2c:72:1f:4c:41:ac:71:72:08:b2:c3:
         2f:a8:83:99:fd:36:67:d2:3a:e8:0b:20:cf:ae:a7:02:c5:5c:
         8e:f4:3c:82:51:8c:ba:03:46:9a:a5:00:bf:14:72:0a:4f:4c:
         b9:48:dd:49:27:7c:c8:af:de:60:3d:67:c6:55:b9:78:d4:c5:
         5f:cd:be:37:24:7b:32:35:2c:3f:05:f9:22:b3:3b:d2:c9:65:
         a1:fe:4d:a8:da:c5:d5:36:a0:e7:8b:dc:78:f5:80:64:62:55:
         56:bf:71:60:1a:b1:c8:b3:48:c2:27:66:a9:ee:82:40:60:65:
         70:9d:09:ee:b0:42:f2:e4:10:9b:12:06:11:fc:36:7a:79:32:
         9c:aa:7c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:26:35 2024 by rpki-client on console-ams.rpki-client.org