Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer
File:                     00423c2c-0dc2-4b33-b865-92ccbfdb07dd.cer (raw, json)
Hash identifier:          iCaWwo0nlcc6ThgCAy1REBROyKAu/ZyWtqOvfszSME8=
Subject key identifier:   F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285849DCC89FD059A9D08BB146B200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 May 2025 14:55:54 +0000
Certificate not after:    Wed 18 Aug 2027 14:55:54 +0000
Subordinate resources:    AS: 16527
                          IP: 69.166.64.0/19
                          IP: 96.8.128.0/17
                          IP: 162.211.68.0/22
                          IP: 162.245.200.0/22
                          IP: 216.177.160.0/19
                          IP: 2604:2900::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:c8:9f:d0:59:a9:d0:8b:b1:46:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: May 15 14:55:54 2025 GMT
            Not After : Aug 18 14:55:54 2027 GMT
        Subject: CN=00423c2c-0dc2-4b33-b865-92ccbfdb07dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:6a:5d:3f:3e:4e:b3:e3:25:55:40:85:92:
                    53:24:a6:b4:6b:2b:ff:b7:2d:b3:10:c1:c8:ef:16:
                    f9:45:a5:74:28:ac:36:d7:27:a8:a4:66:c8:bb:71:
                    4c:79:f1:b7:99:f5:1e:54:87:b3:27:7d:be:04:87:
                    01:78:64:72:6d:0e:af:46:ba:13:84:02:c3:85:00:
                    ab:c9:16:b4:41:3a:6e:97:7c:c8:34:6c:95:0c:04:
                    34:6c:ff:4e:0a:e4:1b:ba:3c:b9:55:6f:28:73:0a:
                    62:87:54:50:e8:97:3a:44:36:fe:66:6a:f5:3c:75:
                    d9:fd:18:61:43:31:a7:ef:c7:fd:ce:48:da:cc:9b:
                    6a:bb:1d:78:50:46:d7:d0:56:1c:a3:c6:a8:42:ec:
                    3c:f5:03:52:ef:5a:69:6b:58:7d:3c:c1:b7:86:5c:
                    99:a1:ab:74:7e:61:68:b6:66:cd:5b:59:8f:7f:8f:
                    11:32:85:88:41:4c:ae:4c:b6:0f:8c:c4:80:85:8d:
                    96:85:27:05:d4:c0:dd:2d:02:58:f1:e4:d0:83:b4:
                    7a:19:3b:11:83:5b:6b:61:e1:8c:b9:53:4b:90:e6:
                    05:b5:85:7d:91:4e:d5:4f:79:bd:e4:bf:7d:1b:86:
                    9a:1f:61:3c:1f:09:90:99:07:0b:a1:fd:6f:0c:ee:
                    77:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:69:D2:47:79:65:94:E1:58:B5:2D:72:D5:DA:AA:39:6C:97:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/00423c2c-0dc2-4b33-b865-92ccbfdb07dd/00423c2c-0dc2-4b33-b865-92ccbfdb07dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.64.0/19
                  96.8.128.0/17
                  162.211.68.0/22
                  162.245.200.0/22
                  216.177.160.0/19
                IPv6:
                  2604:2900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16527

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:58:b5:75:e5:86:32:a2:21:f1:e4:01:36:29:23:a5:82:28:
         f0:f4:91:3c:d8:ad:a5:4e:0a:11:bc:01:fa:de:26:0c:dd:22:
         d5:aa:33:c3:92:a4:de:84:e3:05:b1:ce:71:b9:b2:d5:33:d0:
         6a:5b:ac:49:4c:9b:d3:63:5b:74:72:3a:6c:71:a0:4a:7a:57:
         17:81:34:24:f5:64:97:8e:22:fa:3d:6a:e2:ed:fe:a7:02:73:
         80:e3:a8:5d:f6:1f:38:c4:1d:7e:d2:97:a3:ff:52:a9:16:f5:
         58:1e:b3:63:39:a6:49:7b:a7:4c:26:fc:b9:4f:21:64:28:12:
         cc:e0:3e:c4:a7:99:ea:89:62:7c:ea:f8:b9:03:5b:57:de:cb:
         44:10:35:b0:be:47:0f:09:6d:a7:16:aa:09:04:6b:d6:e4:e0:
         15:31:3d:e3:d6:5e:21:59:6f:a4:35:27:0b:64:ac:2f:2e:22:
         81:37:c9:92:07:ba:84:52:61:ac:46:a9:46:4a:40:cc:1e:10:
         c9:bc:57:69:aa:fa:1a:26:98:ab:fb:4b:72:59:da:8f:97:73:
         33:fe:97:fb:92:97:7c:07:74:ae:d6:2c:9c:6d:d4:70:01:2d:
         ef:37:89:2e:5e:ab:7b:f6:7c:b7:5b:a0:0d:7f:a4:2d:bf:93:
         b0:48:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:43:01 2025 by rpki-client