Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
File:                     9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer (raw, json)
Hash identifier:          7QvXY/NA536npO/TBz9f2ySVSRchgnXrG+GQXyu4Vnc=
Subject key identifier:   DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority key identifier: 70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38
Certificate issuer:       /CN=081bd66e-b1d1-405a-8a32-c830ec790ce5
Certificate serial:       010D0C9F43285843D40499517230730AB829AB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 09 Nov 2023 06:52:50 +0000
Certificate not after:    Wed 11 Feb 2026 06:52:50 +0000
Subordinate resources:    AS: 23133
                          IP: 204.14.72.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d4:04:99:51:72:30:73:0a:b8:29:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081bd66e-b1d1-405a-8a32-c830ec790ce5
        Validity
            Not Before: Nov  9 06:52:50 2023 GMT
            Not After : Feb 11 06:52:50 2026 GMT
        Subject: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:b1:53:1c:97:e6:74:6a:8a:fa:1b:6f:fd:
                    a0:43:07:06:f7:15:8c:ef:87:44:02:51:94:27:33:
                    7b:a1:4c:5c:7b:7d:7f:22:8f:ca:0b:80:b9:18:35:
                    9a:94:ea:f8:85:65:53:de:d9:cb:70:57:39:ee:b3:
                    98:05:8a:be:5d:e0:96:5a:a9:8c:c3:40:cc:2d:4b:
                    62:aa:ac:82:7d:67:9e:56:6a:f3:ce:70:07:6c:cd:
                    d9:72:08:36:3a:b1:6c:f1:74:e2:f9:98:72:ab:a2:
                    06:a7:46:4f:72:41:9f:48:28:82:d8:41:70:52:ff:
                    05:00:ba:17:6d:c5:e2:b0:61:99:0c:e5:df:bf:8f:
                    6a:a3:b4:55:31:cc:5c:70:f1:84:46:65:fa:59:12:
                    2b:c8:7d:9e:eb:2c:d7:fc:dc:b6:b3:de:29:51:7e:
                    8c:d1:58:99:41:b8:a5:c9:12:81:02:a4:97:b6:cf:
                    23:f3:36:7a:c2:a7:47:f8:3f:0f:cc:45:f2:e7:c3:
                    4e:c4:57:e1:25:c2:23:1a:a1:7b:76:d9:3e:72:03:
                    30:d6:4d:e3:ef:9e:de:f6:ba:3d:1a:61:19:dc:55:
                    6a:c9:e8:bc:c1:4f:0f:d9:98:95:ba:df:39:0a:cc:
                    4b:d7:b2:e4:b0:16:57:6e:f9:6a:e9:c0:13:ef:31:
                    7f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl

            X509v3 Authority Key Identifier:
                keyid:70:CF:5A:23:55:0C:F1:AE:CF:C3:33:A8:DF:37:04:B3:CF:0D:FE:38

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23133

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:30:1f:10:3b:55:b8:b7:76:ce:ff:86:37:87:1b:1a:6b:
         68:e8:71:0e:e5:1d:cc:38:f7:32:05:ac:81:d0:7b:4b:f4:da:
         f8:ae:70:60:a4:28:42:ea:90:b3:62:bc:82:90:79:7d:77:34:
         73:00:d3:01:f1:78:e3:c7:fb:5d:15:d2:bc:4a:7f:aa:82:50:
         64:c3:0c:f8:8c:7b:12:c1:e8:3e:c1:40:a0:e1:e1:50:27:28:
         68:a6:b6:f6:cc:6e:3b:37:25:28:f5:e8:66:71:f4:28:20:6f:
         b7:bd:23:d0:ed:12:44:97:77:7f:ce:a0:5c:fb:bf:09:80:42:
         24:41:e4:10:26:77:53:6f:ac:94:40:e7:73:5e:d9:d1:14:bc:
         83:11:d8:27:17:64:8d:fb:0f:ca:bd:ff:74:3b:e5:60:9d:7b:
         12:54:45:0f:03:2f:11:1a:5e:c0:15:16:b3:69:7a:c6:a1:2f:
         fb:b7:7c:33:89:20:bb:66:c2:98:02:f9:58:68:e9:48:bd:90:
         20:fa:bc:b9:37:75:e5:0f:71:74:9a:bf:a8:dc:50:00:a5:ab:
         7e:62:d6:3f:a5:49:31:50:de:78:d6:97:39:17:9d:47:70:0c:
         16:ea:bc:b5:ec:31:48:70:1e:15:65:93:c1:ca:d8:13:ef:b7:
         2d:a6:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:48 2024 by rpki-client on console-fra.rpki-client.org