Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b84b358-e8cf-4543-a6a4-d71699492808.cer
File:                     1b84b358-e8cf-4543-a6a4-d71699492808.cer (raw, json)
Hash identifier:          I3kK1GVBqohU42nq/smWeprbJBTeYMSAPWwY7jjcDZE=
Subject key identifier:   EB:34:D4:60:4A:20:B6:23:77:BE:3B:89:EA:0F:D0:43:1D:F6:A8:9F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285844744307CBC7EE21A6A354C140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b84b358-e8cf-4543-a6a4-d71699492808/1b84b358-e8cf-4543-a6a4-d71699492808.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b84b358-e8cf-4543-a6a4-d71699492808/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 16:27:58 +0000
Certificate not after:    Thu 09 Apr 2026 15:27:58 +0000
Subordinate resources:    AS: 36051

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:74:43:07:cb:c7:ee:21:a6:a3:54:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 16:27:58 2024 GMT
            Not After : Apr  9 15:27:58 2026 GMT
        Subject: CN=1b84b358-e8cf-4543-a6a4-d71699492808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:89:e3:5a:0f:a0:c7:7d:02:64:b0:cb:12:
                    87:31:08:7b:52:37:ce:d8:81:9f:35:4b:70:9f:cb:
                    bd:2d:d3:31:fd:7b:29:5f:57:a6:48:d7:3e:c8:c8:
                    46:94:4e:40:0b:94:ac:83:8e:5d:7d:fe:87:db:ea:
                    84:63:18:34:0f:04:1a:ee:d6:1b:21:23:18:c8:f8:
                    ee:10:4b:3e:4a:4f:d3:88:5c:7e:06:4b:5d:ca:b2:
                    f1:43:ee:89:b5:cf:ba:4b:3e:d1:ab:01:51:e0:eb:
                    bf:23:8d:47:bb:b9:87:f4:3d:cf:57:57:49:2e:e2:
                    3e:43:1f:5f:80:39:34:aa:bc:50:62:40:23:64:0d:
                    24:0a:c1:59:c7:ec:fe:25:b7:7d:d9:1d:e3:86:61:
                    23:61:74:b3:56:91:04:14:60:e9:fb:10:0f:76:88:
                    3b:fd:03:82:e3:bc:d9:b9:ac:b3:50:b8:55:c9:c6:
                    1f:ce:56:fc:97:0d:12:d6:20:8d:34:dd:d2:c4:3e:
                    49:1c:63:06:2b:44:28:4a:60:82:85:0a:22:46:64:
                    7e:7a:a4:ac:1e:0d:4e:3e:dc:4a:9d:21:e4:4f:56:
                    2f:16:9c:2b:0c:e7:ef:d4:fd:03:0f:e6:2b:cd:0c:
                    cc:e1:bf:b0:31:38:c7:66:43:ee:c3:2d:b9:4f:07:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:34:D4:60:4A:20:B6:23:77:BE:3B:89:EA:0F:D0:43:1D:F6:A8:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b84b358-e8cf-4543-a6a4-d71699492808/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b84b358-e8cf-4543-a6a4-d71699492808/1b84b358-e8cf-4543-a6a4-d71699492808.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36051

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3a:24:2f:ba:73:26:d2:47:65:f3:80:08:c1:89:8a:91:e3:
         8d:b2:db:a9:37:cf:4f:76:f0:68:15:33:82:03:e2:cd:96:fd:
         a8:ea:3d:e0:89:88:60:72:3c:ee:7d:2e:0f:dc:b3:60:1e:9a:
         3b:3f:93:7d:34:50:2f:94:3f:1a:8a:e5:d3:77:83:a2:ba:d7:
         ce:79:97:8c:da:34:26:9a:53:c3:d1:42:8d:37:f8:5b:c2:57:
         a7:3a:66:47:0d:09:21:8a:91:52:b7:1c:6f:a7:4d:f0:ef:94:
         e3:e0:f8:d9:ae:2d:12:3b:a5:af:72:d4:50:e8:b5:8a:32:71:
         55:37:90:5e:44:67:bc:95:f7:d0:a3:83:9d:5d:e1:0d:85:33:
         89:b7:a2:fd:71:5b:bc:90:87:26:5a:ec:d2:3a:29:d7:1e:40:
         99:26:63:79:bf:c8:d1:05:43:5f:e3:6e:ac:01:af:16:5b:82:
         06:c9:20:60:63:c0:49:48:c7:d7:6b:6b:5f:67:0a:8b:00:6b:
         13:af:1b:9b:91:92:7d:60:5a:11:a0:9c:37:d4:df:81:a4:26:
         c9:23:58:07:3c:a4:1d:c6:de:ab:d7:e2:60:f2:2a:23:cd:a1:
         f6:ef:83:1e:0c:16:e7:89:50:f2:b4:40:40:56:40:de:27:e9:
         be:36:7b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:36 2024 by rpki-client on console-fra.rpki-client.org