Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
File:                     17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer (raw, json)
Hash identifier:          +YjgYskX7ELmGgDGkoyK2o6j3pU4dJNAk6oi3mBONpw=
Subject key identifier:   5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority key identifier: C3:CB:4C:99:9F:32:B0:68:0C:FC:2B:6A:38:AB:6C:9F:81:06:A2:FB
Certificate issuer:       /CN=4aae8282-1cad-4073-9d4a-e9484014919e
Certificate serial:       010D0C9F43285843E246253CF73FA6B84AE734C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 14 Nov 2023 09:26:13 +0000
Certificate not after:    Mon 16 Feb 2026 09:26:13 +0000
Subordinate resources:    IP: 205.233.155.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e2:46:25:3c:f7:3f:a6:b8:4a:e7:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aae8282-1cad-4073-9d4a-e9484014919e
        Validity
            Not Before: Nov 14 09:26:13 2023 GMT
            Not After : Feb 16 09:26:13 2026 GMT
        Subject: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:4a:21:95:7c:c4:60:e9:83:a6:c9:6b:9e:
                    de:68:7b:7e:50:48:12:69:f8:0e:f6:1e:fc:7d:29:
                    4f:b9:b2:cc:d7:c5:78:9a:dd:7c:5d:5c:22:98:9f:
                    fc:7e:d3:10:1f:77:b8:53:0e:ba:d6:f9:bc:a4:4b:
                    22:e5:62:21:e5:e9:81:0a:3b:a3:f4:9c:1c:25:de:
                    08:72:b4:72:4c:4b:20:c2:00:fc:3a:df:e9:62:83:
                    97:e3:b7:f4:b8:bf:b9:4d:68:e1:3d:f6:0d:51:b7:
                    51:55:3f:cb:ca:50:90:96:ef:8f:a3:79:8d:ac:9b:
                    6e:90:89:55:dd:f8:5a:ad:ee:0d:4f:2b:40:99:51:
                    69:be:d8:c5:fb:02:32:60:e7:e1:4d:d9:b3:40:9c:
                    63:43:ad:a9:7c:38:0c:0a:b9:56:e6:4a:1e:3c:04:
                    ab:cf:b1:28:69:15:bd:4b:e7:85:a8:c4:99:b0:d2:
                    56:d2:e1:c6:20:88:c6:2d:51:eb:23:cb:1f:1d:e3:
                    01:03:08:92:d7:3f:90:18:10:32:10:0b:b4:bf:27:
                    a9:a1:2c:bb:cc:80:79:ea:e6:4a:25:a3:c3:d3:20:
                    b9:38:d5:55:0a:11:39:01:96:23:59:84:21:21:8c:
                    0f:da:31:8d:eb:d5:7a:7d:f9:c9:52:55:59:d0:5e:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl

            X509v3 Authority Key Identifier:
                keyid:C3:CB:4C:99:9F:32:B0:68:0C:FC:2B:6A:38:AB:6C:9F:81:06:A2:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:29:3d:33:33:86:33:51:8e:a0:01:f1:f3:22:96:4e:be:
         f7:a9:bc:fc:ea:4c:37:17:56:6c:d3:12:1c:93:26:5a:3a:7a:
         61:55:1c:59:cb:99:00:15:4a:c2:9e:af:ae:22:92:3c:bd:5a:
         84:02:d8:38:21:56:16:3b:ac:30:b5:82:da:41:d4:7d:a4:1f:
         34:7a:79:e3:d8:08:60:91:e2:a1:8a:db:ee:bf:9f:14:15:88:
         43:5a:98:77:5c:bd:38:f1:fb:ff:02:2e:0b:c2:48:2f:63:f9:
         79:80:16:15:2b:36:17:a2:2d:52:03:f5:66:42:52:b7:b1:c6:
         d3:05:2d:84:10:f9:76:d7:3b:b7:b6:7f:9e:9e:0a:a1:75:dd:
         90:e8:33:54:35:a6:a7:13:34:57:fe:f3:4f:54:38:1d:2d:ff:
         ad:d1:cb:14:69:13:af:36:ad:4a:cc:94:24:dd:c4:44:dd:8d:
         8f:72:35:8e:fa:ee:68:06:86:3d:d4:be:11:8d:3a:f5:96:84:
         64:c1:62:97:54:4c:96:39:db:6c:c9:67:36:93:2a:ee:91:61:
         c9:ff:ee:50:98:64:7b:96:be:f7:ef:ed:ee:0b:c2:e4:1c:3c:
         02:ce:49:2e:70:53:3c:98:9f:57:be:b9:2e:11:97:e2:e9:20:
         88:74:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:11 2024 by rpki-client on console-ams.rpki-client.org