Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
File:                     994eeb97-12ef-4721-824f-9ba41ba67983.cer (raw, json)
Hash identifier:          qbP66llm0QfxkP05ftILDDwj6vOMuuU55R1DmeC4uu8=
Subject key identifier:   1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285845432FA6157BA81A4FDA7A8080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Mar 2024 19:21:14 +0000
Certificate not after:    Tue 27 Jan 2026 20:23:59 +0000
Subordinate resources:    AS: 23539
                          IP: 23.138.176.0/24
                          IP: 147.185.188.0/24
                          IP: 209.163.114.0/24
                          IP: 2605:4f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:2f:a6:15:7b:a8:1a:4f:da:7a:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 19 19:21:14 2024 GMT
            Not After : Jan 27 20:23:59 2026 GMT
        Subject: CN=994eeb97-12ef-4721-824f-9ba41ba67983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:77:72:eb:10:4d:6b:6c:93:bd:58:a5:14:
                    e3:62:ac:a4:55:aa:df:86:4a:fb:f4:d8:4f:27:e1:
                    d6:7f:52:8b:f5:f0:90:aa:fd:b0:55:05:c1:52:ad:
                    7a:49:ce:c3:2f:95:0c:22:93:9f:ac:3d:4c:18:8e:
                    a3:a7:27:b5:c2:73:3e:08:a7:28:2a:17:b7:13:35:
                    cb:54:47:ed:b4:f3:26:99:a4:89:2c:53:aa:b2:c2:
                    f9:75:cc:f8:a2:bc:8b:f0:eb:64:df:93:d8:be:e7:
                    d9:c9:ae:1c:16:f2:a7:e5:67:53:29:d7:09:67:e1:
                    79:9c:88:d6:3d:45:cd:56:25:07:dc:03:4d:59:79:
                    35:00:6f:74:ed:a3:4c:c8:f8:6d:c4:c2:36:5f:26:
                    88:42:30:1b:fe:52:96:58:94:c4:e1:12:ec:c6:7c:
                    3d:47:fe:11:21:ce:77:37:db:a8:52:68:b6:60:61:
                    b5:0b:d4:48:c4:40:75:18:ea:37:88:5a:14:99:1d:
                    52:3b:5d:3c:cc:a5:56:fb:f3:7d:ff:46:ea:4e:16:
                    66:1c:96:c0:de:33:e8:1c:49:0a:22:2d:10:38:1e:
                    e1:41:10:a4:35:d4:e9:ee:91:6f:d0:a7:6d:e6:b3:
                    ce:db:f9:a7:fa:77:88:0b:da:c3:e8:ce:ce:84:2d:
                    a1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.176.0/24
                  147.185.188.0/24
                  209.163.114.0/24
                IPv6:
                  2605:4f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23539

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:71:ec:93:e7:86:17:04:9c:7d:48:a4:4b:57:10:09:fb:49:
         70:43:7b:2e:82:3d:e8:27:50:b9:31:80:e8:d6:4f:00:68:85:
         68:bc:33:b1:f7:8b:f3:0d:0e:83:25:86:b1:37:e0:43:a2:8f:
         e1:09:f4:a4:c5:e7:1d:eb:6d:0a:07:fb:a0:c7:0b:ee:1c:9d:
         b1:8b:13:74:2d:2b:31:63:57:68:0f:ab:be:6e:77:ba:c8:f1:
         b3:af:0a:ae:f3:94:f6:14:be:40:32:90:df:d4:57:69:c2:bd:
         b9:af:fb:83:9d:3c:f5:7e:04:3f:ef:86:6c:0b:08:16:2b:6d:
         d9:d5:3b:68:e9:61:e2:14:d9:e8:7f:fa:08:41:6e:1c:ef:b7:
         cc:fb:b6:0f:db:a2:23:09:bd:de:ac:77:f4:76:8a:bf:ea:54:
         3f:72:a3:f5:37:2e:80:72:d2:fa:91:8e:a3:ec:5a:4d:69:54:
         b2:2f:be:45:db:be:c5:4d:03:60:b1:e7:91:e0:6c:a3:87:21:
         23:f2:db:78:ff:c9:2f:3b:88:02:0c:4f:13:ca:c6:e5:1c:aa:
         6d:e2:51:aa:82:be:37:c1:ba:a7:f0:4a:1a:27:82:3e:cb:5e:
         ab:b7:94:19:00:f8:30:b5:5e:d9:e6:15:60:64:df:4d:a7:cb:
         88:31:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org