Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
File:                     0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer (raw, json)
Hash identifier:          4Q1e03Zb63IJb+gO4IeuZAI1mNySkrKBU1BKopbKhYg=
Subject key identifier:   8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority key identifier: 40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF
Certificate issuer:       /CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e
Certificate serial:       010D0C9F43285843806AD2B0167910AA42917B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 08:10:54 +0000
Certificate not after:    Mon 12 Jan 2026 09:10:54 +0000
Subordinate resources:    AS: 400850
                          IP: 66.205.246.0/24
                          IP: 2620:5f:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:80:6a:d2:b0:16:79:10:aa:42:91:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e
        Validity
            Not Before: Oct 10 08:10:54 2023 GMT
            Not After : Jan 12 09:10:54 2026 GMT
        Subject: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:7a:8d:e2:02:4d:b0:0b:d2:27:c4:88:e7:
                    f7:70:7e:98:6c:2a:6d:19:8d:1a:0f:1f:01:51:cb:
                    8c:f6:31:13:61:6d:d3:28:e7:f4:67:43:3e:2b:15:
                    07:75:0a:8f:f6:70:98:93:f9:a9:9f:79:ec:9b:91:
                    ca:c0:d2:55:04:07:19:84:ee:30:35:ed:fc:fe:d9:
                    59:5a:66:d3:90:e1:5a:5f:be:80:8d:48:21:90:e2:
                    09:01:fa:ec:33:7a:69:e0:9c:3c:e4:98:a5:d1:63:
                    28:7a:15:68:e1:54:75:09:da:bd:8e:8c:b9:38:15:
                    d5:af:b9:ed:d3:06:b8:f6:8a:87:51:d3:e3:46:b4:
                    b5:9a:88:5c:e6:ce:32:d7:b7:c8:49:eb:58:2e:a3:
                    42:35:7a:b9:43:57:70:38:29:f3:80:7f:db:86:9c:
                    38:f9:a7:5e:e2:b9:6f:5c:f8:6a:03:6e:05:46:7c:
                    ea:d5:08:17:20:7f:f6:a3:5a:2f:62:d0:fc:3f:67:
                    00:67:af:09:37:61:64:b2:77:46:c3:54:78:99:7f:
                    36:b8:33:18:41:fb:89:4c:bd:82:dd:64:e8:e9:b7:
                    5f:d0:40:d9:74:08:2f:8a:d0:54:af:db:73:c8:a3:
                    c0:7a:3d:b0:2c:5f:43:70:77:fb:65:bd:b3:45:7f:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl

            X509v3 Authority Key Identifier:
                keyid:40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24
                IPv6:
                  2620:5f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400850

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:23:5a:2a:4c:53:27:fd:1d:63:b4:b1:29:fb:72:ed:0a:80:
         77:c2:2e:6c:7f:6d:d4:7d:f2:0f:05:1d:9d:2b:53:73:fa:2a:
         0d:eb:01:7e:53:11:4e:aa:bf:98:f2:5a:83:9e:d9:ec:6a:2c:
         47:d7:e7:80:95:90:ff:8b:28:a5:aa:a4:a7:d0:c6:1d:03:34:
         7f:0c:6c:8c:21:74:08:5c:a2:4d:3d:32:b7:75:d6:2b:e6:21:
         39:85:a4:90:ad:73:77:1a:8a:14:8f:14:fb:97:1c:70:88:51:
         c5:d2:7f:f4:79:79:d2:12:07:ea:31:2c:43:6b:c9:3c:af:a6:
         46:91:f5:57:75:50:62:12:75:4d:58:bf:9e:83:8e:ab:65:9b:
         3a:17:c0:a9:f2:b0:7a:85:4c:1b:b6:84:9c:68:dc:94:bc:97:
         78:a1:34:56:3a:33:61:07:fc:f6:cd:a5:e7:f7:e9:1f:76:c7:
         ae:be:f5:44:b3:cf:ca:6b:1b:b3:51:34:45:e2:17:a6:f0:80:
         7d:ba:54:d6:c3:b6:83:67:2c:e2:b1:66:7e:1c:22:e8:cf:24:
         45:b3:40:06:fd:46:10:8b:2e:d4:a1:e7:13:f7:fe:5c:18:36:
         0b:cd:57:43:ed:0a:e5:4c:59:64:07:89:ad:fb:9d:1e:04:be:
         5c:22:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org