Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer
File:                     ac717083-6970-4d32-8573-0bfa89700c9e.cer (raw, json)
Hash identifier:          zKEV0F7a0E/hcomLq2XFb+af+vMwANusq6iZdmZc+a4=
Subject key identifier:   20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584371463F28D766CC6537975E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 22:00:05 +0000
Certificate not after:    Tue 06 Jan 2026 23:00:05 +0000
Subordinate resources:    AS: 802
                          IP: 130.63.0.0/16
                          IP: 192.75.18.0/24
                          IP: 198.96.32.0/21
                          IP: 199.212.64.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:71:46:3f:28:d7:66:cc:65:37:97:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  4 22:00:05 2023 GMT
            Not After : Jan  6 23:00:05 2026 GMT
        Subject: CN=ac717083-6970-4d32-8573-0bfa89700c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:7c:c4:e4:fa:18:52:81:50:26:7c:5b:67:
                    cb:c2:69:79:41:08:10:98:3d:66:b1:0f:53:a6:39:
                    66:a6:2f:d2:cf:ff:07:1c:cf:00:70:62:ae:db:1a:
                    4f:20:0f:74:7e:ff:7c:07:8a:15:64:42:3a:9b:d1:
                    ab:06:f9:05:4c:1c:f7:14:74:bf:b8:79:d7:9a:07:
                    cd:84:94:f9:f2:04:3e:52:1a:cc:4a:34:5e:d4:e8:
                    96:c8:58:c9:ec:13:be:20:eb:83:13:e3:dc:82:36:
                    a9:3b:5e:c5:0e:cb:f2:e1:d5:ed:84:d2:3a:2a:df:
                    28:48:eb:bc:3f:76:96:64:8b:89:8e:92:05:e3:58:
                    d3:8b:05:fd:fa:20:2b:74:a1:ad:a9:64:9f:55:26:
                    8e:13:d5:ae:e1:ab:e9:7b:9c:6f:45:75:59:72:51:
                    cb:68:6b:53:b6:cc:8b:47:a3:80:13:e1:63:bf:99:
                    1a:e8:aa:07:99:9d:60:54:a0:1e:b9:19:43:64:67:
                    f7:dd:56:f6:8b:c5:f0:80:8a:72:23:0f:8c:e1:78:
                    27:14:5d:73:3e:de:f3:91:9f:be:e6:a9:3c:cb:e3:
                    36:3a:b0:b0:88:f4:0d:83:07:72:5c:6a:01:ab:4c:
                    ac:01:19:75:99:88:00:4f:0c:67:cd:ef:b6:5c:f9:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.63.0.0/16
                  192.75.18.0/24
                  198.96.32.0/21
                  199.212.64.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  802

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:85:b4:4b:31:fb:22:0d:fb:51:0e:e4:cd:a0:e2:35:4a:11:
         8e:95:8f:65:d0:8c:7e:d0:05:fa:f2:28:4e:48:a8:44:8d:4e:
         e9:05:9c:9d:00:5b:19:69:aa:f5:be:fd:86:cc:5d:ca:6f:19:
         12:f9:a0:32:89:a6:86:70:f1:9d:59:a6:19:2a:60:1d:68:37:
         49:5d:58:84:4d:96:3b:20:96:fe:97:69:b2:60:48:75:6d:d1:
         67:94:6f:77:78:d6:67:a8:92:3b:0a:ec:1d:4f:a1:33:0b:c2:
         6f:4d:b0:39:8b:27:57:6e:5e:1d:90:79:2e:4b:f3:ff:e0:a4:
         92:19:1d:10:1f:8b:30:45:71:ab:e7:59:e0:49:97:a5:ec:6a:
         2a:ca:f8:e5:b6:f3:7e:dc:3d:3c:32:37:1f:c1:35:d9:13:5d:
         38:6e:4c:c8:0c:a5:8e:1d:94:0f:86:26:d7:9a:78:1c:05:bc:
         8e:9f:1a:ce:9b:64:38:d2:ec:2e:13:38:69:03:c4:b3:61:22:
         46:ff:f4:34:0e:47:77:d6:d2:37:c1:bf:82:8f:65:8f:74:99:
         28:1d:2b:fd:1d:b7:2f:a1:e0:52:33:83:0d:d7:0a:53:dc:ab:
         56:90:c6:2d:ff:e5:56:02:4b:bb:bf:b2:18:a6:d6:b7:d7:e1:
         9d:27:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:55:51 2024 by rpki-client on console-ams.rpki-client.org