Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
File:                     b1b35dc3-b096-40ba-8edf-87e481b625c4.cer (raw, json)
Hash identifier:          lCK7ODn5uz6RKiOkPr0CBlbRqz2IXcRzXQEpO+nqnw4=
Subject key identifier:   2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584420E2EF0BE7D370F60C5AFCB0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Dec 2023 19:42:15 +0000
Certificate not after:    Tue 10 Mar 2026 18:42:15 +0000
Subordinate resources:    AS: 393559

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:20:e2:ef:0b:e7:d3:70:f6:0c:5a:fc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Dec  6 19:42:15 2023 GMT
            Not After : Mar 10 18:42:15 2026 GMT
        Subject: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:6a:25:44:27:97:02:ea:4c:cc:b7:ef:aa:
                    4c:97:f7:38:a1:6e:10:81:50:3c:1f:f3:63:8e:00:
                    e1:58:3f:cb:8a:f9:f2:f6:98:45:84:97:e1:76:bb:
                    77:21:41:cc:17:b0:fc:a4:08:9d:53:70:b7:35:d8:
                    7f:2b:84:59:57:1b:b2:78:73:0b:10:cb:9f:c5:b0:
                    24:28:c2:42:a7:d9:cb:82:74:4a:6a:fc:93:ec:75:
                    c2:2f:d0:46:99:5f:5c:39:f1:61:6e:f5:d5:9c:34:
                    a6:a9:90:3d:ca:6c:d3:6c:84:bc:7a:33:ac:62:c6:
                    13:c4:43:ef:cc:4f:1e:e4:8c:bc:9d:ba:ca:33:4b:
                    96:19:dc:a7:d4:44:e5:2d:8d:22:02:3e:af:94:ca:
                    41:53:89:e6:80:0b:eb:1c:76:44:ea:8d:00:c4:42:
                    81:e2:f3:73:97:20:d4:5b:8d:db:97:cd:5e:47:c7:
                    64:83:dd:17:90:4f:bb:04:e3:8c:05:90:8e:62:15:
                    06:bd:f2:d5:7e:be:53:f2:5d:53:22:a9:2a:5e:dc:
                    e6:5f:11:2c:c6:08:02:b9:14:66:ca:fd:f7:f3:f0:
                    c0:b6:2b:c1:7a:01:c9:02:b4:7e:49:f9:a8:e3:70:
                    79:cb:86:8d:9d:ab:6c:31:51:ae:11:6f:c9:0a:2c:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393559

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:67:23:e9:21:59:91:87:e0:0d:c8:a0:94:40:10:8b:07:81:
         38:c1:f3:f5:08:62:61:18:84:e6:58:a2:50:7c:eb:03:9e:2a:
         d6:f8:14:00:4e:44:4a:b5:38:b3:cd:d1:a1:b4:05:bd:98:67:
         b9:20:1f:ee:de:91:7a:9d:8e:9e:0f:72:8e:5d:91:0f:17:ec:
         f2:f4:b5:cc:c4:08:a5:8e:53:ad:72:48:91:99:29:ab:d2:51:
         55:2a:8e:a1:d9:a9:5c:5f:f7:81:2e:90:3b:c0:25:36:c7:04:
         66:cb:03:93:ba:53:4b:28:f9:3a:e8:98:3a:12:03:99:c8:b0:
         49:8c:76:07:4d:50:ee:0d:68:3c:38:62:d5:13:04:b8:3a:6d:
         c4:58:0e:8e:20:35:8a:dc:97:03:bc:70:4e:6e:a7:29:1a:cb:
         83:db:e8:a4:f1:35:e8:a8:54:e0:28:9a:03:63:26:47:f3:1a:
         8a:22:06:36:4a:c7:33:00:e3:93:19:54:89:0e:a8:ec:ff:f9:
         b9:38:6a:cf:ab:10:43:c9:80:0f:57:9e:6b:97:5e:2a:0d:54:
         c8:67:97:03:4b:bf:e3:0d:ec:fc:92:e0:90:f9:12:14:45:48:
         37:07:2f:33:3f:6a:f7:56:94:63:2e:1d:47:2f:92:0f:c2:61:
         e9:0e:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:36:00 2024 by rpki-client on console-fra.rpki-client.org