Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
File:                     c3fb3897-fd14-48ee-ad84-812c408cf46e.cer (raw, json)
Hash identifier:          ON85fiFCnA/99ykAnA9t04YQuhhOpMrBHN0l8LWiZ9M=
Subject key identifier:   81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440CB5AFA55A2DB9BDA2AE5E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 14:14:55 +0000
Certificate not after:    Tue 03 Mar 2026 14:14:55 +0000
Subordinate resources:    AS: 399494
                          IP: 155.254.196.0/22
                          IP: 165.140.44.0/22
                          IP: 170.205.48.0/22
                          IP: 2604:3b40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0c:b5:af:a5:5a:2d:b9:bd:a2:ae:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 29 14:14:55 2023 GMT
            Not After : Mar  3 14:14:55 2026 GMT
        Subject: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:89:c7:b2:aa:4c:fb:1d:35:87:4f:8b:69:48:
                    42:16:0f:a7:21:15:d2:52:36:5a:89:96:cd:0c:1f:
                    6a:8b:b4:d9:af:13:7a:29:99:a0:95:7b:2e:bd:6c:
                    ce:4f:f0:b8:c5:56:91:38:6a:7a:81:07:d6:6d:55:
                    92:63:0a:b9:d1:36:70:d2:45:c2:b7:ff:57:4c:13:
                    b7:a2:77:a7:4c:93:08:5a:68:a2:cc:5d:c6:74:db:
                    4d:1c:05:5c:49:63:66:e2:1b:58:dc:02:b1:59:95:
                    0d:48:ca:35:3c:ef:77:04:42:73:1c:4f:29:12:32:
                    53:1a:49:2f:81:78:c5:8e:a9:b0:13:63:fc:d0:fc:
                    74:dd:6e:5b:79:02:63:8c:e4:af:5c:60:de:cd:8a:
                    f3:3e:cd:02:96:da:eb:ec:2c:1c:27:6e:25:29:fd:
                    e4:2f:68:d5:6c:01:1a:84:b3:fd:1c:ca:bc:60:7e:
                    c7:76:3c:ea:05:dc:be:ee:ea:37:ee:af:80:cd:14:
                    a5:a5:e4:b7:b8:1d:07:98:0c:8a:4f:71:95:b0:ec:
                    49:a4:c3:bf:8c:67:eb:e7:54:f5:3e:e4:ac:4a:97:
                    48:54:f9:5b:e0:ea:4e:59:be:91:53:b1:bc:9e:c7:
                    f2:82:b2:de:af:ee:d1:75:47:a3:f2:9e:6f:70:28:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.196.0/22
                  165.140.44.0/22
                  170.205.48.0/22
                IPv6:
                  2604:3b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399494

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d8:5e:ec:63:2f:db:a8:8f:3b:e5:5b:fb:81:19:32:b3:ed:
         d8:b6:97:69:a3:02:f0:e0:88:4d:06:af:52:f0:72:2a:91:a7:
         0c:9f:29:4e:8a:64:d2:af:ce:1d:07:8c:16:bd:99:47:54:83:
         85:25:f8:79:26:6a:d1:4a:23:27:e2:31:2f:af:db:e9:a3:b8:
         96:9b:4d:59:58:f6:2e:0f:d5:dc:31:20:09:13:4a:22:be:55:
         f3:c6:10:df:d9:33:e3:44:20:8e:46:bb:9b:65:af:57:5e:d4:
         cd:94:88:32:10:d0:b5:7f:1e:e0:19:59:29:a1:38:a1:6a:43:
         d6:8e:d9:4a:a7:94:50:a2:39:1d:7c:06:dd:3d:ae:41:8b:a6:
         2b:e4:f3:2d:2f:02:8a:0c:af:1c:ed:04:07:3e:99:c5:b8:a9:
         1c:fb:6e:4b:d2:bd:02:52:2c:a6:dc:97:b4:93:95:bf:4c:31:
         46:70:2e:66:88:ec:8e:07:92:11:49:85:f7:78:9a:97:9a:a9:
         9d:07:a3:15:85:f6:bf:c4:c0:da:83:05:10:08:a5:26:9f:e1:
         3a:af:b6:94:84:a3:ac:2b:26:e1:da:e3:38:df:1b:fc:4b:d6:
         71:95:30:ed:c3:4d:d2:4f:4c:c9:a6:36:dc:93:85:16:ae:f4:
         1f:ba:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:43 2024 by rpki-client on console-fra.rpki-client.org