Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d.cer
File:                     c9b2f783-ae49-438b-a994-34e0ab78157d.cer (raw, json)
Hash identifier:          NXZmbRVRUzSDOOGilH5FKvUn6z8FSLcqU5VuPtX81Uo=
Subject key identifier:   38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440FAAFE5C8AC357B9293A1F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 15:40:48 +0000
Certificate not after:    Wed 04 Mar 2026 15:40:48 +0000
Subordinate resources:    AS: 16628
                          IP: 104.171.144.0/20
                          IP: 104.237.224.0/19
                          IP: 107.181.112.0/20
                          IP: 2602:ffbc::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0f:aa:fe:5c:8a:c3:57:b9:29:3a:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 30 15:40:48 2023 GMT
            Not After : Mar  4 15:40:48 2026 GMT
        Subject: CN=c9b2f783-ae49-438b-a994-34e0ab78157d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:46:17:e3:02:81:a2:a0:b8:5a:f7:28:97:
                    c3:42:a0:40:54:6f:e5:d4:3a:79:81:b1:e7:20:13:
                    db:14:b4:a4:fe:a2:b6:8a:ba:d8:f7:2c:9b:a7:ed:
                    9c:3a:81:bc:76:28:fe:88:29:77:22:bd:15:e5:b5:
                    25:4f:99:19:2a:e0:7c:0c:33:4c:f5:97:cb:65:1c:
                    f7:ba:60:0f:e1:2d:35:33:ad:a9:1d:57:4a:a8:18:
                    20:c3:60:19:a8:96:14:c0:f1:e4:64:24:c7:ad:e2:
                    fe:73:21:6a:3f:dd:18:d0:9d:be:1c:97:92:f3:27:
                    89:7c:26:ed:27:49:dd:e0:24:28:97:c7:e6:f2:64:
                    d5:0f:f1:c4:e7:a0:1a:23:45:88:bd:5b:46:1a:79:
                    18:7e:1e:7e:94:ba:97:74:b5:d7:93:08:e9:5d:cc:
                    01:2d:7d:3d:fe:df:27:b1:42:37:fd:2d:6e:ae:8b:
                    5e:3e:7f:00:6f:92:14:99:15:5b:d6:71:ea:08:88:
                    4c:e8:4a:47:be:0b:d5:58:4f:67:85:a5:73:b8:a5:
                    03:25:92:e8:7d:2a:2c:15:4f:72:96:67:0a:a0:9e:
                    e4:7d:a7:20:0e:cf:10:60:39:37:7c:88:e2:6a:5d:
                    86:4b:42:47:75:99:25:36:7d:67:ce:87:cc:fc:9e:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:96:E0:5E:8A:27:9F:15:10:B0:A6:5E:25:73:F2:60:57:56:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b2f783-ae49-438b-a994-34e0ab78157d/c9b2f783-ae49-438b-a994-34e0ab78157d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.144.0/20
                  104.237.224.0/19
                  107.181.112.0/20
                IPv6:
                  2602:ffbc::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16628

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:05:96:ca:c7:72:16:03:d1:1c:5e:49:bb:c7:ac:d7:84:3d:
         6b:66:91:b3:14:8c:8e:f4:13:62:68:88:dc:2e:3e:21:bd:e3:
         5c:a2:9f:99:7d:1a:f7:9b:71:01:3c:eb:6e:c6:f3:07:31:c0:
         43:8e:bb:5c:41:c2:0c:87:83:40:f6:cf:5a:33:07:a3:a5:3d:
         34:a6:16:06:7b:e6:e2:b8:38:1e:f3:76:c5:5c:05:e2:44:cf:
         9d:55:d5:db:f5:a3:4d:70:24:a0:ca:bc:61:5c:45:16:18:f0:
         18:03:38:c4:88:38:50:bd:4d:f3:18:6a:2f:df:8c:0c:0e:7d:
         49:c7:3a:05:39:18:a1:06:ff:09:42:c8:4a:aa:d5:e1:21:6f:
         e2:d4:75:e2:ae:14:b6:68:4b:5e:2e:92:10:24:4b:dd:3e:f2:
         62:2f:5c:9d:5c:bc:41:4c:93:fb:26:d5:3d:86:65:14:9d:d0:
         9d:e5:15:77:75:5d:fd:82:b6:e5:86:7a:a2:68:03:58:75:2a:
         40:17:30:5f:3d:05:06:60:d6:aa:fb:c6:d4:40:3b:cd:20:f5:
         5d:28:10:fa:9e:0d:90:9c:f3:93:e3:68:84:c8:16:21:88:8e:
         70:68:20:7a:2d:5a:0d:f5:6b:4e:70:ec:ec:30:1c:4d:c1:0a:
         33:0a:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:25:44 2024 by rpki-client on console-fra.rpki-client.org