Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer
File:                     5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer (raw, json)
Hash identifier:          1hZUgjOGTOo1MPY52Amw+RsIGPZ2goaNJ0meh3x0sqA=
Subject key identifier:   49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584297D6DF9DA1AC88D349596D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jul 2023 00:45:16 +0000
Certificate not after:    Tue 21 Oct 2025 00:45:16 +0000
Subordinate resources:    IP: 192.16.104.0/22
                          IP: 204.144.176.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:d6:df:9d:a1:ac:88:d3:49:59:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul 19 00:45:16 2023 GMT
            Not After : Oct 21 00:45:16 2025 GMT
        Subject: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:b8:71:c9:3d:da:e8:0d:98:a7:07:d0:61:
                    2e:25:dc:a5:5d:4c:c6:11:fb:c5:e3:ac:36:ff:45:
                    6d:74:84:e1:08:85:f6:ca:8f:34:75:a7:1c:3f:21:
                    4b:cf:01:d1:0a:85:d2:86:5d:7a:bf:c2:c2:5e:c4:
                    a1:67:e2:98:56:18:60:b6:6f:02:83:ee:91:29:e7:
                    fc:78:9e:0e:9b:98:07:3a:8e:bc:84:0e:ab:23:3a:
                    fe:86:c5:73:d4:88:49:d4:02:e2:c1:a1:54:39:e1:
                    0d:93:e6:f7:e7:61:b9:a8:a8:ed:e6:38:7f:dc:60:
                    49:4c:de:a8:74:ba:cf:bd:33:7a:bf:e3:93:b0:86:
                    c5:5b:34:2f:9d:84:58:28:24:0e:ad:0e:e9:a6:27:
                    fd:2b:68:78:e3:54:26:4e:ea:94:28:58:87:c1:89:
                    e6:eb:2d:ff:92:26:14:d2:16:fe:3a:02:14:1a:0e:
                    d2:7e:6b:25:d1:25:89:16:0c:0f:fb:dd:ae:7d:58:
                    db:09:92:6a:94:c7:72:3d:28:d7:a9:74:b1:d3:e8:
                    57:6b:05:42:33:08:fa:bf:7d:d1:9f:ad:92:d9:cc:
                    6d:7e:22:12:e3:90:d7:d7:56:05:b2:f4:c0:41:7d:
                    9d:4f:61:5e:85:11:b2:95:77:80:f9:8f:57:4f:5e:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.16.104.0/22
                  204.144.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:0a:c6:c1:59:75:ff:8f:78:32:58:11:48:5f:a0:26:45:
         69:22:bd:39:fb:91:10:ec:8d:e8:81:ae:4e:51:11:83:69:79:
         45:79:d0:4c:d6:6c:0f:13:40:12:c3:a6:97:09:68:6e:30:2c:
         0e:69:c8:7c:46:d5:f4:63:1f:5e:e9:56:a6:bf:23:b9:2c:9b:
         94:39:7b:59:d4:aa:98:ea:fd:ff:da:50:b8:b6:4e:c0:b2:88:
         d6:0b:14:15:7b:bf:58:42:d5:f6:37:f3:c0:dc:93:9f:21:d0:
         32:45:1b:9c:23:2b:9d:3e:4e:ca:24:74:64:be:35:75:1c:41:
         1d:42:2d:19:84:23:8d:9f:5c:d1:01:f0:0f:3c:c0:bc:e9:4c:
         e5:df:a4:96:2e:45:5c:63:e6:56:58:c1:38:1b:46:d3:23:ea:
         ad:80:ef:af:d9:ad:66:57:0e:2a:56:26:35:32:b5:5f:9e:5b:
         ed:7a:ec:00:73:d5:ee:de:72:d2:df:f4:35:46:69:d7:6d:e5:
         fd:ea:c4:52:d7:27:d4:37:a1:67:d0:77:d1:de:fd:1b:9c:10:
         30:6d:1c:e4:f9:38:46:82:c1:15:7e:48:1e:e5:70:3e:43:53:
         ef:ab:53:cc:30:c9:89:f0:e2:9c:85:7a:46:89:e8:3d:40:e3:
         c9:d1:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:18 2024 by rpki-client on console-fra.rpki-client.org