Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
File:                     61939bbc-e50f-4ced-8482-e7c4008e3583.cer (raw, json)
Hash identifier:          7Kbaj4X1OjV0awBV7ajlLc5720w1XW/rPPFi6zFxsAo=
Subject key identifier:   3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285847ECAD92927ADB01F1E9248E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 22:00:27 +0000
Certificate not after:    Tue 24 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 397453
                          IP: 45.138.164.0/22
                          IP: 137.83.60.0/22
                          IP: 141.193.238.0/24
                          IP: 143.223.240.0/21
                          IP: 159.112.224.0/21
                          IP: 161.38.160.0/20
                          IP: 170.117.168.0/21
                          IP: 199.103.16.0/22
                          IP: 216.120.139.0/24
                          IP: 2607:3240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:ad:92:92:7a:db:01:f1:e9:24:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 18 22:00:27 2024 GMT
            Not After : Nov 24 01:45:26 2026 GMT
        Subject: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:a2:cd:53:3f:08:00:eb:ff:0e:57:6e:01:
                    15:8a:fc:5b:4d:05:2a:73:b0:e6:b2:cf:b1:86:fb:
                    74:30:36:e6:7a:6e:bd:e2:16:f9:fe:44:e4:ce:7a:
                    58:6c:38:cf:81:c5:df:0a:5d:95:a5:71:38:1b:77:
                    1e:8d:a5:1e:84:54:41:5b:8f:40:f3:75:22:b3:50:
                    d6:93:85:a4:e7:c1:7b:aa:b5:69:98:ce:4b:fc:f2:
                    20:d9:dd:cf:87:c7:17:08:ad:18:97:f8:8d:a1:a6:
                    e2:cf:63:d6:0a:b9:87:ee:38:c7:5a:5f:34:90:f0:
                    8b:d1:fa:54:12:9a:44:85:5c:2d:09:f5:ac:60:c9:
                    85:e7:d3:a9:57:53:d6:db:02:bd:2f:88:a4:5b:ac:
                    24:72:63:15:33:21:e7:a6:0c:49:30:a8:0f:65:a0:
                    bd:62:44:67:8f:42:72:66:58:4e:3d:ca:96:da:7a:
                    25:5e:d9:8d:30:03:04:c0:a2:e6:7c:eb:12:16:49:
                    05:a3:56:a7:87:7c:f2:fc:1c:df:6e:39:3c:f9:d1:
                    f4:62:5b:42:29:48:25:38:fc:94:4e:93:64:d9:94:
                    a2:b6:4f:61:ed:da:51:27:39:91:0a:13:0d:e4:87:
                    fb:f7:1f:29:34:62:17:4b:b1:40:e6:47:8b:dd:46:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.164.0/22
                  137.83.60.0/22
                  141.193.238.0/24
                  143.223.240.0/21
                  159.112.224.0/21
                  161.38.160.0/20
                  170.117.168.0/21
                  199.103.16.0/22
                  216.120.139.0/24
                IPv6:
                  2607:3240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397453

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:fb:de:0b:90:de:01:fb:10:7b:eb:89:67:61:a6:f8:59:0b:
         0e:63:51:8c:46:92:27:e0:3c:1c:ce:17:d8:c3:a9:bf:65:64:
         03:ea:db:3e:c9:3f:61:01:8f:2f:1c:0f:3a:47:47:4b:a4:c5:
         4e:dc:e4:5b:be:10:ee:4d:27:1e:55:2a:21:d0:0b:46:8c:bd:
         11:f7:ea:03:47:e1:d0:0d:b4:98:a8:d7:ea:dd:22:d7:a7:09:
         f3:c1:e5:04:c6:e7:33:27:6e:ee:2a:38:d7:4c:30:85:a7:fe:
         46:f2:9c:48:9d:29:75:8d:d0:7d:f8:ad:c0:0e:62:7e:b9:59:
         31:9e:74:c1:53:4a:41:19:2e:63:3e:88:c5:76:e2:69:d7:b2:
         d7:6f:b8:6f:0c:15:db:d5:f3:2b:07:28:5e:13:86:1c:bc:93:
         b3:b5:20:05:4e:05:2e:b6:13:38:b5:f2:77:bc:8f:75:84:fd:
         3d:1d:4d:d7:8d:27:bb:37:e7:7a:cd:a5:2a:51:46:0f:91:19:
         89:bc:30:d7:b6:70:24:f0:7b:f8:f9:50:af:0d:6e:e4:22:cb:
         8a:43:ea:1c:32:db:4b:b2:6b:02:47:0c:73:ae:d0:d4:ba:ec:
         1e:ce:cc:4d:3e:4f:1d:61:43:35:96:54:42:4b:09:b9:c4:57:
         3f:74:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:13 2024 by rpki-client on console-fra.rpki-client.org