Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
File:                     2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer (raw, json)
Hash identifier:          Ey63jrclPPcxKC+t159PTvIcky2ULiyLNSuTDkctBCY=
Subject key identifier:   B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF
Certificate issuer:       /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a
Certificate serial:       010D0C9F43285844B9BA10501BA1278CD731EC40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
Manifest:                 rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
caRepository:             rsync://rpki.co/repo/AS202400/0/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 13:38:35 +0000
Certificate not after:    Mon 04 May 2026 12:38:35 +0000
Subordinate resources:    AS: 54286
                          IP: 23.147.120.0/24
                          IP: 2602:faa8::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b9:ba:10:50:1b:a1:27:8c:d7:31:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a
        Validity
            Not Before: Jan 30 13:38:35 2024 GMT
            Not After : May  4 12:38:35 2026 GMT
        Subject: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:c3:1e:76:5f:dd:9a:a6:8c:ec:e4:22:5b:
                    05:a4:23:65:30:50:d9:fb:8e:37:14:4b:c2:c0:e7:
                    ee:91:47:f6:a1:bc:c9:52:53:b0:4c:ab:68:21:8a:
                    95:54:7a:4f:c8:5e:bb:d2:7f:b9:db:35:83:06:81:
                    34:2a:27:a2:a5:68:4e:60:0e:ed:94:60:36:51:30:
                    d9:fd:35:73:7e:cb:31:09:be:b0:0c:4d:f5:4e:65:
                    9e:b1:76:d2:28:b3:81:1b:a1:b1:c3:ce:31:3d:98:
                    86:4f:88:11:66:15:22:e4:f2:73:a8:e5:d4:72:fd:
                    8c:85:64:e8:96:08:0c:44:5c:f8:4f:26:1c:56:2a:
                    89:15:bd:62:81:07:5d:17:c6:c0:14:58:5d:4c:34:
                    79:63:0f:50:32:49:87:16:08:0f:9a:fe:2e:e7:97:
                    a7:e4:24:56:d2:55:46:65:08:23:e8:fa:4f:e9:aa:
                    15:a5:67:4a:ce:f0:8e:f3:97:49:5a:d2:e9:1f:0c:
                    dc:7e:5f:53:12:15:9a:94:01:c4:44:d3:a2:e8:95:
                    48:34:53:a8:28:e0:6b:80:6a:c9:a1:2c:f8:b0:37:
                    8b:2f:2c:ee:1b:5f:a7:28:d8:fa:7d:fe:78:0b:48:
                    3d:44:01:b3:9e:c2:36:89:86:44:db:3c:6f:f6:8a:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/AS202400/0/
                RPKI Manifest - URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl

            X509v3 Authority Key Identifier:
                keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.120.0/24
                IPv6:
                  2602:faa8::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54286

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fa:c8:fb:a6:88:55:aa:84:9b:71:4c:0d:49:d7:27:e0:b1:
         21:de:86:e3:0e:99:56:03:ee:db:23:ae:e8:9a:6e:c2:30:35:
         56:53:35:5d:9d:8d:aa:3d:4c:53:73:45:6c:c6:86:b6:9e:b3:
         74:42:59:46:b6:da:b1:0e:c8:22:ab:87:80:99:dc:aa:bc:01:
         dc:1c:3b:81:ad:18:06:bc:33:b0:c5:c0:aa:68:35:7a:c0:39:
         09:8a:3c:89:66:67:58:60:03:00:11:7a:5b:d9:d1:5e:ad:bb:
         b3:12:e3:92:a6:7f:33:76:56:66:3a:63:fd:a4:f9:c4:f0:69:
         7a:5e:c2:07:65:f6:84:62:e1:a7:9e:59:3b:2e:4a:0b:8f:b6:
         93:dd:2d:ef:55:6a:5d:2d:30:bf:44:4e:3a:78:8a:67:f6:c0:
         65:21:c6:48:74:b3:8e:14:8e:f3:61:01:86:80:d4:c4:ec:21:
         8e:8d:d0:50:c6:9d:dc:a1:14:40:56:d2:3b:09:30:7e:ae:73:
         6e:27:c9:63:2c:26:c3:ee:38:58:2c:08:cb:67:0f:be:a4:5d:
         3e:35:1d:02:09:0b:a0:7f:0f:d3:59:9f:07:c1:4a:34:5e:4e:
         3b:ff:5c:1c:e4:5c:d7:74:ed:93:35:a2:f1:6e:d7:95:d2:18:
         5b:8f:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:05:59 2024 by rpki-client on console-ams.rpki-client.org