Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
File:                     86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer (raw, json)
Hash identifier:          0xBuVDRrTrVHHIhwBoR+6iM7AhAX9QA+4dC9DKFkPPE=
Subject key identifier:   35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844F02DC2900C5086E11C330700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Feb 2024 01:45:20 +0000
Certificate not after:    Sun 24 May 2026 00:45:20 +0000
Subordinate resources:    IP: 47.191.0.0 -- 47.207.255.255
                          IP: 172.99.32.0/19
                          IP: 172.109.0.0/16
                          IP: 2606:4d80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:2d:c2:90:0c:50:86:e1:1c:33:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 19 01:45:20 2024 GMT
            Not After : May 24 00:45:20 2026 GMT
        Subject: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:bf:4b:c4:64:e7:0f:cd:cc:f1:31:29:a1:
                    1b:90:9a:bb:1b:d8:01:c3:ef:71:e6:7c:99:c5:33:
                    a6:7d:d1:1d:5e:3b:68:f8:a1:3b:45:2e:2e:ac:bb:
                    74:ba:38:2f:59:b7:b0:39:ea:01:84:97:73:2b:1c:
                    8a:94:1a:69:48:d8:8c:1d:80:dd:01:19:39:68:6c:
                    7f:19:15:86:6c:cb:42:f2:ed:c5:ed:78:c6:61:3b:
                    ae:56:aa:9c:64:f5:2f:58:7d:1e:61:4b:82:ea:01:
                    ef:3c:00:6e:ef:21:1d:4e:6a:25:d0:be:49:96:dc:
                    02:12:21:c5:41:c5:9f:fe:6f:1f:37:41:b8:a8:77:
                    71:66:eb:91:d4:9b:72:2a:03:45:04:47:87:3b:49:
                    d4:01:a0:c2:1a:21:81:f2:ec:49:1f:2e:b9:a0:73:
                    a9:f3:ce:06:cb:fb:33:d0:5a:77:1c:dd:0d:3e:b4:
                    93:ae:17:8b:cd:d7:91:5d:25:99:b9:41:e3:a0:f4:
                    71:1a:2b:10:20:27:b9:ba:96:69:3f:10:be:01:cc:
                    a9:47:27:ef:17:a1:1c:33:0d:77:78:41:c6:5c:48:
                    9c:7a:38:25:16:4a:b2:bf:cd:92:86:39:a2:8a:df:
                    ab:0c:ce:40:8c:d1:a7:2c:05:f5:d2:f0:ea:c2:a1:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.191.0.0-47.207.255.255
                  172.99.32.0/19
                  172.109.0.0/16
                IPv6:
                  2606:4d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2b:17:e3:e6:66:90:39:32:5b:29:5b:be:1a:cc:7f:a9:f1:
         a8:2f:3a:d5:5d:da:32:5e:b7:be:33:fd:4d:0d:3d:84:9c:f2:
         70:f8:19:ad:01:82:86:98:5e:5a:e5:a9:df:50:06:c3:8f:b0:
         68:7d:95:0c:65:ef:bd:a1:b3:67:4e:a0:df:62:5b:03:44:f2:
         82:c0:cb:87:36:2d:0b:ce:a3:5c:14:5e:c8:84:ea:88:44:60:
         68:63:3e:f8:73:6a:d4:bf:0b:44:f4:50:41:ca:1f:41:75:f0:
         03:13:19:0c:65:00:7f:3b:1b:02:4f:83:80:94:4b:29:51:f8:
         cc:19:55:f5:61:c1:38:1a:65:56:2c:dd:28:6d:cc:f3:23:0b:
         0c:01:36:c5:d1:0d:91:85:45:2f:69:eb:6d:88:80:25:fd:13:
         cb:0f:36:6d:25:84:1b:b6:a4:08:73:fa:e5:ad:c9:87:a6:5a:
         e2:63:4e:44:f7:6f:5f:9d:7c:a9:53:82:ce:d3:84:b0:9a:b8:
         88:a2:52:21:46:4f:b8:77:86:e8:09:68:e5:0a:35:40:1e:bb:
         6f:6a:1e:b4:ef:84:e5:e1:ac:02:f4:5c:75:e6:99:67:d4:e2:
         7e:57:29:b8:b3:e9:e5:95:1d:48:3f:83:e4:f8:54:c3:0e:71:
         2a:da:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 07:15:44 2024 by rpki-client on console-ams.rpki-client.org