Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
File:                     97e60b77-17e3-4250-9bc8-b5e7664a320a.cer (raw, json)
Hash identifier:          FEsHBwQClLvzXxLaAEOAvTPh2SF03gWl2u7cPmDaeSQ=
Subject key identifier:   B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285845E2F17DBF8839D9F123443B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 00:45:20 +0000
Certificate not after:    Wed 19 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 31799
                          AS: 54552
                          IP: 23.138.144.0/24
                          IP: 74.123.116.0/22
                          IP: 216.39.244.0/22
                          IP: 2620:13f:b000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e2:f1:7d:bf:88:39:d9:f1:23:44:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 16 00:45:20 2024 GMT
            Not After : Aug 19 00:45:20 2026 GMT
        Subject: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:a2:a3:56:75:0a:2b:fa:25:97:9f:8a:e2:
                    3d:1f:13:2b:cf:31:df:ff:e7:5e:66:bb:9b:ac:32:
                    3c:a5:20:24:be:ea:b4:ff:4f:79:01:5a:77:4c:1e:
                    18:5c:22:33:c4:4c:88:15:26:09:9d:1f:b5:30:db:
                    3c:f4:4b:1b:12:2e:fc:21:99:a2:ee:5b:bd:48:00:
                    a9:42:90:62:1e:88:b3:62:cd:b6:a2:4f:93:a2:6d:
                    8d:d2:0e:81:ec:fe:1c:26:1d:63:75:df:7a:dd:43:
                    17:41:e3:30:58:c3:b2:5b:b6:90:1b:5d:76:46:5d:
                    f7:2d:2f:54:fa:ba:df:ff:56:63:e9:09:54:f2:7e:
                    ac:22:d5:97:fa:a5:74:43:ab:53:ae:81:65:cd:65:
                    f8:0d:b0:b1:f3:57:b5:03:9e:16:5a:2e:13:ed:18:
                    cf:38:c4:c0:95:4b:5a:45:c4:62:ab:6e:11:ed:0b:
                    83:a6:3e:ac:c4:75:40:bb:31:d1:7d:80:f1:75:2f:
                    0a:ab:81:ea:dd:1f:d2:e9:5f:cc:70:47:7f:cd:d4:
                    c1:d3:da:ae:82:34:ce:b2:47:22:25:6a:d3:4f:0c:
                    28:89:0f:f8:f6:4a:ec:48:c2:42:1e:ff:92:4d:b2:
                    58:7d:4b:f5:f6:90:45:54:f9:68:87:f3:a6:bb:6a:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.144.0/24
                  74.123.116.0/22
                  216.39.244.0/22
                IPv6:
                  2620:13f:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31799
                  54552

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:75:db:63:a6:48:4d:bc:d2:14:1c:fa:f2:8c:87:84:43:
         bd:36:e5:c3:75:bd:21:33:f6:70:42:48:dd:a0:f7:1f:f8:6e:
         13:82:b5:d3:a0:4a:64:ce:48:9f:1c:cf:b0:26:e4:4a:4c:e5:
         d7:c9:de:3e:1b:24:06:86:5f:ed:ce:c2:38:59:14:1a:bb:88:
         58:70:3d:f2:a3:5f:ff:18:6e:9c:73:fa:a6:d6:70:f6:1e:03:
         6d:22:77:c5:5e:03:f4:93:b7:85:db:95:cb:2d:2f:d6:84:4f:
         e4:aa:ab:7f:1b:5f:20:66:36:3b:a6:8a:49:67:0b:e5:12:b8:
         18:30:d1:65:82:da:a9:27:6e:13:27:38:5a:25:02:0a:9f:1b:
         30:c2:92:0a:5e:ff:dc:9b:16:5d:d6:dc:e9:ff:1f:c0:07:76:
         67:6f:26:b4:00:3c:f5:2d:14:8c:21:0e:1c:02:e2:a5:f5:2c:
         7a:8e:15:f4:91:a4:05:20:64:84:d4:78:81:02:23:ef:df:24:
         1a:f4:06:f4:29:5f:25:1f:cf:57:1f:4c:3f:52:6e:d0:ba:56:
         8e:6f:69:88:59:dd:b3:c5:6f:d9:ca:9f:44:04:28:e4:4b:55:
         02:7a:c9:0f:3f:24:b5:a7:9d:75:99:cf:61:91:97:44:5f:f7:
         05:1b:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:17 2024 by rpki-client on console-fra.rpki-client.org