Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
File:                     9c2a7225-dfea-460d-aa69-804ae5740036.cer (raw, json)
Hash identifier:          qoIMyz0oOnGNUFbKVeh3rKmu8Y+Ny0/z259NOvT2Md4=
Subject key identifier:   95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841EDC978205632A68B6BE63600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 May 2023 02:50:50 +0000
Certificate not after:    Thu 21 Aug 2025 02:50:50 +0000
Subordinate resources:    AS: 20112
                          AS: 30221
                          IP: 63.247.144.0/20
                          IP: 68.68.192.0 -- 68.68.216.255
                          IP: 68.68.218.0/24
                          IP: 68.68.220.0/24
                          IP: 208.122.112.0/20
                          IP: 2607:fa28::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:c9:78:20:56:32:a6:8b:6b:e6:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 19 02:50:50 2023 GMT
            Not After : Aug 21 02:50:50 2025 GMT
        Subject: CN=9c2a7225-dfea-460d-aa69-804ae5740036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:b5:78:a9:18:72:8a:56:37:da:2a:29:06:
                    9e:f4:bb:2d:d7:21:18:80:38:07:46:48:c0:35:95:
                    20:5f:f8:06:90:c3:1e:9d:40:8a:fb:38:17:aa:a2:
                    88:24:d2:4f:48:ff:75:91:8e:e6:49:f1:87:74:9a:
                    e3:9f:7c:7b:07:84:12:0a:de:c4:95:27:02:07:c6:
                    4f:91:a6:45:99:a6:28:6a:c2:83:bf:18:6b:4d:8c:
                    54:5b:42:c0:b7:a0:cb:1e:26:38:b9:da:34:33:2d:
                    d5:6e:6c:8f:fe:db:c8:b2:ed:c1:61:f1:79:ac:db:
                    cb:ca:54:26:11:cf:b7:e4:79:d9:93:1c:3d:23:8f:
                    ad:61:08:3d:e1:4d:cf:dd:ad:52:20:a2:18:44:f5:
                    f1:14:b2:05:47:dc:21:1f:7c:3f:ef:bb:8b:79:40:
                    3b:58:a4:a1:78:c4:10:ed:05:49:43:0e:c0:39:86:
                    a0:90:08:1d:23:51:7c:e2:d2:14:81:65:01:0b:e4:
                    a7:09:2d:8e:3c:03:47:ea:43:88:28:16:21:c9:3e:
                    d9:4a:f2:84:a9:1b:e8:de:55:31:b8:c1:7f:7e:b0:
                    7f:88:4c:b2:5e:cc:03:43:5c:5f:67:b1:b6:99:bb:
                    0a:95:ec:b6:8f:a4:2d:39:e1:43:ad:01:76:97:39:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.144.0/20
                  68.68.192.0-68.68.216.255
                  68.68.218.0/24
                  68.68.220.0/24
                  208.122.112.0/20
                IPv6:
                  2607:fa28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20112
                  30221

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:74:41:68:bb:7f:16:16:a9:d1:03:31:e4:02:8d:e7:4c:
         84:2e:f2:b6:7b:a4:fc:cc:bd:09:ee:69:a2:ac:35:a5:94:94:
         77:4f:76:c0:ba:09:79:32:20:a2:f6:7f:45:c1:77:b0:1c:7b:
         36:f1:e9:bc:5a:91:14:56:3a:2c:25:87:28:65:11:d0:28:37:
         f1:66:5f:36:9e:24:11:76:29:bc:45:5a:2a:9c:b1:4d:55:43:
         e8:6a:07:2b:8f:98:51:41:c2:e4:57:50:ff:86:d9:84:b8:e0:
         c9:70:3e:b9:90:6d:e8:55:4a:86:9d:a0:04:59:6e:09:b5:75:
         06:04:e1:9c:64:e6:2b:86:57:70:cc:bf:6e:b0:5c:7c:11:c9:
         86:77:1c:6f:1e:55:30:34:2e:ab:1a:fa:09:f5:c1:cb:b3:a8:
         1b:11:06:24:52:e7:cb:51:88:95:95:c3:29:eb:95:31:27:69:
         74:46:3f:07:2f:54:e4:fb:cc:5c:8a:87:85:fd:72:7b:6b:4c:
         72:ef:31:66:b0:9e:92:ca:0d:4b:8f:51:34:6f:00:d4:2c:5b:
         3e:5f:8e:5d:1b:35:37:e9:05:95:29:7e:93:76:38:d9:63:53:
         21:12:0b:60:27:24:47:d5:16:ca:6f:65:53:e6:24:bb:0d:e5:
         9f:35:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 07:15:45 2024 by rpki-client on console-ams.rpki-client.org