Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
File:                     ae85d24a-77d4-4cf7-80aa-c071199c2889.cer (raw, json)
Hash identifier:          VqGH7kwWJxXQvDcUVFBVQwPfvpEtXn1snn2Xvb4HZE4=
Subject key identifier:   7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E48353EE88C637E661484D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 02 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 395841
                          IP: 64.4.168.0/22
                          IP: 208.91.188.0/22
                          IP: 2604:7c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:ee:88:c6:37:e6:61:48:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  2 19:06:39 2025 GMT
        Subject: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:62:3d:fa:dd:f6:91:a5:e7:23:2e:eb:fa:
                    6e:b8:b3:59:bc:16:e6:38:d9:ee:cc:9c:29:29:41:
                    7e:fb:1e:e4:ce:d6:19:82:42:af:6f:09:ff:b0:87:
                    3d:d4:fe:43:46:e3:bd:0d:f3:c6:c0:8a:1b:01:17:
                    89:e3:fd:11:7e:e6:27:c4:e1:40:5f:a5:bc:42:37:
                    c1:27:b7:8a:65:32:c5:23:b5:bc:ab:9f:94:8a:ab:
                    a2:3f:d3:5e:74:e1:8c:cd:90:01:fe:57:32:12:fd:
                    ab:94:f3:ce:ec:8c:fe:2e:41:c6:34:f8:d1:ff:49:
                    8a:a2:20:27:df:12:36:51:18:ee:84:90:a8:3e:19:
                    cb:1f:24:7d:fe:c5:f3:ac:31:79:b8:5d:bb:db:9b:
                    a7:b2:c8:d5:3e:c1:5a:cf:13:9c:d6:62:8b:89:7f:
                    9f:88:24:a3:07:7a:f3:ff:80:70:b7:88:75:43:11:
                    f0:46:ea:b7:80:28:16:c2:e5:e2:21:ff:6c:cc:66:
                    84:9f:8a:93:6f:f3:0f:9e:5f:72:90:25:60:9c:d1:
                    1f:2a:59:da:07:b2:94:c2:8b:48:a6:a3:d6:bf:c2:
                    af:41:3a:ae:7e:dc:0f:97:bf:92:30:a5:69:df:46:
                    6e:87:ca:d8:93:94:09:ca:72:2b:34:49:2c:d1:23:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.168.0/22
                  208.91.188.0/22
                IPv6:
                  2604:7c0::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395841

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:56:c3:4e:74:e7:63:f3:7c:03:51:75:2a:03:8a:e6:02:a3:
         0f:bf:92:9a:6c:48:63:78:90:9e:4e:9f:f8:d1:95:ec:d5:ad:
         8b:4a:7a:0b:ee:bf:bd:0d:2c:ad:c9:4f:f6:26:9a:6b:fe:01:
         65:57:03:7b:86:08:46:5d:88:2d:99:5a:f2:7c:f2:65:01:c1:
         29:32:75:0a:21:8c:41:40:c9:32:16:c1:50:cd:ec:c9:46:f9:
         09:cf:20:08:91:e9:c9:ca:8e:b3:24:62:be:3f:4e:14:c5:cf:
         7d:d5:49:1a:ff:d8:28:63:0e:a1:08:22:92:da:65:27:c8:70:
         97:da:25:90:0d:a1:b6:25:20:42:c9:d9:b7:47:7a:6e:17:6b:
         79:0c:42:74:3b:be:b6:2d:b8:20:1a:ce:17:f9:a3:d7:b7:db:
         64:3a:ee:d4:5c:0f:2c:30:5e:0f:f5:83:4b:7f:b9:98:41:f7:
         88:7e:ae:c3:85:e8:10:52:f8:76:7c:e9:69:ed:a1:25:aa:23:
         08:6b:5c:bd:8d:b6:b6:1d:eb:47:20:b3:de:d3:63:f4:46:d7:
         e6:ed:be:ff:c4:b0:49:cf:9e:ee:88:d4:ee:20:50:21:24:27:
         98:43:fd:fe:34:88:ce:96:64:38:40:b8:3e:76:30:de:e8:1c:
         36:ed:8c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:25 2024 by rpki-client on console-fra.rpki-client.org