Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
File:                     b927dc15-9316-467a-b50d-d6b361478436.cer (raw, json)
Hash identifier:          4uJV8CamCML0izsbkErBo1YFgQ4QF9mk6HCED7HTa9o=
Subject key identifier:   9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584443174EB12CC4CA73E8030AE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Dec 2023 01:45:15 +0000
Certificate not after:    Mon 23 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 2901
                          AS: 11173
                          AS: 26640
                          IP: 192.133.99.0/24
                          IP: 192.150.253.0/24
                          IP: 198.49.160.0/24
                          IP: 198.59.96.0/24
                          IP: 198.59.98.0 -- 198.59.105.255
                          IP: 198.59.109.0 -- 198.59.114.255
                          IP: 198.59.116.0 -- 198.59.127.255
                          IP: 198.187.251.0/24
                          IP: 2605:800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:43:17:4e:b1:2c:c4:ca:73:e8:03:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 19 01:45:15 2023 GMT
            Not After : Mar 23 00:45:15 2026 GMT
        Subject: CN=b927dc15-9316-467a-b50d-d6b361478436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:0e:ff:da:41:59:f2:69:e1:a6:7e:05:b5:
                    f0:61:4e:c2:24:f3:66:21:ba:97:25:07:d6:2e:a0:
                    f1:3e:13:cb:c9:ae:52:e6:4b:4b:71:c0:58:1c:e3:
                    68:e6:77:04:f0:47:e2:0f:98:15:64:0d:06:ee:45:
                    60:70:68:53:26:7d:9b:ba:44:43:50:57:34:35:f8:
                    d2:85:6c:28:15:00:82:b3:7a:2d:bb:06:01:e5:07:
                    8b:5b:30:4c:1f:fd:72:1c:41:ab:b2:a0:2e:87:90:
                    d2:33:02:b7:33:35:53:0d:7a:6f:79:3e:88:c5:67:
                    dd:33:e5:c7:57:6d:b7:be:ae:58:e0:b8:6c:02:db:
                    62:03:d9:17:6f:08:2e:29:b3:a1:74:09:d9:5a:c5:
                    dd:56:aa:50:74:16:c8:39:68:32:07:81:27:22:77:
                    10:db:eb:eb:3d:f9:a5:a1:10:f4:9d:60:4c:b5:71:
                    ae:cb:3c:1a:40:0b:73:6e:7d:c4:fa:9d:2a:62:62:
                    ca:14:4a:52:98:ca:50:5d:77:87:34:f6:4c:45:34:
                    fe:6b:b6:90:3e:e4:e9:c9:76:35:96:fd:8c:c8:3b:
                    24:33:ed:c1:bf:b8:3d:15:cd:c8:cd:c1:ba:d9:e5:
                    bb:91:7e:83:d0:60:40:89:7a:51:68:21:4c:76:18:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.99.0/24
                  192.150.253.0/24
                  198.49.160.0/24
                  198.59.96.0/24
                  198.59.98.0-198.59.105.255
                  198.59.109.0-198.59.114.255
                  198.59.116.0-198.59.127.255
                  198.187.251.0/24
                IPv6:
                  2605:800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2901
                  11173
                  26640

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:d1:46:5e:a6:21:9e:3c:ba:38:12:c1:9a:10:cd:46:ce:
         2b:32:3f:0e:cc:5d:90:3b:b7:af:a6:d8:bc:99:0f:ae:99:4e:
         54:c1:f9:63:2b:08:a4:7d:33:4f:39:3e:ac:6c:20:6e:ed:e0:
         cb:91:1b:26:41:53:bd:f8:c9:7a:38:b1:c3:e0:b6:03:81:6a:
         e3:9a:2a:6b:a4:06:03:3b:84:c8:a6:9b:3b:5b:c4:e3:96:42:
         da:44:4c:e9:ff:b9:dd:9e:24:8d:a2:41:19:df:70:96:62:3f:
         b8:96:91:e3:ae:02:6b:35:52:10:38:0e:0d:81:6b:bd:f0:36:
         56:21:c9:47:a4:16:bc:ab:fc:21:f4:18:e8:22:c5:b7:c4:69:
         a0:3f:94:cb:67:4f:34:0e:e6:50:0a:a8:38:e6:69:d0:5e:2c:
         de:35:57:74:c9:ad:35:ba:9d:ce:2c:b7:46:7e:6e:ea:b0:87:
         a0:ca:c1:41:3b:f7:b3:7b:10:c1:0d:6e:02:0c:f2:45:ed:ef:
         f3:3b:7c:c0:7d:85:e3:cb:5c:10:11:fe:12:fe:bd:29:1f:2b:
         41:11:ec:90:95:24:84:b7:42:ab:57:d5:4a:a3:c7:2a:06:7b:
         49:2e:01:c3:e5:20:61:ba:9f:3c:34:d3:df:e0:2f:a1:bf:86:
         9c:9a:89:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:33 2024 by rpki-client on console-fra.rpki-client.org