Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
File:                     be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (raw, json)
Hash identifier:          Q766is9CsNxf+oAeoFRHBlF3rRv+yC8thSLO7UN+2pU=
Subject key identifier:   9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57
Certificate issuer:       /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f
Certificate serial:       010D0C9F432858474F74EEC538275E1AEAF829C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    AS: 396864
                          IP: 199.204.160.0/22
                          IP: 2604:d740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jan 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ee:c5:38:27:5e:1a:ea:f8:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:d3:0a:7b:58:71:95:ab:0c:5f:c2:e8:cf:
                    db:5e:43:63:73:3f:4e:1a:87:b2:06:8e:35:b4:47:
                    f6:91:36:c7:f4:c6:b8:5a:de:83:8b:cf:ac:43:4a:
                    d0:58:d6:d8:aa:8b:e9:35:c4:4c:19:35:da:81:54:
                    f8:c0:1a:ef:0f:fb:ca:26:0b:8c:b8:51:63:7e:94:
                    1c:4d:7b:4e:59:69:fd:fe:86:78:06:8a:69:bd:db:
                    40:41:24:dc:0b:96:1b:88:91:77:03:67:f9:e3:e5:
                    b7:94:d0:09:45:91:f1:40:ac:02:a5:64:89:dc:8f:
                    25:c6:9f:c2:ed:d8:e9:36:53:41:23:4b:64:b5:de:
                    21:69:52:5c:38:00:d5:e6:9c:8e:63:d5:67:02:58:
                    90:4c:73:cc:11:ce:4a:01:37:68:ae:f1:af:fe:48:
                    8e:04:89:18:3a:8b:15:97:ff:bd:fa:f8:c3:31:bc:
                    a1:2b:d3:ae:26:f0:cb:bc:9f:5e:44:96:7c:9f:f5:
                    32:d3:e9:63:6e:19:d5:c0:68:92:ba:b2:93:d4:cb:
                    d1:93:88:8a:55:75:9f:d7:e7:6d:60:a2:3a:42:13:
                    cc:64:e4:0f:10:14:15:fb:cf:92:45:00:b1:81:e0:
                    bc:9b:ea:5a:84:4d:c7:35:30:30:85:0a:99:b9:35:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl

            X509v3 Authority Key Identifier:
                keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.160.0/22
                IPv6:
                  2604:d740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396864

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:68:98:94:e9:11:47:d9:86:15:3a:3d:d6:41:77:0b:de:
         81:74:c0:9b:cf:59:c9:cb:85:97:94:82:7e:62:99:a1:d1:34:
         18:27:34:70:de:c5:f6:b8:b0:c0:3c:c4:ee:02:a0:b1:db:e5:
         7a:43:31:a8:1f:7e:42:4e:3c:5c:09:20:62:2b:92:c8:06:04:
         bd:8b:15:70:6f:7f:e0:12:20:36:f6:ff:c1:07:76:75:5c:cf:
         12:c1:34:2a:2b:88:35:50:a2:a3:f8:d1:09:82:95:b1:64:9e:
         19:5a:4e:2a:ca:2f:e6:ec:78:c5:aa:2e:6a:f3:79:b5:ee:9b:
         2a:c7:35:10:79:01:08:75:43:4c:0b:3d:25:07:0c:74:f3:50:
         af:95:4a:03:21:46:7d:60:73:c5:3b:04:b4:96:16:e7:d2:a6:
         a1:a0:c0:87:39:71:38:dd:64:98:a5:47:84:4b:5e:92:50:06:
         d2:81:3d:f0:52:d2:bb:cc:6f:57:e7:33:f8:c6:c2:74:07:ed:
         27:78:11:92:05:5a:29:9d:48:8e:ff:4e:84:6b:6c:03:a5:d1:
         92:35:58:72:55:ae:71:eb:6d:e3:32:c7:92:57:ed:23:33:1f:
         e4:a1:39:e4:93:6a:23:5a:d9:0b:0d:c4:da:e7:01:5d:57:fa:
         3a:55:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 17 06:50:44 2025 by rpki-client on console-fra.rpki-client.org