Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
File:                     d6d41513-869c-41f2-9319-11d1e8b95e2b.cer (raw, json)
Hash identifier:          m0C3p0KgkMHAN/ZSRi1QuuJ0Y26ZhukeG7X07/btATw=
Subject key identifier:   B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858470A71DBC28BBC96135439C300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Aug 2024 21:07:27 +0000
Certificate not after:    Wed 02 Dec 2026 22:07:27 +0000
Subordinate resources:    AS: 32146
                          IP: 208.94.236.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0a:71:db:c2:8b:bc:96:13:54:39:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 29 21:07:27 2024 GMT
            Not After : Dec  2 22:07:27 2026 GMT
        Subject: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:ab:94:fc:a3:6d:e6:ee:f2:56:00:0b:2a:
                    80:5b:3b:58:0c:40:d7:5b:c7:ef:60:92:aa:a9:5a:
                    45:71:64:73:b4:a6:45:d2:5a:fa:3a:96:de:ee:09:
                    b2:44:2e:72:27:b1:c5:9e:e0:e8:ff:33:92:54:25:
                    37:58:c0:39:a0:b8:8a:b5:ec:18:40:0f:5f:fa:f1:
                    93:15:ac:8f:fc:6f:b4:2f:a9:4b:78:2e:85:3f:19:
                    9d:9e:8c:8e:fb:ed:33:b4:79:42:17:ee:38:72:73:
                    22:fc:ad:20:55:d0:46:7d:4e:38:e8:8e:be:07:71:
                    d7:b2:1e:fb:12:f7:93:3f:a7:0a:c8:44:90:f6:ec:
                    19:db:a8:41:a2:34:de:fd:fd:3b:d3:69:68:d0:3d:
                    06:f1:cb:1e:88:69:62:87:fa:41:90:e1:71:3e:99:
                    e8:1f:04:57:a1:ee:a0:e5:e9:40:c1:71:53:8e:7d:
                    c2:8c:9b:6e:6e:d2:27:21:75:7f:e3:34:bb:af:e5:
                    cc:fa:39:cb:e3:dc:18:7e:ea:32:c2:70:09:ce:a7:
                    4b:d0:83:13:6a:9b:71:25:8e:29:e4:1f:ce:05:e0:
                    fd:ad:06:76:6d:0a:e3:62:8c:04:6a:50:1a:87:0c:
                    0a:55:c7:04:3b:3d:65:f9:97:a7:c5:aa:61:42:35:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32146

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:2b:1a:2c:b1:3e:9c:78:e4:da:db:fb:46:f8:5f:1b:a1:
         22:50:22:9f:ed:37:b3:1e:4f:d3:29:82:ae:71:ca:0e:30:f1:
         ee:fc:97:e6:e6:e3:d1:f0:12:33:81:91:6a:47:f0:82:3a:77:
         59:5f:fa:f5:ed:45:0a:66:9c:d0:ff:f8:81:e2:1f:cc:39:d1:
         51:98:d7:2c:8c:df:d8:1f:98:d6:b3:46:61:f7:8f:cc:41:ee:
         75:67:da:5a:8c:54:bf:2d:6e:33:ec:e3:9c:e6:d1:ed:9f:75:
         08:66:1a:42:40:d9:56:2d:dd:d1:bc:14:40:93:0c:cc:15:73:
         05:32:4f:7b:d4:65:95:86:bd:dd:8b:c5:21:a7:ed:2c:68:8c:
         6d:ab:b4:17:88:6c:a6:b4:0a:7d:f4:04:7e:27:d8:d5:4d:70:
         41:8d:78:86:cb:a9:0c:b7:e4:f2:d9:46:ed:c8:df:a9:48:c2:
         cd:25:2b:6c:86:b0:86:a3:90:8c:ad:47:30:ed:55:eb:59:f7:
         27:d7:2d:95:cc:c7:f7:40:84:40:38:c8:60:e0:4b:20:0c:68:
         e4:be:21:06:ec:e2:c2:09:62:07:dc:09:6c:51:93:ce:65:53:
         6a:7d:fc:d4:a8:60:31:b7:a1:36:70:36:8a:66:12:6f:bb:40:
         93:42:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:34 2024 by rpki-client on console-fra.rpki-client.org