Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
File:                     e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer (raw, json)
Hash identifier:          wTUdSoUAL+/z/XtRf/EhygP4KEFkeeSXnwtmWJzd3Zg=
Subject key identifier:   C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848055C8DBD3268AA412B3B2880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Nov 2024 18:12:25 +0000
Certificate not after:    Mon 23 Nov 2026 13:45:25 +0000
Subordinate resources:    AS: 18914
                          AS: 25855
                          IP: 23.147.88.0 -- 23.147.90.255
                          IP: 107.161.52.0/22
                          IP: 204.8.100.0/22
                          IP: 204.8.108.0/22
                          IP: 206.168.14.0/23
                          IP: 206.168.70.0/23
                          IP: 206.168.98.0/23
                          IP: 2602:f891::/40
                          IP: 2607:1cc0::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:5c:8d:bd:32:68:aa:41:2b:3b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 27 18:12:25 2024 GMT
            Not After : Nov 23 13:45:25 2026 GMT
        Subject: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:b2:25:70:0d:3c:2e:84:6d:e1:ad:82:6c:
                    da:8a:de:ab:75:3b:81:e9:09:bb:d8:d4:02:9c:b8:
                    10:4b:49:b5:1a:bd:9b:47:91:34:b4:eb:af:60:d4:
                    b7:74:37:2c:30:31:4a:74:c5:ff:16:f0:cf:b0:47:
                    a2:ab:11:61:0a:56:e7:36:ac:2b:14:d9:7e:4e:f4:
                    40:e8:1f:5f:e1:27:46:1b:60:77:30:d4:23:94:c9:
                    f5:cb:9f:25:79:7d:1d:3c:af:2f:51:10:2e:23:9f:
                    43:aa:1b:2f:f3:33:18:3b:52:a9:66:8f:66:f3:91:
                    2e:ee:e9:a9:46:ad:16:8f:9e:1a:cb:5d:82:a3:5f:
                    14:d8:99:2d:02:b6:4b:1b:ec:65:9a:4b:36:1e:b5:
                    bc:0e:00:83:07:e9:87:1c:f7:29:79:e8:6d:5b:f3:
                    80:59:5f:e7:94:51:5b:fe:b9:80:8c:4b:b2:c3:6a:
                    87:83:ab:bb:cc:d0:34:06:3e:70:7f:6f:6c:d2:02:
                    51:84:36:46:1f:6a:56:c1:b8:05:45:b2:4c:97:04:
                    6f:1c:fc:d6:44:b4:f2:8a:d1:e6:9f:15:7c:8b:7f:
                    51:9e:48:2e:6b:ff:d7:3b:c2:ae:8c:0e:0f:00:90:
                    5c:f8:76:fa:ca:4c:56:58:d4:b4:32:6f:a0:9c:8f:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0-23.147.90.255
                  107.161.52.0/22
                  204.8.100.0/22
                  204.8.108.0/22
                  206.168.14.0/23
                  206.168.70.0/23
                  206.168.98.0/23
                IPv6:
                  2602:f891::/40
                  2607:1cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18914
                  25855

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fc:35:27:66:51:c4:d6:a8:97:dd:2b:e6:e8:77:64:87:64:
         be:62:5d:70:c9:95:10:38:43:8f:bd:3e:b0:47:67:25:d0:5e:
         0b:ee:5f:51:df:6e:c0:62:23:37:9d:cf:e5:08:10:5f:64:e4:
         49:f0:69:80:e1:eb:4b:43:a8:61:71:47:e6:3f:7e:3d:48:f8:
         18:1e:c5:4b:fc:e4:36:23:28:01:ad:08:75:20:d3:6a:01:74:
         6d:36:69:82:f8:7f:80:08:f9:bc:12:2c:e9:7d:6c:24:04:43:
         59:dc:3f:96:e9:b7:fa:47:90:50:4c:4a:0d:8f:99:71:f7:19:
         f7:af:ec:93:c3:38:16:1e:ac:d6:c3:7f:ee:9b:a5:8c:52:8f:
         2b:5b:18:ca:c6:08:75:a5:a8:5d:45:cb:62:9e:10:39:ec:39:
         6b:2d:59:fc:9b:0f:a4:8c:90:4a:e8:7f:70:ed:12:39:0e:88:
         3c:1f:90:8a:46:55:d6:91:7b:94:33:88:27:03:aa:bb:e0:9f:
         97:60:eb:c5:18:d5:e7:e6:7b:29:60:7b:c2:06:34:22:ea:27:
         32:e6:63:02:d9:fb:4a:a4:ac:aa:27:0d:73:72:6d:70:45:9f:
         4c:68:06:da:f5:f8:05:76:4f:74:43:4e:a5:d1:ab:5c:21:ad:
         b4:d1:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:48:57 2025 by rpki-client