Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6fa4d963-f88c-4053-b543-645db20089fc.cer
File:                     6fa4d963-f88c-4053-b543-645db20089fc.cer (raw, json)
Hash identifier:          DNk31I5GkkV5hPd+6dsHf9+qJoBeAQSDKDMlV/CQ3ns=
Subject key identifier:   43:AB:E3:17:68:5E:13:E2:FE:44:47:52:39:1E:D8:7F:1F:17:09:18
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858494E7D8467FBEF70B38EAE6480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6fa4d963-f88c-4053-b543-645db20089fc/6fa4d963-f88c-4053-b543-645db20089fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6fa4d963-f88c-4053-b543-645db20089fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Mar 2025 15:39:47 +0000
Certificate not after:    Mon 28 Jun 2027 15:39:47 +0000
Subordinate resources:    AS: 18608
                          IP: 74.119.32.0/21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:7d:84:67:fb:ef:70:b3:8e:ae:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Mar 25 15:39:47 2025 GMT
            Not After : Jun 28 15:39:47 2027 GMT
        Subject: CN=6fa4d963-f88c-4053-b543-645db20089fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:3a:18:b1:36:0f:14:cd:d3:7a:cd:88:1e:
                    c6:e7:09:65:c7:b2:51:2d:0d:64:3e:3b:f6:0c:ad:
                    fe:96:5f:48:2d:12:13:8c:d7:b3:63:6d:8d:8e:a4:
                    ec:b9:13:f5:f1:bf:60:72:ee:78:9f:74:0e:c6:9d:
                    51:69:68:ec:65:20:f0:eb:db:30:b2:7a:51:37:40:
                    8b:b4:ac:a8:c2:b2:e5:dd:c4:84:b3:60:ee:76:4b:
                    92:e1:16:c2:51:7c:97:fc:8f:fa:7a:b9:9e:08:83:
                    1c:35:7d:4b:85:93:f0:71:42:c3:d8:09:d8:ee:64:
                    48:31:2c:d9:d6:28:8c:6e:90:51:8a:f0:ea:42:89:
                    1c:ba:88:85:75:c6:23:19:27:ec:30:94:8f:56:f4:
                    ca:c7:0d:fe:15:05:e0:a3:00:14:3e:6f:19:b7:2a:
                    e5:aa:30:a5:5b:4c:44:b7:f0:e8:ef:d9:2b:a0:52:
                    9c:b8:90:10:c1:86:53:a1:df:5d:17:db:ed:dc:f4:
                    27:52:64:4f:b9:d8:7b:54:6b:20:b6:5e:5c:eb:e7:
                    c0:63:c9:48:a2:88:78:49:88:ea:7d:e7:ec:9b:b1:
                    01:3c:85:8f:31:83:da:29:93:0c:c8:9f:34:74:6d:
                    48:a2:1e:4f:87:61:a1:04:3d:d6:42:be:d3:89:b8:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:E3:17:68:5E:13:E2:FE:44:47:52:39:1E:D8:7F:1F:17:09:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6fa4d963-f88c-4053-b543-645db20089fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6fa4d963-f88c-4053-b543-645db20089fc/6fa4d963-f88c-4053-b543-645db20089fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.32.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18608

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:92:4a:6b:67:ab:54:12:a3:14:90:48:e2:da:0a:20:4e:
         8c:5c:cc:01:53:87:2d:90:f6:bc:c5:36:80:34:b6:f6:b4:8f:
         dc:9b:72:af:bd:dd:20:3c:fd:8b:cb:eb:b9:54:7d:f2:7d:d0:
         63:f4:2f:73:a4:0b:bf:47:17:5a:e9:ed:72:40:25:c4:3d:cf:
         bc:f6:01:c6:78:95:51:a2:2d:97:69:b1:31:f7:c5:ed:ee:6a:
         58:7c:15:d4:f1:06:2a:f6:37:a8:16:ea:5d:10:30:52:77:12:
         6a:d8:16:b7:16:c9:66:8b:84:5f:81:21:db:13:71:45:78:fe:
         e3:b6:d0:dc:10:9f:57:51:dc:3e:3d:9f:cd:ca:c5:84:66:f6:
         72:17:34:2a:ef:c9:e0:87:cd:63:f4:f7:f8:0d:66:ee:5d:65:
         38:74:05:f1:3a:c9:2d:8b:01:f7:9c:5f:df:00:ef:85:81:95:
         d9:e4:ed:49:c7:6d:68:ec:87:54:4b:ac:33:6a:c4:5b:eb:89:
         5a:d7:e8:2c:b2:53:09:80:0a:19:ba:69:d2:ce:08:5a:b5:46:
         82:69:c9:30:af:8a:1f:8c:15:0f:71:5e:2d:76:af:94:5b:52:
         1e:f4:16:a8:03:d8:c4:cb:e8:d3:a7:cb:a8:75:58:10:b6:a1:
         c9:7e:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:26:18 2025 by rpki-client