Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer
File:                     42804204-aefa-4fac-9d39-1599fa403e46.cer (raw, json)
Hash identifier:          e1Y4h2i5FXH3iqpyjr2085cYMgggbvloN0c9T2Rb9sw=
Subject key identifier:   05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858481A2C2F1941ABC65A4A379300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Dec 2024 05:06:56 +0000
Certificate not after:    Wed 10 Mar 2027 05:06:56 +0000
Subordinate resources:    AS: 401414
                          IP: 23.128.76.0/24
                          IP: 2602:f7c6::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1a:2c:2f:19:41:ab:c6:5a:4a:37:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec  5 05:06:56 2024 GMT
            Not After : Mar 10 05:06:56 2027 GMT
        Subject: CN=42804204-aefa-4fac-9d39-1599fa403e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:49:44:25:d1:8a:2a:ff:91:1f:f1:fe:4d:18:
                    12:11:c2:99:f8:f6:25:92:46:59:d9:27:c8:d4:9c:
                    f6:cd:ba:d4:d5:2c:9f:11:fb:03:ce:56:ab:85:44:
                    a8:e4:d1:d7:4c:70:3b:b5:9b:82:eb:c4:15:57:66:
                    13:48:8c:55:8d:1f:23:83:a5:5b:96:f5:d8:56:39:
                    d7:be:ed:58:0d:ec:df:de:0d:e9:c4:46:3a:48:20:
                    70:e2:1f:72:d7:5a:2a:74:8f:de:37:d7:6b:78:ef:
                    59:20:e0:bc:17:0f:fb:0c:f9:3d:d1:38:ba:ad:32:
                    78:bd:13:6b:9d:2d:f5:54:c5:86:67:07:87:5f:d1:
                    86:ff:6d:8d:24:e3:7a:1e:71:b3:de:53:c1:d0:af:
                    44:e4:21:41:dd:aa:61:ab:96:0b:de:3c:6e:50:66:
                    68:05:04:ba:70:d1:56:f1:65:87:63:5d:05:ac:96:
                    88:84:9c:3b:a7:77:71:c0:03:39:9c:28:90:ba:eb:
                    b2:91:55:f3:e8:00:9b:11:3b:7c:e7:16:ad:19:fe:
                    1f:62:95:bf:75:b0:f1:cb:e7:4b:69:e4:b6:d2:46:
                    95:b9:bd:3c:df:ea:d2:e9:10:79:39:d3:f1:d7:8b:
                    5d:e1:cd:79:9b:e1:c6:52:d6:48:4d:b0:e9:07:ea:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.76.0/24
                IPv6:
                  2602:f7c6::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401414

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d5:41:65:bf:82:b3:47:ee:59:dd:3a:a6:e5:0f:b3:73:fe:
         b0:8f:ae:1e:3f:5a:d9:44:da:87:d3:90:b1:0e:f8:e6:32:f7:
         b4:d7:63:45:b9:52:23:aa:22:44:8f:7b:72:8e:66:4d:d9:a0:
         db:ac:a0:99:b5:00:e2:12:53:2d:8e:7c:88:b5:07:e2:03:bd:
         0d:cd:10:f9:de:a7:fd:78:21:ad:81:28:32:df:8e:29:38:b1:
         9c:c4:b1:f4:d5:b3:6b:e9:6a:c9:79:7a:22:34:f2:88:fc:3f:
         6f:30:a1:e2:a3:94:ea:49:38:27:9f:92:eb:a7:8f:a8:3f:c2:
         94:d8:3e:31:6b:82:4a:2b:ab:87:1d:79:ca:d8:d7:9b:f7:21:
         b1:31:41:d4:5a:30:c5:9a:62:db:b9:87:91:11:b4:79:2b:aa:
         ba:f4:31:27:d7:cf:31:b1:2f:9a:4c:05:cc:5b:dd:d6:f1:3a:
         93:0a:1b:0b:ac:39:76:86:a6:df:9d:37:77:39:e8:42:73:09:
         ba:e0:b8:56:67:b4:cb:49:79:4e:59:b0:b0:a2:01:56:40:a3:
         00:cc:1a:d1:e7:a3:da:8f:dd:ca:db:e1:98:cd:ab:bb:3a:63:
         01:c5:d4:e5:65:0b:c8:a7:26:13:af:b3:15:d9:e2:c5:d8:7e:
         b0:87:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 07:10:05 2024 by rpki-client on console-fra.rpki-client.org