Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer
File:                     03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer (raw, json)
Hash identifier:          OLfwY5IgdYiI4S5KDk0EIGyALhAQDg1aDpd1FoV8QAs=
Subject key identifier:   FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
Authority key identifier: FC:16:3C:4B:E3:40:A0:31:6F:1A:FC:1E:8F:C7:EE:FB:00:AA:B6:E3
Certificate issuer:       /CN=da272869-5127-4af6-8053-b8617ccb9de3
Certificate serial:       010D0C9F4328584842D6D7615D259A94F7DDFD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 18:43:07 +0000
Certificate not after:    Wed 24 Mar 2027 17:43:07 +0000
Subordinate resources:    AS: 397730
                          IP: 2602:f761::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:d6:d7:61:5d:25:9a:94:f7:dd:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da272869-5127-4af6-8053-b8617ccb9de3
        Validity
            Not Before: Dec 19 18:43:07 2024 GMT
            Not After : Mar 24 17:43:07 2027 GMT
        Subject: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:09:66:ec:e2:5d:0e:b3:a6:eb:bf:8a:da:
                    87:1c:3d:38:08:bd:62:91:d2:40:e1:8a:b9:ba:87:
                    b4:9b:1b:fd:7d:cb:80:2e:cd:f6:dc:6d:e1:c1:da:
                    8a:15:b5:08:69:f7:de:24:d9:5f:47:5c:6a:82:c5:
                    11:26:9e:3a:0b:1d:c1:b5:88:e0:c3:8b:e0:40:62:
                    7e:8f:7d:84:0d:b3:7f:c7:22:a4:0f:33:22:2b:b3:
                    e9:2a:5c:5d:1f:62:f4:05:e5:b1:1f:1c:e7:7d:6e:
                    57:aa:ba:92:e9:85:bf:27:46:54:65:e7:ab:2b:57:
                    4c:2a:58:9f:db:bc:e1:43:96:47:46:89:b7:f9:3e:
                    9e:98:02:94:f6:23:d6:35:b3:80:b7:d2:bc:3d:d6:
                    29:9b:b4:45:07:da:88:cb:9c:53:96:1c:f1:92:f5:
                    3d:8e:f5:96:17:cc:92:f3:71:d4:8a:7b:c6:64:d5:
                    8f:73:5a:84:b7:a2:57:cd:3d:64:c3:4e:6f:fb:ff:
                    67:c9:66:91:c4:98:89:31:c9:4b:f3:e2:e5:58:d2:
                    fe:a7:20:37:c0:0c:99:ec:e5:51:46:5c:02:1f:e8:
                    c5:09:6d:c6:d1:15:b8:a9:d3:54:2e:f4:f8:c9:7b:
                    ea:b4:fe:2b:b6:7f:a3:72:00:1d:34:de:61:b5:e4:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl

            X509v3 Authority Key Identifier:
                keyid:FC:16:3C:4B:E3:40:A0:31:6F:1A:FC:1E:8F:C7:EE:FB:00:AA:B6:E3

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397730

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:27:98:e5:3c:bf:f2:01:0d:2e:37:7b:67:5a:03:9e:aa:fc:
         f1:23:fa:f0:60:8e:b1:ec:9a:5f:60:8e:23:78:f4:2a:09:3f:
         f6:87:70:36:c9:23:2c:ad:a9:3c:77:6a:4b:74:80:91:ed:04:
         09:a2:09:7a:61:70:a0:0c:86:a2:ed:19:6a:74:96:43:e6:3c:
         bc:4a:22:d4:f5:eb:f3:0b:fd:fe:67:f0:d7:13:71:1e:91:a6:
         44:a0:b0:9c:8e:8a:77:06:fe:4f:42:13:3a:fc:2c:b8:6c:1a:
         48:91:ae:8d:b2:f6:c0:80:59:87:88:b0:ec:12:4c:85:ad:46:
         b2:63:5b:0c:79:77:f3:92:e3:eb:65:59:f1:bb:79:2d:89:9c:
         63:5b:97:cb:93:4f:a9:e4:a8:34:73:18:a2:70:54:cd:20:96:
         f0:d2:bc:c8:fc:22:53:f8:05:49:9d:d4:d1:fc:50:58:07:ca:
         02:e4:a5:00:75:93:cc:ce:ad:7c:88:57:3d:2b:f0:66:da:72:
         13:09:f2:77:59:ad:28:0d:55:14:fe:59:04:d1:1c:69:e7:a8:
         ab:30:12:8d:bb:ab:e4:1d:26:c1:5c:ec:f1:17:c6:9e:90:c6:
         d1:b5:6f:89:1d:ff:c3:cb:95:8a:57:b8:1b:8e:30:00:55:92:
         7b:a6:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 23:45:12 2024 by rpki-client on console-fra.rpki-client.org