Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82.cer
File:                     8792fa78-8f07-41ad-aaa5-9b445516bf82.cer (raw, json)
Hash identifier:          QrsYdzDjV41BgPtSS+GgLJ1CnYn4uel2TEgNWBQ5lEA=
Subject key identifier:   DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849BCE5430B26190FF1F5677F3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 04 May 2025 04:47:44 +0000
Certificate not after:    Sat 07 Aug 2027 04:47:44 +0000
Subordinate resources:    AS: 26286
                          IP: 23.138.156.0/24
                          IP: 2602:f661::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:e5:43:0b:26:19:0f:f1:f5:67:7f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May  4 04:47:44 2025 GMT
            Not After : Aug  7 04:47:44 2027 GMT
        Subject: CN=8792fa78-8f07-41ad-aaa5-9b445516bf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:e2:ba:55:27:e0:54:7c:6e:69:a3:fd:6a:
                    1b:ed:52:84:db:3f:3c:97:c5:2c:c5:57:c8:8f:c7:
                    13:10:85:e2:1d:e2:69:d0:6c:3d:3d:33:e3:97:dc:
                    97:3b:d7:db:10:62:eb:d9:10:42:4c:ad:47:2a:b0:
                    f2:80:d7:8b:29:8c:d9:79:6c:c2:8c:44:21:2a:b5:
                    86:55:34:3a:2e:fb:d1:7a:c4:1e:bf:e3:29:07:8c:
                    ea:02:80:aa:3c:99:62:e6:9e:84:2c:e3:67:47:75:
                    dc:c4:35:52:4b:8c:66:69:a5:fd:22:c9:ff:9b:2f:
                    04:4b:ba:99:a4:22:9d:3c:e4:8c:e9:fa:44:79:59:
                    f1:70:f1:8d:0d:0f:98:8f:de:9a:e9:7b:24:3a:57:
                    e9:bd:c4:ff:2b:2f:e9:a6:ee:03:56:91:7c:21:21:
                    44:08:c5:63:41:60:e5:0a:e3:bf:eb:05:e1:77:5a:
                    45:4b:68:cb:e3:d8:f7:9e:fa:1b:09:cd:1d:08:95:
                    23:6c:51:8c:42:9b:f5:e5:5c:4d:e1:30:bc:d3:11:
                    e7:0e:e6:e0:5b:06:1d:60:47:c5:e9:b8:88:bd:eb:
                    80:93:7b:84:be:e0:e9:73:d7:89:cf:78:bd:a1:92:
                    23:14:6b:0d:ff:76:37:23:85:ae:d0:0f:52:ed:5f:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:FE:B2:9E:14:63:F6:09:E5:68:DE:A8:F6:01:5B:6C:92:69:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8792fa78-8f07-41ad-aaa5-9b445516bf82/8792fa78-8f07-41ad-aaa5-9b445516bf82.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.156.0/24
                IPv6:
                  2602:f661::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26286

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:0e:9c:45:09:ff:1d:51:e3:46:4b:8a:93:66:7b:25:aa:
         7e:cb:fc:c1:c2:15:5e:c3:27:bd:01:63:18:10:5e:b4:ef:83:
         4b:c9:fa:15:06:49:d1:b5:aa:22:12:1b:4d:c5:51:e5:b6:8e:
         97:8e:37:70:77:b0:78:64:75:ac:6d:fb:96:26:81:b6:10:49:
         8f:d0:e8:b1:3f:a5:2f:1e:ad:da:31:ec:54:08:d0:fc:a4:30:
         c7:00:c3:aa:a1:0a:d1:dd:9f:7b:36:d7:c0:9c:fa:47:4a:04:
         b6:97:9c:4c:1b:9c:ec:30:de:bc:28:5c:ed:34:b0:d4:36:73:
         5e:2f:4c:d2:67:c0:b6:c4:e2:d5:2e:ee:0c:47:da:e1:7a:58:
         ba:18:37:1e:04:ac:d5:d5:cf:87:b2:a5:fd:b5:db:7a:17:32:
         ca:f8:14:c6:8e:a8:66:50:f6:52:c0:c9:88:4f:95:a9:82:45:
         63:03:99:6e:cc:78:43:d3:e3:87:c8:c8:ea:25:5e:00:dc:0f:
         80:f3:81:db:7c:3e:d8:50:07:74:08:74:e8:07:62:1d:7e:f6:
         2c:b1:fb:ac:e6:d4:1e:98:18:34:ca:f0:b0:8d:1e:29:d9:2f:
         46:fa:c1:e5:65:7a:69:ad:1c:ef:8e:9b:7d:72:64:a8:63:8e:
         83:78:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:23:32 2025 by rpki-client