Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
File:                     30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer (raw, json)
Hash identifier:          hz6wM1A9HNOaJhOnwzb1mleVJFJheukGeADcnFOUCd8=
Subject key identifier:   0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Authority key identifier: F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70
Certificate issuer:       /CN=482a4d06-ced8-4851-80b2-60d3da11fd6f
Certificate serial:       010D0C9F4328584A32AAC1D2FB69C82B1B484D7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
Manifest:                 rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
caRepository:             rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/
Notify URL:               https://rpki-repo.canops.org/rrdp/notification.xml
Certificate not before:   Sun 15 Jun 2025 09:15:14 +0000
Certificate not after:    Sat 18 Sep 2027 09:15:14 +0000
Subordinate resources:    AS: 32591
                          IP: 23.140.52.0/24
                          IP: 2602:f633::/40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:32:aa:c1:d2:fb:69:c8:2b:1b:48:4d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482a4d06-ced8-4851-80b2-60d3da11fd6f
        Validity
            Not Before: Jun 15 09:15:14 2025 GMT
            Not After : Sep 18 09:15:14 2027 GMT
        Subject: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:72:ed:34:9a:34:b5:00:21:50:13:92:1f:
                    01:ba:a9:f5:71:5d:f2:dd:dc:ad:d1:69:f2:79:44:
                    d9:2d:37:50:2e:71:79:a4:f7:68:98:df:96:0f:a4:
                    77:65:fd:fb:89:6d:a9:f1:5e:03:cb:c2:ce:6a:bd:
                    31:a3:2c:31:b2:d2:a9:49:2d:16:04:89:94:71:44:
                    a9:8e:cb:4f:7d:e3:38:6c:96:f9:59:81:4e:14:14:
                    d6:d9:cd:96:2c:e5:bd:2f:ac:f1:5b:d5:90:48:df:
                    20:dd:f5:1f:b8:30:0e:71:de:0c:ae:d3:0f:8d:82:
                    07:10:5d:ad:a6:04:af:e8:02:14:a4:8d:6f:a2:80:
                    70:f6:5a:12:15:59:e0:81:3c:96:99:be:8e:e4:5c:
                    e8:01:60:cb:f7:df:31:15:b1:58:86:b7:aa:5d:92:
                    06:4d:67:65:5a:40:5a:f6:09:2b:5e:a6:43:b9:3c:
                    ba:66:f0:75:2f:a1:e0:78:2d:2c:e5:2f:6b:79:a5:
                    ef:bc:77:5c:02:ba:07:0b:1a:90:db:f8:ed:65:8a:
                    d6:a6:06:53:a7:5f:2b:7b:08:3f:42:47:ac:f3:21:
                    ae:6f:55:1a:76:42:a1:a8:39:e8:b8:c7:1e:47:91:
                    aa:56:6e:70:cb:79:85:8f:f3:b4:b7:57:49:f1:48:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/
                RPKI Manifest - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                RPKI Notify - URI:https://rpki-repo.canops.org/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl

            X509v3 Authority Key Identifier:
                keyid:F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.52.0/24
                IPv6:
                  2602:f633::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32591

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:79:d7:b4:e9:44:24:35:af:0a:3b:a5:46:46:44:a3:ff:c4:
         6c:12:ce:67:10:fe:0f:9c:29:8d:2e:95:6e:14:33:44:e6:1e:
         64:0b:78:34:ac:9e:dd:df:be:1d:a9:51:f1:53:84:a5:dd:9a:
         29:92:02:e0:d0:5f:f1:d4:29:31:d7:9d:ba:a3:30:86:ad:28:
         67:3e:b8:32:d9:48:3c:91:03:03:73:66:9f:ad:fb:2e:5b:21:
         6a:14:91:cc:eb:7c:c5:8f:d3:9f:1d:ca:76:d5:18:6d:c0:89:
         79:7c:ed:4b:1c:fc:a4:eb:f3:aa:85:d1:bb:fd:8d:32:ca:6d:
         4e:83:dd:96:b3:2b:9e:11:fc:06:1f:01:80:a2:56:04:f7:67:
         81:8b:07:9d:71:27:fe:44:f8:0e:b5:9f:c8:8d:46:5d:92:f3:
         36:e5:78:67:0f:03:19:79:ac:05:79:30:25:7a:38:e2:7a:4e:
         4e:db:45:7c:5e:04:08:95:cb:30:e6:0e:8b:ce:8c:35:4a:52:
         78:6c:65:c6:02:82:14:de:51:30:05:34:e0:9e:96:22:36:ba:
         0a:ba:48:85:11:bb:96:39:bf:89:3d:ab:15:23:18:65:59:b2:
         ed:b1:e6:8d:05:c9:00:f4:eb:90:dd:79:4b:d9:2d:e3:c7:18:
         17:99:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:51:21 2025 by rpki-client