Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
File:                     01586a37-c709-480e-ac0d-b07d855c615b.cer (raw, json)
Hash identifier:          hJ++BF9KIjkYvu0LUB8Wv8uCk2NQUBlEBoy+HW03/3I=
Subject key identifier:   40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584260013205CD626AE79B175100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Jun 2023 00:45:16 +0000
Certificate not after:    Wed 01 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 46516
                          AS: 396931
                          IP: 23.249.161.0/24
                          IP: 23.249.163.0 -- 23.249.164.255
                          IP: 23.249.169.0/24
                          IP: 23.249.174.0/23
                          IP: 66.111.61.0/24
                          IP: 138.128.132.0/22
                          IP: 162.251.136.0/21
                          IP: 172.103.32.0/22
                          IP: 209.242.192.0/19
                          IP: 216.170.118.0/24
                          IP: 216.170.123.0/24
                          IP: 2600:2900::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:60:01:32:05:cd:62:6a:e7:9b:17:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 29 00:45:16 2023 GMT
            Not After : Oct  1 00:45:16 2025 GMT
        Subject: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:0d:c9:e7:e1:c3:67:78:af:9a:a5:e7:53:
                    e5:5c:98:22:b2:14:37:60:43:aa:76:d2:9c:29:a8:
                    a5:6a:7b:15:a0:52:86:45:3a:a0:93:a0:8e:fc:d3:
                    0e:d6:d4:7c:cc:6d:66:c3:d0:8f:65:4f:2c:b6:d0:
                    52:67:e4:57:ed:52:82:d0:1f:77:d9:f7:5d:1e:43:
                    b5:e5:bc:41:eb:fc:93:c1:28:2d:22:41:0b:3f:63:
                    a1:1b:3e:f1:c0:b1:5a:5f:af:4a:ee:3b:b7:61:0b:
                    c3:c0:36:34:0d:92:65:64:94:4a:8f:cb:db:70:cf:
                    95:6a:26:36:53:54:47:70:16:de:b2:66:35:08:13:
                    52:cc:3f:50:7a:8b:e9:16:e4:93:5f:7a:5b:82:65:
                    31:16:17:12:73:12:9c:19:09:c5:ba:81:e5:72:1d:
                    98:ff:c4:22:52:cb:ea:0e:73:ae:2c:11:5f:dd:df:
                    5a:fb:b3:7f:d5:88:a5:3a:e4:e2:0a:bf:c6:33:53:
                    d2:1d:07:5a:a4:b2:72:62:52:fb:1a:b5:77:cb:73:
                    ea:14:12:e6:e0:fc:b1:fc:96:c8:a1:4d:c0:5b:94:
                    a5:d7:74:28:3c:7e:f3:33:cf:b4:54:ab:2b:9e:71:
                    99:9a:fa:cb:06:0a:2b:03:24:6b:c2:3e:bd:52:e0:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.161.0/24
                  23.249.163.0-23.249.164.255
                  23.249.169.0/24
                  23.249.174.0/23
                  66.111.61.0/24
                  138.128.132.0/22
                  162.251.136.0/21
                  172.103.32.0/22
                  209.242.192.0/19
                  216.170.118.0/24
                  216.170.123.0/24
                IPv6:
                  2600:2900::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46516
                  396931

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:dd:57:35:46:43:52:ba:ef:e5:d5:94:4c:ea:3b:1d:f7:
         a4:94:e3:12:6c:89:5b:8a:c5:26:c1:d8:74:ba:9e:4f:c5:5b:
         69:bd:ca:b0:a6:0e:de:c9:77:a1:b7:83:70:ea:72:63:18:f7:
         12:3e:66:a6:f2:41:be:07:1e:de:ae:c2:d6:48:c6:01:61:c0:
         91:49:2b:4c:03:e7:c5:02:bb:fc:6a:6a:d0:b5:05:03:9d:52:
         15:1a:83:c1:e9:17:96:5d:5c:f9:64:14:44:9c:f2:a1:44:6c:
         23:0a:02:c3:37:6c:cb:29:a9:f8:f3:da:3f:40:35:26:df:16:
         41:df:0b:cb:52:c0:c3:77:03:ab:d5:e2:e6:3d:c9:aa:51:90:
         93:db:6f:c9:00:22:fe:75:15:2b:b3:fb:de:5f:74:05:f0:66:
         10:91:22:c5:d9:46:a7:ae:b7:9d:b1:e5:5a:c6:71:4b:70:5e:
         66:e3:16:1f:6c:74:85:ae:17:9e:48:25:04:40:18:c4:cd:36:
         6c:0c:1b:0f:ae:74:25:1d:7e:7b:f9:06:93:a5:32:4c:2a:20:
         8e:5b:2b:33:d2:77:86:f7:b0:49:0e:e9:38:97:84:96:0b:e2:
         1c:52:bd:2c:3a:5a:59:d1:73:4f:57:be:1f:f8:f3:b3:ea:27:
         6f:c1:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:43:44 2024 by rpki-client on console-ams.rpki-client.org