Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69.cer
File:                     028c0596-c3dd-44df-9761-677e68794c69.cer (raw, json)
Hash identifier:          +qUPW12JVD/7XbzAsK9Yk1Oern4pr+O16oWt6Roykgs=
Subject key identifier:   D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858441ECC6B57D9ADDDF63F3BF580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Dec 2023 01:45:16 +0000
Certificate not after:    Tue 10 Mar 2026 00:45:16 +0000
Subordinate resources:    AS: 14371
                          AS: 26145
                          IP: 65.18.204.0/22
                          IP: 66.171.40.0/21
                          IP: 68.235.64.0/18
                          IP: 104.219.196.0/22
                          IP: 162.254.64.0/22
                          IP: 205.149.144.0/20
                          IP: 206.223.125.0/24
                          IP: 208.77.24.0/22
                          IP: 209.191.192.0/19
                          IP: 2001:504:29::/48
                          IP: 2600:6400::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1e:cc:6b:57:d9:ad:dd:f6:3f:3b:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec  6 01:45:16 2023 GMT
            Not After : Mar 10 00:45:16 2026 GMT
        Subject: CN=028c0596-c3dd-44df-9761-677e68794c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:67:d2:35:50:54:9b:cf:20:5e:56:63:a4:22:
                    3c:22:a1:ed:c0:0d:00:46:c9:77:45:40:bb:ec:6b:
                    65:00:aa:06:69:fe:20:2f:bc:43:f2:62:31:58:cc:
                    06:f8:22:c5:2e:ca:0e:32:2d:52:75:6d:47:7e:9e:
                    0e:5f:dc:9d:94:ea:72:31:7d:1e:a4:9b:f8:43:26:
                    90:ed:e9:fe:7a:70:8e:74:8c:10:aa:ad:05:66:7c:
                    22:fa:07:ff:aa:82:44:12:2a:6d:79:0c:e5:fc:1d:
                    a2:d9:7c:e8:cb:6d:9c:36:6e:05:e7:02:19:3b:64:
                    ae:c2:6e:a9:99:6c:49:e3:6d:83:b1:19:f6:4d:dd:
                    70:00:8c:5c:df:13:a3:0a:b6:62:f3:ea:85:5c:04:
                    ed:c7:f4:9c:e2:d0:c1:c4:e8:59:85:ba:11:ec:60:
                    28:1d:fa:96:61:6e:fd:45:32:2c:a8:8a:96:51:f8:
                    3a:b3:02:d4:3a:7f:31:e9:42:f8:43:1f:c6:9d:74:
                    45:34:84:a9:0c:56:b4:e3:c1:51:28:8c:48:25:71:
                    a8:86:0d:eb:1e:4b:15:0d:5b:72:7d:b3:36:8a:37:
                    db:e6:d1:d3:f2:33:7b:d1:09:a3:38:ee:01:ee:d4:
                    5e:2e:24:41:a5:39:a2:77:66:b8:d7:f2:68:07:55:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7B:CD:00:70:2B:C9:8A:12:7A:8D:0E:E8:3A:8E:0D:D2:08:8B:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/028c0596-c3dd-44df-9761-677e68794c69/028c0596-c3dd-44df-9761-677e68794c69.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.18.204.0/22
                  66.171.40.0/21
                  68.235.64.0/18
                  104.219.196.0/22
                  162.254.64.0/22
                  205.149.144.0/20
                  206.223.125.0/24
                  208.77.24.0/22
                  209.191.192.0/19
                IPv6:
                  2001:504:29::/48
                  2600:6400::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14371
                  26145

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:d9:ec:0a:38:c4:72:cb:21:cf:e1:ce:11:dd:f8:c4:35:
         21:5b:ac:6c:f7:84:70:d4:94:90:77:f0:9a:b9:15:71:9f:32:
         d6:cd:d4:3e:62:68:ca:be:04:84:3a:25:8e:95:7f:ff:a1:2b:
         7a:85:e1:73:9f:35:d3:85:e5:26:8d:92:b9:c1:13:63:67:e3:
         65:c8:c8:7a:9f:ba:e5:e5:59:ff:07:63:80:a3:22:66:8b:cd:
         09:08:e5:8a:10:45:f5:da:50:c6:9b:4c:4e:ca:2d:71:d7:c6:
         5f:0c:18:a3:e5:73:63:22:11:3d:2a:31:4e:e8:30:5a:5e:19:
         6c:75:c9:45:a4:ee:72:a5:72:18:64:db:39:ff:be:ce:ca:69:
         30:8b:3e:2f:32:56:67:19:66:83:c8:5c:44:af:50:da:1a:01:
         c3:32:09:e4:17:dc:5f:1b:4e:6f:5f:56:26:35:17:8a:32:97:
         52:21:58:4a:f0:ed:fa:f8:14:2e:4a:e0:a8:cd:d5:40:c9:cb:
         74:df:93:ce:5e:15:b8:ff:33:4f:69:c9:0e:98:04:22:70:84:
         45:17:7c:1d:d2:0b:d1:01:86:57:e9:2a:40:2a:86:12:09:16:
         db:81:b2:61:ac:03:7d:c3:1f:28:fe:7b:3a:92:46:4d:4f:33:
         2e:d2:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:41:58 2024 by rpki-client on console-ams.rpki-client.org