Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
File:                     26f87379-b07b-41fb-8976-6fd9e7149fda.cer (raw, json)
Hash identifier:          Zkea5jCyytHmONQ+gapkAmFocrBp+wrqZ/ne1blOfS8=
Subject key identifier:   B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E4834EEF2E7911B7589C8200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 29 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 19016
                          IP: 24.245.224.0/20
                          IP: 64.93.96.0/20
                          IP: 142.0.240.0/20
                          IP: 161.129.128.0/21
                          IP: 216.36.128.0/18
                          IP: 2607::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:ef:2e:79:11:b7:58:9c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 29 19:06:39 2025 GMT
        Subject: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:5d:bd:88:be:d4:7b:36:cc:24:78:d5:9d:
                    46:3e:9f:20:bd:e1:32:1b:b0:4c:8b:88:6d:89:a2:
                    af:3b:cf:50:a9:a4:e3:34:ec:41:99:33:4d:e2:b2:
                    ff:45:d2:a9:99:e9:ea:89:91:55:df:56:90:33:59:
                    f7:3f:33:7d:65:bd:92:30:11:7c:34:a7:14:35:d6:
                    44:38:93:5c:20:9a:45:6a:65:94:89:5b:96:56:56:
                    85:8d:7f:08:7d:31:4d:09:54:b4:4d:4c:46:81:1f:
                    92:cc:63:f3:fa:68:01:04:01:f8:57:5c:7b:b6:f2:
                    c0:21:01:cd:65:ca:16:75:69:67:be:52:61:b7:ea:
                    b1:2e:e7:85:10:53:aa:d5:5c:7d:72:b0:b1:33:58:
                    8c:2d:e5:36:d7:c2:8f:cf:7b:8c:6c:24:e1:cd:40:
                    8f:32:13:4e:7e:2e:94:c8:d8:ed:27:20:a1:8a:f5:
                    86:d1:4a:50:9f:84:d6:4a:2a:bd:06:af:f9:0f:18:
                    5a:98:af:4e:52:98:02:44:3a:63:b6:42:0a:9e:13:
                    b7:b1:da:0e:bb:40:99:f5:5b:52:56:cb:5b:5e:af:
                    f4:3e:12:3e:06:06:4e:46:38:94:1c:7d:5d:2d:8d:
                    1a:21:ad:08:d7:52:8d:f8:85:a4:7a:03:cf:2d:5b:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.245.224.0/20
                  64.93.96.0/20
                  142.0.240.0/20
                  161.129.128.0/21
                  216.36.128.0/18
                IPv6:
                  2607::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19016

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:31:61:70:fb:ce:a0:1e:d3:52:5d:3f:27:20:2d:3d:43:7c:
         6d:c4:fa:e0:22:b4:f9:fa:94:d2:94:3b:d1:20:a6:b3:91:44:
         71:f3:a4:58:d1:42:53:15:cb:87:b7:3f:12:4d:f2:74:f0:de:
         bb:29:85:2e:11:aa:cd:f1:8a:bd:21:57:b9:3d:e7:09:95:ed:
         16:01:92:49:3a:68:47:24:52:4b:69:c5:71:b4:06:57:3b:bc:
         b7:61:3e:64:3f:38:50:6f:aa:87:54:c5:08:e8:e6:3e:35:a9:
         c7:90:b2:ed:8d:b3:b7:94:c8:c4:d8:0c:e8:13:47:56:48:7f:
         80:e7:51:2f:fa:f8:55:19:65:a4:fd:82:14:73:e4:89:55:79:
         56:0e:71:08:0b:0d:b0:71:bf:cf:e8:37:30:a9:80:a6:31:9b:
         dc:40:26:4a:7f:a9:03:1f:11:b7:8d:9f:06:34:09:48:23:d8:
         e8:13:05:70:56:1b:da:f1:33:2b:55:8b:2a:8b:7d:59:73:eb:
         a1:1d:cf:dc:c4:3f:47:8f:04:07:86:8f:4a:71:82:86:25:ae:
         e2:78:e1:b7:12:61:f4:33:26:0c:d8:15:a4:11:fd:c0:56:5d:
         14:3f:d0:cf:42:4b:a1:37:05:37:40:40:e7:aa:fc:b3:bb:50:
         c7:81:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:02:41 2024 by rpki-client on console-fra.rpki-client.org