Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
File:                     65c5bdcb-94ea-482f-989f-a6367adb24b4.cer (raw, json)
Hash identifier:          OgAkBnUGawhvnxypIgpuuCGixE4pU1mfQsk8ekcoRFQ=
Subject key identifier:   1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E483511B56529877401CA5A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 14 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 27630
                          IP: 67.43.160.0/20
                          IP: 69.166.0.0/21
                          IP: 72.34.224.0/19
                          IP: 207.246.192.0/20
                          IP: 208.122.224.0/20
                          IP: 2607:f350::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:1b:56:52:98:77:40:1c:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 14 19:06:39 2025 GMT
        Subject: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6a:ce:0e:01:62:c0:6b:f1:61:2c:eb:a1:3c:
                    7b:cf:0e:d6:3b:17:87:53:ea:74:b1:6b:f0:19:8c:
                    d8:2f:0f:99:36:98:ac:a2:4e:1f:d1:17:cb:64:b5:
                    cd:1a:e1:62:74:9b:98:1e:7f:b9:ea:e8:29:00:92:
                    70:7f:ac:58:48:02:50:ce:cc:74:60:17:94:43:8c:
                    ed:f1:cc:60:88:70:44:dc:5b:66:8e:a8:29:4e:85:
                    ed:76:22:99:e2:20:8a:0f:3f:6c:58:39:65:7c:e0:
                    cf:72:7e:2a:d6:66:82:0c:3d:27:d9:0b:98:a0:7f:
                    5f:0a:29:fb:2b:92:e8:86:b1:8a:a7:47:f4:3b:04:
                    22:e1:43:70:d2:12:c3:60:29:38:d6:08:4d:93:14:
                    97:50:da:95:9b:6e:55:b7:ab:ef:4b:a4:f3:73:9b:
                    37:e1:8f:2d:2a:6e:9e:2d:46:55:1f:e9:1b:20:f2:
                    c7:3c:2f:ef:c2:49:ba:dc:7d:10:a0:58:dc:56:19:
                    f2:e5:c9:13:fe:98:ec:5b:23:16:20:47:27:53:ca:
                    f3:fc:ee:57:57:f8:41:fe:a7:83:02:24:34:c3:0c:
                    a2:54:08:33:21:6a:34:a9:1e:0b:f7:2f:36:55:e0:
                    4c:ea:ef:96:2c:87:ae:19:2f:97:06:24:f7:24:9f:
                    bf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.160.0/20
                  69.166.0.0/21
                  72.34.224.0/19
                  207.246.192.0/20
                  208.122.224.0/20
                IPv6:
                  2607:f350::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27630

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c1:fe:5d:6d:3c:d6:a7:fa:17:39:58:9a:0b:aa:35:1b:ba:
         9a:13:4c:fc:d5:ba:88:ee:4b:b1:6c:85:ff:6d:7e:ed:27:30:
         f0:61:eb:cc:08:05:c1:2f:ac:8e:ec:58:52:35:8a:09:be:a7:
         62:ea:51:8d:99:e1:a4:35:d4:42:7a:be:1d:63:83:ff:25:55:
         f9:ea:de:da:92:a7:ee:52:d7:e6:12:2d:cf:df:6e:af:d3:1f:
         15:52:49:4a:0a:57:5c:4d:8c:1e:d8:d7:1a:7b:6d:a8:d6:bc:
         ff:c3:ee:b3:07:ae:50:75:c6:8d:2e:5a:ac:a6:a3:d6:a4:e1:
         66:7a:40:59:5d:fc:0c:25:94:66:8c:7b:05:47:56:e2:ef:51:
         ca:81:7f:30:ab:92:4f:34:e3:79:1c:7c:18:fc:b0:15:b6:9d:
         f9:09:36:68:b2:ab:de:1a:53:24:f1:5e:5f:7c:b3:a6:1a:08:
         cc:af:1d:dc:f3:32:fe:ec:46:4d:a6:ce:3b:61:3c:1a:b9:b8:
         b9:75:c2:ad:3c:5e:94:13:84:61:1d:43:89:72:15:d7:c7:63:
         72:9c:2d:78:b2:4f:9c:d9:1d:84:3d:a2:1f:92:05:33:93:66:
         b1:ce:92:9a:2f:e4:2b:b3:e3:36:34:88:f1:0a:3a:7e:a0:61:
         15:ab:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:04:33 2024 by rpki-client on console-fra.rpki-client.org