Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer
File:                     7f6f21d4-30bb-4323-bd07-2383bae60aac.cer (raw, json)
Hash identifier:          DgWRXQbrJAOOltIKcqLTzuDnkSQF4tdH5AkanBV3cpk=
Subject key identifier:   CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285842C1B7234BEE803D12E6855B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Aug 2023 00:45:16 +0000
Certificate not after:    Wed 05 Nov 2025 01:45:16 +0000
Subordinate resources:    AS: 14860
                          IP: 64.88.192.0/19
                          IP: 64.209.208.0/21
                          IP: 173.209.64.0/20
                          IP: 192.154.132.0/22
                          IP: 198.36.48.0/20
                          IP: 198.203.0.0/22
                          IP: 208.89.24.0/22
                          IP: 208.123.96.0/20
                          IP: 2604:5680::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c1:b7:23:4b:ee:80:3d:12:e6:85:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  3 00:45:16 2023 GMT
            Not After : Nov  5 01:45:16 2025 GMT
        Subject: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:79:f3:d1:d1:54:d2:82:88:71:e0:5c:08:
                    55:34:e4:aa:db:fa:15:f8:6a:6d:2a:f2:3e:68:59:
                    67:b1:70:e6:83:36:b7:e3:ed:2f:4a:28:a3:7c:ff:
                    75:79:3d:3d:32:c1:9d:75:3e:6c:8d:1d:de:06:66:
                    0f:27:75:e4:6f:8f:36:24:5d:db:85:bd:38:5a:23:
                    17:3a:2b:48:9f:41:46:4f:e7:f5:7d:65:41:bf:bd:
                    70:80:36:5e:09:1c:70:3d:00:08:14:27:f2:f4:3b:
                    4a:8d:f1:33:1d:6a:d5:a3:30:4e:7b:e1:50:4e:24:
                    43:8c:ee:37:4e:85:e6:c1:07:9c:ab:63:64:58:2c:
                    82:27:10:ee:bc:21:77:60:a6:7c:63:e9:1e:22:97:
                    66:a8:1c:bc:8f:f7:ab:5c:10:ed:be:9c:c4:21:83:
                    7f:c4:55:4c:d3:72:a7:41:39:78:2c:59:f1:8a:af:
                    e8:77:0b:91:70:b5:e5:ba:64:19:d4:b4:64:0c:9a:
                    c9:fd:3b:c2:a6:3f:a0:68:f0:a5:28:3c:25:23:94:
                    c4:56:55:57:34:9b:b9:a4:10:cb:74:49:3f:8a:a1:
                    b4:e7:4f:61:6d:24:5a:9a:de:03:b9:3d:a1:82:6f:
                    63:ec:90:61:a9:fc:4c:a2:6a:1f:58:57:1f:d0:26:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.192.0/19
                  64.209.208.0/21
                  173.209.64.0/20
                  192.154.132.0/22
                  198.36.48.0/20
                  198.203.0.0/22
                  208.89.24.0/22
                  208.123.96.0/20
                IPv6:
                  2604:5680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14860

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:e8:8f:59:75:41:0c:aa:0e:d1:31:11:13:2f:0c:31:9b:
         f7:bc:c7:bc:0a:6a:18:1c:c5:ee:fe:38:73:07:c7:d0:df:af:
         70:61:ad:13:d0:48:6c:3f:7e:dc:ab:5f:b0:30:2d:24:d1:02:
         63:18:d4:99:20:b2:d6:27:16:73:f6:fb:45:c7:df:54:9c:5e:
         1f:ea:ab:5c:e4:bd:e4:40:9e:56:99:f0:2c:4a:43:24:5c:30:
         89:14:17:62:a6:73:9a:95:e3:21:1c:b3:d2:21:75:b7:57:65:
         8d:07:b5:ab:3e:9a:ef:88:4f:f3:1f:fe:e3:3a:22:41:83:73:
         25:d9:67:5d:63:ab:39:67:83:7d:61:d0:b3:fc:7f:3e:2f:32:
         f6:d6:74:15:2f:2b:fe:10:18:21:b2:5f:f6:07:59:3c:be:64:
         47:16:fb:8a:9a:26:4f:7a:0c:05:cc:1d:c8:a6:79:a6:e1:eb:
         b9:2b:b3:be:40:64:7b:f8:4a:54:cf:f6:61:43:ed:f7:82:d8:
         55:a8:6d:92:e4:44:68:e0:6e:dd:73:8e:62:fa:b3:93:1c:29:
         23:8a:2d:aa:ad:cd:95:1b:23:30:76:27:6c:14:5b:84:b7:33:
         2a:df:83:fe:78:9d:e3:8e:6c:ad:bb:67:f7:93:a2:77:54:69:
         3b:a4:d4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:45:22 2024 by rpki-client on console-ams.rpki-client.org