Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104.cer
File:                     84052649-3401-4ba6-ad82-6f310741b104.cer (raw, json)
Hash identifier:          cj4ZSqANy1hfh/dtvxI38fg9+UzZQmGhkDQRmVfXj5E=
Subject key identifier:   C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845174355C46D3D5E55A5A10884
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 Mar 2024 01:45:20 +0000
Certificate not after:    Sun 07 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 19969
                          IP: 66.85.72.0/21
                          IP: 69.195.128.0/19
                          IP: 96.43.128.0/20
                          IP: 104.192.168.0/22
                          IP: 104.218.16.0/21
                          IP: 108.59.192.0/20
                          IP: 172.86.176.0/21
                          IP: 204.27.56.0/21
                          IP: 208.94.240.0/21
                          IP: 2604:5800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:43:55:c4:6d:3d:5e:55:a5:a1:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar  4 01:45:20 2024 GMT
            Not After : Jun  7 00:45:20 2026 GMT
        Subject: CN=84052649-3401-4ba6-ad82-6f310741b104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:c2:e6:89:ba:30:8d:c6:16:26:a5:b8:f7:
                    33:77:15:28:ec:41:ae:ce:c2:9a:12:88:10:bd:ee:
                    0c:77:be:b9:e9:ca:1b:eb:51:71:0f:7e:e8:2d:bb:
                    f9:d6:bf:21:24:af:2f:d5:56:69:d8:c5:d0:fc:a6:
                    29:28:8f:99:69:91:b3:58:d5:7c:48:24:e4:0e:09:
                    93:18:7d:f6:62:13:aa:27:68:f4:0a:70:48:9e:f7:
                    11:48:2d:fb:5d:81:0a:14:db:cb:c7:b7:a7:08:14:
                    0b:35:5d:89:11:86:aa:01:7b:ce:d2:d5:0a:d8:f2:
                    19:5d:76:be:46:de:22:33:2f:80:e8:54:5e:d2:02:
                    82:5c:ce:f2:e6:6f:97:12:a1:24:b7:fc:c9:e3:56:
                    5b:85:e0:8b:58:a4:fd:b0:e9:18:93:48:87:dd:d7:
                    26:36:f8:4b:7f:3b:36:d0:b8:57:81:a3:76:ee:60:
                    f9:cf:27:83:7a:1e:56:24:ae:25:5f:75:5b:97:a5:
                    de:da:be:32:e2:ac:bc:df:e8:8e:a8:66:e6:e3:4e:
                    6f:bf:31:21:dd:24:dc:7d:3f:b9:7e:93:c3:6b:d2:
                    fb:c9:0c:34:ff:f9:62:18:1e:73:65:03:3b:45:1b:
                    2e:08:e9:03:08:5e:17:43:c6:54:9c:5c:b4:9d:55:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7E:94:BF:F8:88:D8:AD:FC:2A:56:CE:FC:62:CA:F7:50:07:B3:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84052649-3401-4ba6-ad82-6f310741b104/84052649-3401-4ba6-ad82-6f310741b104.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.72.0/21
                  69.195.128.0/19
                  96.43.128.0/20
                  104.192.168.0/22
                  104.218.16.0/21
                  108.59.192.0/20
                  172.86.176.0/21
                  204.27.56.0/21
                  208.94.240.0/21
                IPv6:
                  2604:5800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19969

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:49:3c:80:86:e5:33:63:53:50:be:4c:1d:57:ad:c7:b1:f5:
         da:05:8f:55:86:d4:a1:c0:51:7b:5e:2d:79:f5:0d:15:e7:0e:
         1c:c5:cf:8f:06:c7:f3:75:80:b7:78:0b:4b:07:92:a0:b9:e7:
         f7:20:49:97:bb:31:97:da:08:26:23:7d:94:6e:13:d7:f1:2e:
         41:ae:50:0d:e9:37:d6:2e:47:07:83:75:21:07:2d:69:9e:cb:
         c4:5d:3b:fd:d7:e9:de:90:03:6d:72:ac:cc:2a:43:6f:ca:0d:
         13:c0:fb:14:a7:54:05:27:e9:7d:25:a4:b7:a6:3b:19:ec:73:
         2c:f4:b1:12:56:7c:99:b7:28:a1:6d:11:1f:0f:f4:f7:e6:50:
         7a:d7:3a:da:f6:ac:9b:23:11:62:03:cf:09:94:20:89:d2:34:
         08:15:97:68:48:2f:a6:02:f3:d4:c7:57:cf:0f:7f:61:59:41:
         99:13:70:1e:83:aa:48:99:d2:80:9d:55:bf:87:38:79:6b:91:
         14:d4:b8:53:cb:47:36:37:ac:94:52:06:6a:0e:fc:b3:b5:16:
         49:33:ac:0f:65:37:e5:e0:3c:10:39:4a:08:0a:24:22:7b:30:
         df:67:32:24:f1:44:47:9d:6f:a3:fa:92:6b:80:4a:22:59:83:
         68:a7:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 02:04:17 2024 by rpki-client on console-fra.rpki-client.org