Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
File:                     9825dda6-0df7-4c35-af65-4bb69cf71053.cer (raw, json)
Hash identifier:          QQJOdHP7x4E1FSWwhw5teHCavEHNsI0yr6DpAVEZxeA=
Subject key identifier:   0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841EAC07621C5F9C45B9C72DB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 May 2023 00:45:16 +0000
Certificate not after:    Wed 20 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 16943
                          AS: 21962
                          IP: 199.245.188.0/24
                          IP: 199.248.230.0/24
                          IP: 208.74.56.0/21
                          IP: 208.80.200.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:c0:76:21:c5:f9:c4:5b:9c:72:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 18 00:45:16 2023 GMT
            Not After : Aug 20 00:45:16 2025 GMT
        Subject: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:c5:32:e2:07:fc:65:3f:2f:bd:f7:fb:c4:
                    52:1a:49:55:42:95:cc:41:59:de:c0:08:f0:12:c4:
                    85:84:f3:17:a0:f0:ef:cf:d3:eb:ed:d8:da:ed:b0:
                    f1:86:a1:20:77:df:eb:70:3d:ad:0c:4e:c3:cb:b2:
                    b1:3e:2b:2c:c6:f2:6b:d4:b4:32:8a:a4:11:5f:78:
                    9f:43:87:2b:99:91:0d:61:01:2f:1f:78:6c:14:b0:
                    45:4a:ac:83:01:c5:af:99:54:5e:b7:bf:f0:5d:af:
                    ca:2d:d6:bc:81:fc:15:dd:01:e7:c1:6b:b3:95:c5:
                    80:87:f1:9f:de:5a:e0:fd:d0:7e:da:c0:df:0b:8d:
                    fc:45:97:60:8d:fe:57:f0:8d:50:5c:3f:e5:49:66:
                    b0:86:1a:ff:cc:b4:e8:27:a2:62:2b:7a:67:86:7b:
                    42:09:61:b9:4f:21:cf:f2:df:c6:5a:64:e5:bd:65:
                    5a:2c:3c:17:19:b9:93:fc:70:59:3e:70:6f:f4:fd:
                    44:a8:f0:ca:b0:01:8f:ab:f2:c5:be:3a:d2:49:ed:
                    e8:a2:4e:4e:41:c6:84:63:05:d1:e5:04:8a:b9:90:
                    ab:f2:65:c7:0b:4d:c3:01:1b:a9:f3:1d:c7:f6:7d:
                    14:9d:50:ca:13:48:bb:0e:e1:1f:df:25:1e:42:96:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.188.0/24
                  199.248.230.0/24
                  208.74.56.0/21
                  208.80.200.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16943
                  21962

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:07:ac:85:38:8a:d6:45:32:62:34:f0:c8:e9:39:ab:0a:a5:
         84:df:0d:e0:70:35:14:05:02:d4:a1:74:81:e0:a5:a5:d1:be:
         60:3e:c4:af:b1:c1:0b:58:04:99:f3:85:68:47:4d:99:33:ca:
         63:18:79:6b:f7:46:c6:05:2a:5e:29:da:31:d3:9e:64:71:c2:
         af:69:2d:96:c5:fb:4d:bc:c1:99:a3:b5:42:32:5f:39:37:ba:
         c6:8a:52:ed:59:fa:c7:7e:53:28:3e:91:d6:8c:c5:b1:b6:45:
         4f:58:b9:c4:23:3f:4b:0f:ff:55:ef:83:00:f2:98:2b:15:74:
         61:84:c8:ca:68:22:23:82:d1:53:b4:4d:cd:70:fe:11:a9:2a:
         52:71:1f:e7:20:a6:c7:ab:39:0c:e4:d5:bf:22:09:07:63:80:
         69:de:22:ac:74:f7:0a:a6:dd:3a:ad:69:f5:62:22:d4:1c:17:
         4f:59:ab:92:ac:80:2a:86:e3:e6:ac:11:5e:48:a8:30:7e:0f:
         4b:fd:fd:ce:dc:0d:ac:8a:53:47:63:2f:dc:b1:dc:9d:06:61:
         02:96:e9:e7:5f:ff:a9:64:45:38:69:83:fa:e2:b7:72:78:1d:
         95:f6:fd:5f:b5:b1:eb:ff:0a:5c:8a:76:2e:33:f3:6c:1c:30:
         8d:f7:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:45:27 2024 by rpki-client on console-ams.rpki-client.org