Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
File:                     9bc88207-e7c7-453e-a4ab-77b72152c33a.cer (raw, json)
Hash identifier:          J0t2xnwEf+bvUGE9BIQ5IPi+YSXycq8BfEOnp47T+y0=
Subject key identifier:   49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844E18D2CD0BEDEB683CA600580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Feb 2024 20:00:28 +0000
Certificate not after:    Sat 07 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 22379
                          IP: 65.49.240.0/20
                          IP: 134.65.8.0/21
                          IP: 134.65.32.0/21
                          IP: 134.65.174.0/23
                          IP: 149.20.70.0/23
                          IP: 160.32.64.0/18
                          IP: 160.32.248.0 -- 160.32.253.255
                          IP: 173.46.224.0/19
                          IP: 184.75.144.0/20
                          IP: 199.73.12.0/22
                          IP: 209.127.208.0/22
                          IP: 216.52.100.0/23
                          IP: 216.86.72.0/21
                          IP: 2606:5e80::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e1:8d:2c:d0:be:de:b6:83:ca:60:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 13 20:00:28 2024 GMT
            Not After : Jun  7 19:06:39 2025 GMT
        Subject: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:fb:c6:55:d9:e5:bb:3f:24:ba:c0:e1:48:
                    4c:93:8d:1e:bf:00:02:89:7a:d1:c6:ba:06:24:8b:
                    ad:be:fa:6c:61:4c:d1:7f:ac:d1:c5:7d:74:68:64:
                    db:66:f9:18:7d:16:50:25:bc:56:8c:d5:34:43:6d:
                    eb:2b:d1:16:6d:cf:18:ff:1b:2b:e2:2b:d9:92:78:
                    47:03:5a:49:f3:33:75:3a:29:71:09:91:65:6c:88:
                    2c:e9:f6:fe:0c:1f:ab:5e:db:06:e2:6e:16:d1:64:
                    f1:18:68:0b:d5:58:bc:e0:f1:cb:56:da:0b:73:52:
                    72:e0:c6:21:82:f1:3d:d2:4a:7d:f8:96:83:f7:b3:
                    b5:05:cb:fe:d6:ae:f9:2b:01:97:04:22:76:c6:1c:
                    7d:d8:4d:94:8e:d8:0d:4a:15:2f:55:83:63:69:ce:
                    a4:37:e7:de:4c:48:94:ad:2e:22:53:6d:22:f8:97:
                    f0:57:1b:1e:c6:50:6f:bc:7d:92:3e:fd:62:85:15:
                    19:0f:eb:30:ca:79:c5:33:2f:78:16:b6:07:25:44:
                    a3:82:1f:1b:2e:f5:ee:b0:8a:55:4b:92:28:eb:df:
                    f7:00:5c:8e:f2:a9:80:f1:b4:ef:bd:d9:ca:1e:86:
                    13:6e:5b:48:e4:95:0d:27:cb:8b:c1:91:9f:22:01:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.240.0/20
                  134.65.8.0/21
                  134.65.32.0/21
                  134.65.174.0/23
                  149.20.70.0/23
                  160.32.64.0/18
                  160.32.248.0-160.32.253.255
                  173.46.224.0/19
                  184.75.144.0/20
                  199.73.12.0/22
                  209.127.208.0/22
                  216.52.100.0/23
                  216.86.72.0/21
                IPv6:
                  2606:5e80::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22379

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:95:05:2e:1f:72:42:e2:4d:3d:ef:71:9d:2a:b2:88:12:3b:
         8f:d2:ac:8d:ec:a7:7a:05:49:c8:b3:06:84:13:70:da:f3:33:
         74:b7:fc:ff:3a:ff:28:56:1b:78:d5:41:59:bc:a2:38:b2:1b:
         83:61:30:1b:e3:3e:67:da:fb:d5:f4:f9:75:b8:a9:75:33:4a:
         68:c5:2c:37:55:3e:26:88:db:eb:52:b5:21:ed:f0:41:83:27:
         2f:02:4d:2a:f3:d1:27:3d:0e:0d:82:65:57:c7:68:b0:db:f0:
         05:65:d8:70:dd:29:5e:1d:a2:03:1d:36:35:e6:2e:69:d6:c4:
         5f:c1:29:e9:36:c1:d5:b3:5b:a8:91:b9:07:0c:31:59:81:c8:
         a7:f5:55:a3:f0:38:11:0a:4a:35:26:0b:b6:c2:dd:5c:c2:5d:
         f4:5a:24:e8:93:5b:17:75:72:82:28:a6:32:30:95:df:f1:7e:
         eb:09:52:b1:60:ee:e2:62:b1:28:0a:ab:7c:e0:c7:ce:7e:3d:
         f1:4f:35:27:1d:9f:1c:ab:71:7e:4e:ba:6b:d2:d4:88:31:ef:
         07:93:5b:8c:b1:40:2c:23:ed:27:8f:f2:a8:6f:b7:f9:71:1a:
         06:85:a5:74:a4:c3:89:63:fb:ee:83:7f:d1:18:53:70:2b:0a:
         5a:50:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:45:28 2024 by rpki-client on console-ams.rpki-client.org