Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
File:                     066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer (raw, json)
Hash identifier:          28Zb0WfDm9xFhzokstXlG/3udETPq5l6AHe6abHN5KQ=
Subject key identifier:   B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842EA8B2DA3B13FF2187A780FD8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 17 Aug 2023 15:44:51 +0000
Certificate not after:    Wed 19 Nov 2025 16:44:51 +0000
Subordinate resources:    AS: 46719
                          IP: 140.106.208.0/20
                          IP: 199.167.132.0/22
                          IP: 199.188.240.0/22
                          IP: 204.154.240.0/21
                          IP: 206.190.228.0/22
                          IP: 216.213.112.0/20
                          IP: 2600:d000::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ea:8b:2d:a3:b1:3f:f2:18:7a:78:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 17 15:44:51 2023 GMT
            Not After : Nov 19 16:44:51 2025 GMT
        Subject: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:d5:63:ec:e2:1e:92:51:62:c7:a5:07:57:
                    e5:cb:58:1d:b6:35:b7:7b:d1:07:4e:6b:61:ed:29:
                    d9:bf:cd:ad:6a:ed:11:bb:3e:48:65:a9:5a:80:aa:
                    30:27:80:ab:23:7b:92:35:51:be:92:a1:8e:fc:1c:
                    f4:1f:71:3b:13:9f:c2:b9:0d:8b:e2:f0:67:6b:c0:
                    37:82:2a:54:bc:1c:14:af:48:2b:2a:87:d7:52:3e:
                    d7:ed:6d:04:02:c9:ca:48:ae:0e:64:1d:e7:8c:12:
                    ab:53:f2:78:10:ea:7e:a9:6e:4a:74:4c:8f:a4:c7:
                    2a:93:34:57:86:38:b3:11:16:29:9a:f0:d7:e4:c7:
                    ba:da:09:89:9b:98:38:30:a9:82:19:b0:4a:8b:68:
                    e3:8f:51:7e:b1:d4:92:ed:07:4d:d1:fe:8b:54:76:
                    48:39:c3:5c:58:6b:ef:15:31:e6:5d:b1:25:7f:f7:
                    3a:f7:29:2a:a2:ab:02:24:6d:01:2e:b1:3d:39:9b:
                    c5:de:e3:c4:60:4a:53:3f:e8:e4:1f:a7:2e:84:67:
                    ee:6f:05:86:c3:cf:45:7b:ae:ef:2e:fa:be:f5:60:
                    f3:95:4f:55:67:6c:65:f1:d7:57:51:8b:5f:92:cb:
                    cb:44:b2:b5:64:c7:83:bf:c4:44:e8:ed:19:ee:9d:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.208.0/20
                  199.167.132.0/22
                  199.188.240.0/22
                  204.154.240.0/21
                  206.190.228.0/22
                  216.213.112.0/20
                IPv6:
                  2600:d000::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46719

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:86:12:07:b3:14:f2:cc:d1:42:0f:cc:bf:d5:38:97:f9:5c:
         a1:d3:58:df:f5:ee:19:85:98:3e:05:83:9a:38:a2:23:60:a0:
         54:33:25:65:8f:a6:8b:7b:bb:e3:29:7a:1d:ad:f0:fe:63:2c:
         30:b3:53:ef:6b:c0:48:5b:0a:b8:19:21:17:ba:73:98:c6:7f:
         bb:7d:89:89:c3:a1:e2:5f:80:4d:13:f9:ed:67:01:e6:f2:fd:
         66:c8:62:02:e3:49:97:a1:dd:2e:17:5a:84:2d:e3:8c:b4:df:
         60:83:db:8d:30:28:2e:71:2c:f6:53:f8:97:49:0d:07:8b:d8:
         ed:3b:e5:42:7c:b3:a7:6a:f5:6d:b2:43:c6:2a:f1:e2:6d:40:
         65:b7:f5:ee:2d:b6:84:34:69:ed:8f:07:e1:db:38:96:7d:f8:
         bf:72:98:b4:ac:75:62:00:88:8f:06:d7:0a:ed:43:29:03:cb:
         2e:e1:ec:d4:80:2a:cd:7f:4f:cb:a1:98:ac:00:84:0b:6f:7f:
         41:11:5f:d5:1c:72:7c:c9:b5:c9:0d:1b:a8:27:2b:f6:71:a5:
         14:60:70:ed:fd:b7:9c:b2:40:17:52:1b:9f:88:e8:e1:f0:75:
         a2:ae:07:0c:51:2a:d0:83:f9:f6:79:b5:59:53:25:1f:6f:98:
         32:8b:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 14:12:38 2024 by rpki-client on console-ams.rpki-client.org