Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
File:                     c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer (raw, json)
Hash identifier:          RDK+GrHYBtK+9ZsNQU/sWfb1iewkQXdQn3pJSkpBeo0=
Subject key identifier:   F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285843301C3BAB9EFFA0673F065880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 13:47:53 +0000
Certificate not after:    Sun 14 Dec 2025 14:47:53 +0000
Subordinate resources:    IP: 68.170.240.0/20
                          IP: 147.124.224.0/19
                          IP: 162.218.4.0/22
                          IP: 162.247.80.0/21
                          IP: 198.160.26.0/23
                          IP: 199.166.248.0/22
                          IP: 2605:a00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:1c:3b:ab:9e:ff:a0:67:3f:06:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 11 13:47:53 2023 GMT
            Not After : Dec 14 14:47:53 2025 GMT
        Subject: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:08:96:db:81:d8:f3:0d:59:1e:d3:f2:c2:
                    15:69:c4:38:e6:fc:73:3c:f0:88:e7:56:cc:02:48:
                    07:88:0d:ac:0b:c2:02:ff:d1:97:25:d7:1e:a1:48:
                    47:db:67:4f:4e:c9:cd:e3:93:f3:ae:ff:1e:9b:ad:
                    1c:90:7a:94:47:84:52:7a:e0:43:af:7e:b6:8b:44:
                    9c:75:06:ce:7a:95:18:9e:bd:0f:8c:6c:44:0c:89:
                    dd:9f:9e:58:a1:39:1f:5a:ad:51:dd:cf:ff:50:73:
                    5f:17:17:67:59:6e:42:ad:17:01:12:7a:76:38:9d:
                    ec:48:33:e7:6e:f6:e8:c1:45:be:04:37:76:ed:ec:
                    cf:4e:e1:f2:c1:7b:db:0d:7b:31:d3:30:86:a0:df:
                    d4:70:60:ae:18:e0:46:e7:32:86:f5:04:b6:9c:ff:
                    3e:b2:7f:dc:d3:01:29:be:9a:de:b1:d4:44:02:64:
                    14:98:f9:d1:8d:8d:65:f0:5f:23:c7:d2:9b:07:e4:
                    b1:01:75:d9:56:5c:11:a1:b9:ce:22:85:1e:62:3d:
                    18:4d:56:d9:b8:14:ed:d5:12:51:29:f5:81:a9:ef:
                    d5:7c:3e:b3:74:10:9c:5a:79:05:bd:0d:c9:43:c1:
                    94:3f:cb:ac:d2:e0:f1:9c:39:54:fa:13:17:ae:1d:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.240.0/20
                  147.124.224.0/19
                  162.218.4.0/22
                  162.247.80.0/21
                  198.160.26.0/23
                  199.166.248.0/22
                IPv6:
                  2605:a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:a3:5e:20:03:58:d5:ae:13:a4:a3:b0:f8:03:de:d9:e2:
         f1:7d:e6:b8:a9:48:76:d3:4e:d3:29:5d:ff:cc:21:16:c9:0c:
         c8:5d:0e:10:d5:d2:a3:41:dc:9f:c4:1b:15:d6:89:7b:8b:25:
         fd:7c:ad:c6:2b:23:6e:a2:b0:5b:ca:f5:6c:15:f0:19:37:ed:
         ae:79:47:3a:6f:d5:a2:6e:ce:ed:d0:92:43:cf:51:c9:1a:e8:
         56:73:d6:2a:e4:f8:60:5e:8c:52:69:76:26:63:dd:4f:e7:39:
         19:de:cc:80:0b:06:cd:2d:10:2f:08:44:44:1a:d8:6e:42:80:
         5e:39:3f:96:57:28:71:99:1c:e9:8c:32:66:a2:2a:6a:2e:39:
         f2:3d:fd:b8:48:3e:c0:29:fc:ea:c1:b4:e0:1d:33:be:eb:b0:
         93:3d:5d:37:d5:21:a1:ba:5f:8b:69:b7:fe:65:bc:9a:52:f7:
         d8:b6:84:a6:d3:5c:ad:b8:33:b7:2c:e3:b6:b3:fa:f0:0f:62:
         86:54:07:8f:92:21:4b:0f:21:e9:2a:cf:02:53:e4:28:c1:ab:
         67:bb:ba:61:13:54:ae:76:ba:68:15:32:e0:cd:18:9e:f4:33:
         d7:04:05:a6:89:42:18:b6:9b:9b:f1:e0:eb:9f:22:89:ca:8c:
         e3:74:20:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 9 20:34:27 2024 by rpki-client on console-ams.rpki-client.org