Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1c63b93b-0067-4be9-83d8-2407d4856232.cer
File:                     1c63b93b-0067-4be9-83d8-2407d4856232.cer (raw, json)
Hash identifier:          JAZmYCRG8uox1E2HhWkMu4T6lAq69/Vovez/ndbK0Ro=
Subject key identifier:   92:51:5D:D2:33:47:3D:F6:34:CC:23:AF:AC:C3:DF:BE:E0:73:DF:3D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B6FA854491ED88D556C91960
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1c63b93b-0067-4be9-83d8-2407d4856232/1c63b93b-0067-4be9-83d8-2407d4856232.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1c63b93b-0067-4be9-83d8-2407d4856232/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Oct 2024 16:21:50 +0000
Certificate not after:    Tue 02 Feb 2027 17:21:50 +0000
Subordinate resources:    AS: 15085
                          IP: 66.219.16.0/20
                          IP: 67.23.160.0/19
                          IP: 198.135.188.0/22
                          IP: 199.15.168.0/21
                          IP: 204.28.100.0/22
                          IP: 208.69.228.0/22
                          IP: 208.83.76.0/22
                          IP: 208.83.140.0/22
                          IP: 208.87.84.0/22
                          IP: 208.91.128.0/21
                          IP: 216.59.0.0 -- 216.59.55.255
                          IP: 2606:3500::/32
                          IP: 2607:9800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:fa:85:44:91:ed:88:d5:56:c9:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 30 16:21:50 2024 GMT
            Not After : Feb  2 17:21:50 2027 GMT
        Subject: CN=1c63b93b-0067-4be9-83d8-2407d4856232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:13:11:0d:04:0f:a7:92:9e:c0:a2:eb:2d:
                    21:cc:3c:99:d8:f5:4f:37:03:4e:8d:c5:2d:70:51:
                    53:78:89:42:d3:fd:cd:8d:c3:b4:20:71:e1:2f:76:
                    36:c2:aa:f1:21:d4:b0:22:4f:2a:8d:1b:3a:7d:0b:
                    0d:d7:8d:e2:38:72:b3:a1:59:00:a0:9b:b1:83:86:
                    d9:c6:c4:e3:57:77:57:d5:fd:7f:5a:9b:e8:16:f1:
                    28:0b:ba:45:c8:00:06:02:af:bc:83:1a:6b:08:55:
                    76:24:c5:e7:00:df:11:93:24:df:c2:47:0e:0d:6e:
                    d3:8e:cd:fd:10:38:18:e1:e9:5f:7d:75:3d:e6:23:
                    79:9d:5e:fe:53:eb:d1:9a:ac:ee:74:47:02:e9:b3:
                    53:12:12:4b:ab:c6:fb:49:46:58:8d:51:5f:a8:2a:
                    1d:26:fc:79:20:ed:5b:c5:7c:7e:b2:52:6b:44:c8:
                    25:93:3b:66:c0:4a:34:6b:fc:e3:24:a0:f4:b5:c9:
                    ff:b5:2b:cb:3d:8d:ec:c0:ed:ae:e7:17:3e:3a:55:
                    87:bd:87:6a:bf:cd:eb:47:e0:ab:43:ea:44:d7:b6:
                    ea:0c:9d:9f:ba:6b:b5:6d:46:0c:da:d9:15:4f:54:
                    a1:c7:8a:ae:98:d8:b6:f0:25:e4:d8:03:dc:8b:d8:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:5D:D2:33:47:3D:F6:34:CC:23:AF:AC:C3:DF:BE:E0:73:DF:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1c63b93b-0067-4be9-83d8-2407d4856232/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1c63b93b-0067-4be9-83d8-2407d4856232/1c63b93b-0067-4be9-83d8-2407d4856232.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.219.16.0/20
                  67.23.160.0/19
                  198.135.188.0/22
                  199.15.168.0/21
                  204.28.100.0/22
                  208.69.228.0/22
                  208.83.76.0/22
                  208.83.140.0/22
                  208.87.84.0/22
                  208.91.128.0/21
                  216.59.0.0-216.59.55.255
                IPv6:
                  2606:3500::/32
                  2607:9800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15085

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:20:6a:eb:a0:d5:c5:f6:a9:62:2b:4f:9a:a9:79:33:19:1f:
         8f:a4:22:f4:87:1d:5c:ae:d1:5d:54:68:22:39:2d:41:78:95:
         f8:66:91:9c:13:19:a8:7f:43:37:ed:a4:d8:41:b2:80:b5:82:
         06:30:ca:6f:0b:ba:75:08:82:56:4e:62:f6:f4:90:92:bf:50:
         8a:91:05:98:79:4a:2a:25:1a:b2:e6:43:2e:86:07:4d:93:49:
         68:3b:54:18:2a:87:4a:09:9a:db:db:46:05:fd:16:27:a4:7f:
         ba:c5:7c:eb:1e:1c:5a:b7:b7:05:f3:b8:40:09:ae:d1:cb:86:
         de:c9:bc:6b:98:f8:32:ae:f2:30:69:9b:12:5c:3e:78:10:07:
         9a:80:19:ec:e4:32:34:3f:e9:ab:b5:a1:a6:6a:49:51:d0:6a:
         c2:2c:b3:b2:5c:ab:96:9d:cb:bf:92:db:f8:32:fb:96:af:ee:
         76:04:2b:45:f6:34:f1:b8:85:ff:62:0e:b7:69:65:9c:54:1a:
         fe:7f:d1:08:57:3d:4d:48:ba:cb:c6:fd:dc:96:25:84:a9:79:
         40:50:b2:93:7d:a8:a9:6e:d7:94:e3:bd:26:da:23:06:5d:4f:
         95:b1:07:85:b1:16:cb:24:d4:7c:2a:ed:ce:ec:7a:a8:a5:52:
         10:3d:31:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:01 2024 by rpki-client on console-ams.rpki-client.org