Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
File:                     60a936c7-4a19-44a9-b75d-cc22c274db26.cer (raw, json)
Hash identifier:          qXTfDOeqHjvr4zmMlVuBEpUlkuWLA09+8Mghh8dBZek=
Subject key identifier:   5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285843DE96AD3DA23EAE317621BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Nov 2023 01:45:15 +0000
Certificate not after:    Sun 15 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 18875
                          IP: 64.66.16.0/20
                          IP: 66.97.180.0/22
                          IP: 66.234.16.0/20
                          IP: 162.211.116.0/22
                          IP: 192.153.186.0/24
                          IP: 216.20.208.0/20
                          IP: 2607:d880::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:de:96:ad:3d:a2:3e:ae:31:76:21:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 13 01:45:15 2023 GMT
            Not After : Feb 15 01:45:15 2026 GMT
        Subject: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:32:92:0e:7d:ce:5d:f7:c3:84:a6:3a:8e:
                    2c:ff:42:9b:ac:5a:1e:00:56:03:1e:a4:23:dc:f1:
                    4e:16:73:2e:5d:39:fa:15:99:8c:d7:02:7d:e4:9d:
                    db:96:9e:b3:fc:21:15:e1:a6:28:43:98:11:ac:52:
                    1d:bc:fe:60:f0:96:9b:01:bc:de:b3:44:81:04:5a:
                    a0:cf:ff:2b:d9:21:1d:0a:86:90:09:9e:b1:86:b6:
                    67:5b:af:51:0d:6c:f3:ea:98:c9:2e:b2:ca:c8:a5:
                    8a:a7:50:3d:c3:61:11:c4:39:84:50:6c:3f:17:a4:
                    05:cd:ea:f4:6e:a7:0f:da:35:0d:a6:9e:6e:d2:c5:
                    58:89:85:2e:56:56:c8:79:a1:47:7d:85:f3:04:d0:
                    fc:b1:d0:23:bc:3b:01:86:99:70:59:5d:e1:48:1f:
                    5b:61:34:05:1f:73:a1:a7:cb:79:fe:83:e6:53:e2:
                    2e:4b:09:6a:16:18:a5:58:4e:eb:83:fe:9e:84:1a:
                    81:5e:41:39:82:31:6c:86:d4:e7:12:8f:8d:3d:6a:
                    5f:11:9e:f4:fb:e3:fe:ba:ea:ef:cd:be:24:7e:47:
                    9b:72:bd:da:6b:09:ee:ab:82:df:64:54:c7:02:07:
                    c9:61:39:c4:af:f2:b4:25:29:94:cb:c8:0b:96:6f:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.16.0/20
                  66.97.180.0/22
                  66.234.16.0/20
                  162.211.116.0/22
                  192.153.186.0/24
                  216.20.208.0/20
                IPv6:
                  2607:d880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18875

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:08:85:24:0d:09:07:fe:de:51:56:d6:00:d5:78:56:be:
         0b:9e:de:ae:b1:39:78:7b:f0:f9:53:64:92:4d:1f:3b:70:7a:
         df:3c:86:03:04:c1:7e:71:4c:7e:90:49:d8:cd:fb:30:d9:1a:
         48:ab:27:b7:95:63:46:96:c8:38:80:90:3f:6a:c1:e2:f4:e2:
         ed:15:f7:60:0d:03:98:d1:af:46:8d:a7:44:a8:d3:c3:93:69:
         61:a8:02:2f:14:34:17:ab:47:0a:dc:5d:07:7f:d1:19:3b:18:
         65:ed:65:b6:44:b7:72:49:b0:88:56:0c:6c:9e:1a:48:9c:a8:
         a5:c3:0a:eb:65:e2:f1:ed:ea:87:d7:af:82:11:84:a3:30:41:
         8e:e0:e3:24:93:1a:bf:6a:11:4f:49:86:85:73:88:a1:4a:9d:
         0f:06:46:98:e2:96:7e:c4:11:0c:68:2f:fb:6f:4d:f7:77:c6:
         42:35:a2:a4:6c:5b:91:93:4b:fc:19:5b:c1:8d:01:d7:80:de:
         d2:f5:28:d5:26:da:07:99:4d:73:c8:73:57:28:aa:87:2e:1f:
         c2:38:74:7d:f5:d0:47:62:40:99:c6:7c:cf:6c:8b:38:ef:7f:
         d4:d3:02:33:09:09:e0:77:92:6d:58:db:fd:a5:a1:c9:e9:cf:
         86:83:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:11 2024 by rpki-client on console-fra.rpki-client.org