Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194.cer
File:                     060abe91-ae00-46c9-a9b7-b46f0b295194.cer (raw, json)
Hash identifier:          PC5vw7eQMHJYvVW7OGf+Onv3XNvDxVcgxmiJJg5OXYc=
Subject key identifier:   D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440A05811E7F7141133D82D200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Nov 2023 15:08:19 +0000
Certificate not after:    Mon 02 Mar 2026 15:08:19 +0000
Subordinate resources:    IP: 192.197.62.0/24
                          IP: 205.189.2.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0a:05:81:1e:7f:71:41:13:3d:82:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 28 15:08:19 2023 GMT
            Not After : Mar  2 15:08:19 2026 GMT
        Subject: CN=060abe91-ae00-46c9-a9b7-b46f0b295194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:9d:88:57:24:0f:dc:86:84:29:1c:5a:86:
                    df:e8:a0:f9:ce:3d:59:07:9e:fc:96:79:e8:70:d7:
                    d9:02:bf:4a:59:8e:7c:21:01:36:48:63:71:47:b3:
                    dc:74:6f:93:1f:f0:e3:ad:67:ee:d7:91:e5:35:bd:
                    af:f8:38:d5:8b:8d:86:4e:5e:d9:59:86:78:ff:35:
                    24:d8:4e:f7:e8:ee:c1:e9:f3:7f:6d:97:22:94:44:
                    12:82:3d:92:c7:a6:d3:38:8a:7c:9b:4a:7b:cd:d7:
                    7d:4f:35:3d:aa:74:5a:48:84:a7:2b:60:26:37:86:
                    c4:ee:6c:45:7d:40:7f:e0:0c:16:7f:81:d2:51:c5:
                    5d:c9:7e:6a:4c:50:1c:dd:b7:61:ff:e2:85:ff:d8:
                    02:ff:6d:73:b0:f6:04:55:d3:19:a7:e1:d5:b5:7b:
                    bd:70:bd:94:23:33:d7:f1:e6:91:3d:58:94:54:48:
                    87:37:05:58:93:5e:62:2f:f8:19:91:69:c9:7d:ba:
                    fd:43:3c:32:d0:0e:52:08:41:97:3c:e5:30:33:f4:
                    55:83:9f:d8:30:b6:0f:82:10:4c:28:f5:11:f6:39:
                    67:74:30:4c:47:0b:f5:6c:fd:24:9a:29:0c:21:f8:
                    db:54:9f:88:5d:27:d7:13:3b:1e:4a:b7:48:d8:cd:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:F4:18:EE:C2:E0:1B:59:0A:D8:29:9B:24:B4:80:0E:82:DE:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/060abe91-ae00-46c9-a9b7-b46f0b295194/060abe91-ae00-46c9-a9b7-b46f0b295194.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.62.0/24
                  205.189.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:51:8a:7e:91:86:22:09:97:ab:b3:18:ba:83:4f:d8:02:
         e3:67:1a:44:92:91:b9:62:84:ee:09:61:30:4d:04:fc:5f:1f:
         fc:35:ea:17:5e:71:6b:30:2e:84:9a:76:83:12:f8:4e:5c:ca:
         82:19:a4:e3:a1:f7:20:37:07:59:5a:60:19:e4:ee:4b:b1:8d:
         46:3d:29:71:2e:6c:ab:75:cd:b0:9d:d5:0a:be:01:fc:1f:0a:
         2f:f2:5d:78:1b:39:31:85:f1:76:5c:cb:85:1a:f7:c5:26:a4:
         e0:37:4b:26:16:e9:a6:06:92:f0:6b:30:25:c9:52:2c:d1:e6:
         50:5c:e3:90:0e:fc:6b:2b:ed:22:32:42:cf:92:e3:b8:78:81:
         3a:36:39:00:43:a1:c8:7c:3c:5f:70:02:1a:7c:4f:3e:bb:71:
         b4:2a:a9:95:85:ce:e2:46:fd:9e:ef:b4:86:8b:af:78:4d:e0:
         cc:22:c4:5c:80:51:13:d2:ac:66:36:38:de:f7:a1:1e:77:5a:
         96:0d:9f:2d:51:c4:3d:bd:27:01:f2:cf:b5:7a:b3:a3:a9:c9:
         90:30:45:e1:5a:b5:ce:9b:4e:f3:d5:ff:9f:35:90:b7:25:04:
         b8:58:1c:0b:98:e6:16:5f:23:aa:c0:a4:1d:d6:a7:90:f5:96:
         99:c2:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:55:44 2024 by rpki-client on console-ams.rpki-client.org