Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
File:                     0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer (raw, json)
Hash identifier:          PXJaxiya7gfwC9KWveErZmpnAT6syvdAOEXkn05BDzw=
Subject key identifier:   58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584379F855852BFF41802928A600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Oct 2023 00:45:22 +0000
Certificate not after:    Sat 10 Jan 2026 01:45:22 +0000
Subordinate resources:    AS: 2906
                          AS: 40027
                          IP: 23.246.0.0/18
                          IP: 45.57.0.0/17
                          IP: 64.120.128.0/17
                          IP: 66.197.128.0/17
                          IP: 108.175.32.0/20
                          IP: 192.173.64.0/18
                          IP: 198.38.96.0/19
                          IP: 198.45.48.0/20
                          IP: 2620:10c:7000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:79:f8:55:85:2b:ff:41:80:29:28:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct  8 00:45:22 2023 GMT
            Not After : Jan 10 01:45:22 2026 GMT
        Subject: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:d3:fe:b3:19:f9:c5:49:31:8d:53:fa:b1:
                    60:90:f0:c9:26:95:8f:3a:81:27:70:74:d4:c6:69:
                    06:d3:d7:b1:ac:d4:22:ac:16:1a:3c:26:08:33:4e:
                    5e:1d:da:05:09:63:51:ed:a3:d4:9e:f1:cb:99:c7:
                    8b:02:26:fd:63:fd:d7:fd:9d:45:b4:06:30:ec:f0:
                    b4:d7:e7:8f:55:6f:f7:45:40:b6:85:2f:d9:53:67:
                    12:82:69:51:cb:83:6b:83:33:d4:83:d5:2e:4f:a9:
                    7c:f3:07:42:8f:78:ea:af:cf:92:c6:d7:5c:a1:c5:
                    f6:4d:d4:cd:00:3e:5f:da:76:17:81:8f:c3:0a:b9:
                    ae:43:fa:df:4a:3c:11:6b:6a:57:03:a1:4b:d8:a3:
                    7b:35:20:40:e4:d7:11:32:18:4c:62:a8:05:23:8f:
                    ab:7a:d3:ed:3a:3c:17:13:6a:4a:a0:f0:c0:c5:ed:
                    25:7b:08:7e:3b:b5:04:31:85:e4:a6:0b:99:a5:fc:
                    17:00:dc:09:27:5a:e3:d5:2f:3b:0d:c4:b2:72:38:
                    c2:fe:cd:9d:92:aa:9d:be:32:6b:76:8a:e8:ef:41:
                    c9:2a:f2:fb:02:e9:62:58:52:36:eb:2d:50:a6:76:
                    77:60:5b:27:67:77:b3:f8:f5:3e:33:32:69:56:bd:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.246.0.0/18
                  45.57.0.0/17
                  64.120.128.0/17
                  66.197.128.0/17
                  108.175.32.0/20
                  192.173.64.0/18
                  198.38.96.0/19
                  198.45.48.0/20
                IPv6:
                  2620:10c:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2906
                  40027

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:c0:f3:c6:11:76:89:1d:d1:ad:2d:81:8e:ca:6f:45:12:
         a6:a9:bb:c8:82:97:22:96:7c:d0:e4:76:20:e2:67:ca:1a:50:
         6e:4b:ce:8b:3a:88:85:d6:58:16:58:0d:ff:e9:19:b3:b3:1f:
         72:d8:1d:61:b8:aa:99:66:23:c0:0c:20:2e:81:af:d6:0c:38:
         56:48:1d:c8:c3:85:6a:41:f7:30:fa:d2:da:9d:e2:9b:82:cb:
         6f:70:c1:dd:f0:87:e3:cd:3a:03:9c:0b:29:19:de:58:be:7a:
         48:b7:e3:2e:70:96:54:17:6d:a1:28:0a:3b:17:ca:75:30:25:
         13:21:50:22:2b:9d:d6:ad:d0:54:03:5f:2f:8f:d0:0a:5e:6a:
         a5:74:8b:1b:3a:4c:9c:53:9e:fb:d3:48:88:05:56:86:dc:ca:
         50:6f:df:5f:76:da:dc:4c:40:73:af:23:7a:fd:f6:9f:2b:bb:
         51:15:70:c6:cf:b1:d1:42:e5:27:d3:d0:6d:a4:2b:3c:f2:d1:
         9e:1d:40:d9:5f:1a:9e:bb:8e:15:0f:68:3a:0f:d7:8b:da:d3:
         34:fe:56:cd:8a:a3:b7:0a:6f:54:7a:bc:ff:3d:82:1c:fc:69:
         35:74:03:8c:11:16:da:51:cc:4c:6d:81:d2:77:6f:a2:34:ef:
         cb:9c:ef:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:39:27 2024 by rpki-client on console-fra.rpki-client.org