Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c1a144c-f821-4e0b-a31a-2dcd211a2455.cer
File:                     3c1a144c-f821-4e0b-a31a-2dcd211a2455.cer (raw, json)
Hash identifier:          BKvi1jqO0srWf8AWksF8pGWvr+J+fb3EgGh56+5UqQM=
Subject key identifier:   8E:70:47:06:E6:38:57:7D:9D:46:56:4A:ED:C2:AD:47:5B:10:F8:0B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4E3F11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c1a144c-f821-4e0b-a31a-2dcd211a2455/3c1a144c-f821-4e0b-a31a-2dcd211a2455.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c1a144c-f821-4e0b-a31a-2dcd211a2455/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Jul 2019 14:37:07 +0000
Certificate not after:    Tue 03 Jul 2029 14:37:07 +0000
Subordinate resources:    AS: 13825
                          IP: 64.130.96.0/19
                          IP: 96.47.80.0/20
                          IP: 142.154.128.0/18
                          IP: 162.216.244.0/22
                          IP: 198.73.24.0/22
                          IP: 199.119.96.0/22
                          IP: 216.93.128.0/20
                          IP: 2604:6f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4e:3f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul  3 14:37:07 2019 GMT
            Not After : Jul  3 14:37:07 2029 GMT
        Subject: CN=3c1a144c-f821-4e0b-a31a-2dcd211a2455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:63:25:c5:8b:89:a0:72:f5:c0:eb:e9:67:
                    fb:ea:fc:b3:ad:18:ff:72:08:8f:6d:e1:64:31:bb:
                    c8:6b:8b:a4:1e:23:31:0c:13:64:da:7f:2a:e5:43:
                    e5:75:42:16:bd:ff:7e:4a:a1:07:f1:ae:cb:20:c3:
                    66:6f:ed:f3:d5:91:d7:f6:df:8c:58:ab:84:e2:d2:
                    c2:0c:ed:d3:52:6e:47:72:aa:17:eb:67:92:5c:03:
                    a7:d8:bd:6a:19:25:88:d1:f7:6e:77:69:b6:f7:71:
                    67:74:5a:5b:30:c1:cf:a6:88:30:e5:3b:9f:c1:56:
                    b4:56:c0:65:e6:98:59:97:89:3b:65:6d:31:ca:cf:
                    d1:28:a9:2d:d8:c5:71:7a:f2:3b:0e:f6:40:03:5f:
                    c3:29:54:0e:ca:b2:98:9f:87:d7:d9:f4:d6:96:b0:
                    5a:57:17:10:c9:bc:ce:34:ad:4d:74:a7:ae:17:23:
                    14:95:24:86:6d:0e:b3:47:ed:eb:6e:9b:1b:b4:e3:
                    f2:41:61:ba:4a:c9:a5:62:34:24:f3:b2:d6:4f:2a:
                    f6:b4:8d:ba:b2:67:fc:80:38:ae:73:96:fb:63:15:
                    8a:9c:1c:83:17:89:46:1f:12:f6:51:9e:d7:ef:1a:
                    72:0c:6a:92:f5:3e:6d:5c:ff:b1:23:a3:b6:37:ab:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:70:47:06:E6:38:57:7D:9D:46:56:4A:ED:C2:AD:47:5B:10:F8:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c1a144c-f821-4e0b-a31a-2dcd211a2455/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c1a144c-f821-4e0b-a31a-2dcd211a2455/3c1a144c-f821-4e0b-a31a-2dcd211a2455.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.130.96.0/19
                  96.47.80.0/20
                  142.154.128.0/18
                  162.216.244.0/22
                  198.73.24.0/22
                  199.119.96.0/22
                  216.93.128.0/20
                IPv6:
                  2604:6f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13825

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:dc:bb:e6:88:93:6d:16:01:3b:4c:46:37:c1:6a:d2:14:a9:
         52:1b:91:22:4d:a6:98:f9:43:59:a4:8d:ee:19:ff:8c:d9:67:
         60:7d:47:16:c9:06:10:d5:63:32:12:01:28:aa:ef:a2:cc:d0:
         bc:a5:b9:5d:9c:59:c3:a2:32:04:0b:cf:d9:73:3b:fe:2a:42:
         80:3b:4b:65:b2:69:60:58:86:69:6a:5c:9a:2c:65:d8:19:a6:
         78:f3:ae:f0:d5:94:ac:9b:26:1d:94:b6:ac:a3:54:79:b5:59:
         3f:26:b1:b2:77:3e:e7:38:9e:cf:0f:aa:a5:a2:d7:cf:2d:53:
         be:64:33:4e:dd:4c:20:e0:c8:c5:2f:36:0e:81:3f:16:d1:76:
         74:c9:02:4b:ba:7d:b0:cf:cf:10:a2:b3:4e:b3:31:5a:df:44:
         d9:b5:ec:7c:e7:02:22:40:1f:23:ca:a0:76:0a:a3:ab:fd:59:
         49:4e:60:83:e1:3f:f0:19:05:5b:9f:0e:1e:f1:56:85:32:89:
         44:44:c1:a5:d6:82:75:8f:cf:fb:27:4b:85:c0:93:7b:ab:58:
         b1:c8:09:b8:e7:c8:20:2d:a1:2a:4a:db:a7:23:af:aa:9a:0f:
         5d:99:e9:8b:bc:29:02:43:da:23:54:2e:16:0c:d7:2d:7e:d3:
         4a:02:a9:7b
-----BEGIN CERTIFICATE-----
MIIHNzCCBiGgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbs1OPxEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGY2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUy
OTAeFw0xOTA3MDMxNDM3MDdaFw0yOTA3MDMxNDM3MDdaMC8xLTArBgNVBAMTJDNj
MWExNDRjLWY4MjEtNGUwYi1hMzFhLTJkY2QyMTFhMjQ1NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANsvYyXFi4mgcvXA6+ln++r8s60Y/3IIj23hZDG7
yGuLpB4jMQwTZNp/KuVD5XVCFr3/fkqhB/GuyyDDZm/t89WR1/bfjFirhOLSwgzt
01JuR3KqF+tnklwDp9i9ahkliNH3bndptvdxZ3RaWzDBz6aIMOU7n8FWtFbAZeaY
WZeJO2VtMcrP0SipLdjFcXryOw72QANfwylUDsqymJ+H19n01pawWlcXEMm8zjSt
TXSnrhcjFJUkhm0Os0ft626bG7Tj8kFhukrJpWI0JPOy1k8q9rSNurJn/IA4rnOW
+2MVipwcgxeJRh8S9lGe1+8acgxqkvU+bVz/sSOjtjerhWMCAwEAAaOCBE0wggRJ
MB0GA1UdDgQWBBSOcEcG5jhXfZ1GVkrtwq1HWxD4CzCCAcgGCCsGAQUFBwELBIIB
ujCCAbYwgaoGCCsGAQUFBzAFhoGdcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Mx
YTE0NGMtZjgyMS00ZTBiLWEzMWEtMmRjZDIxMWEyNDU1LzCB0gYIKwYBBQUHMAqG
gcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv
NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4
N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzFhMTQ0Yy1mODIxLTRlMGItYTMx
YS0yZGNkMjExYTI0NTUvM2MxYTE0NGMtZjgyMS00ZTBiLWEzMWEtMmRjZDIxMWEy
NDU1Lm1mdDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLmFyaW4ubmV0L25vdGlm
aWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCBtwYDVR0fBIGvMIGsMIGpoIGm
oIGjhoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYz
Mi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjYwYzlmMzItYTg3Yy00MzM5
LWEyZjMtNjI5OWEzYjAyZTI5LmNybDAfBgNVHSMEGDAWgBQ8DX1cutaiXvydDtVX
8MokY1SOyjAOBgNVHQ8BAf8EBAMCAQYwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr
BgEFBQcwAoZ7cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBj
OWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkuY2VyMFIGCCsGAQUFBwEH
AQH/BEMwQTAwBAIAATAqAwQFQIJgAwQEYC9QAwQGjpqAAwQCotj0AwQCxkkYAwQC
x3dgAwQE2F2AMA0EAgACMAcDBQAmBG9AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjYBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZI
hvcNAQELA4IBAQBa3LvmiJNtFgE7TEY3wWrSFKlSG5EiTaaY+UNZpI3uGf+M2Wdg
fUcWyQYQ1WMyEgEoqu+izNC8pbldnFnDojIEC8/Zczv+KkKAO0tlsmlgWIZpalya
LGXYGaZ4867w1ZSsmyYdlLaso1R5tVk/JrGydz7nOJ7PD6qlotfPLVO+ZDNO3Uwg
4MjFLzYOgT8W0XZ0yQJLun2wz88QorNOszFa30TZtex85wIiQB8jyqB2CqOr/VlJ
TmCD4T/wGQVbnw4e8VaFMolERMGl1oJ1j8/7J0uFwJN7q1ixyAm458ggLaEqStun
I6+qmg9dmemLvCkCQ9ojVC4WDNctftNKAql7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org