Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer
File:                     411f75d5-7410-4ca6-b23e-146e3726e630.cer (raw, json)
Hash identifier:          KHYjKFw9EtPamHaMkntf6zjYgKga+YK+M4kxPvAOGVg=
Subject key identifier:   C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848E85EDBE01F68E6B142B84000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Feb 2025 01:45:33 +0000
Certificate not after:    Sun 23 May 2027 00:45:33 +0000
Subordinate resources:    AS: 33495
                          IP: 206.80.238.0/24
                          IP: 2001:504:91::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:5e:db:e0:1f:68:e6:b1:42:b8:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 17 01:45:33 2025 GMT
            Not After : May 23 00:45:33 2027 GMT
        Subject: CN=411f75d5-7410-4ca6-b23e-146e3726e630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:7d:51:e7:17:7b:7e:df:f0:8e:7d:73:be:
                    d7:2d:52:58:22:e4:ba:03:1d:74:17:ac:51:90:88:
                    ce:65:26:9e:2d:27:c0:9f:3f:f8:ff:5e:1f:45:27:
                    c2:e4:48:07:03:2d:dd:6a:1b:af:3e:fc:cb:12:99:
                    2e:ff:86:85:2b:a9:66:06:b6:fa:ef:05:2c:98:9a:
                    6b:d3:a8:1f:32:f8:1b:0d:3e:89:ab:94:68:35:23:
                    34:12:e5:f2:ea:91:04:36:7c:1d:a3:81:8d:5e:34:
                    25:5c:eb:26:4d:56:ab:0c:6a:a4:78:96:e8:e5:bf:
                    3d:4f:ac:4d:10:2a:db:45:94:92:81:a1:c9:87:9f:
                    e2:95:00:62:3f:53:a5:1f:e0:b5:51:a6:68:29:07:
                    08:cf:c4:e6:e4:3a:57:85:f4:b1:3e:30:70:55:9c:
                    c8:19:10:3c:5a:db:97:ad:21:44:ed:76:f7:50:2b:
                    33:a7:57:b1:35:9e:5c:48:d9:13:1f:bb:e9:6b:2a:
                    dc:dc:17:d2:d7:c0:96:a1:b7:0f:3a:13:5a:1e:bb:
                    bd:18:f2:66:30:d6:a7:90:77:ca:53:ad:0c:e9:cb:
                    e1:b4:36:52:47:d3:46:25:bc:01:83:2c:ec:46:1d:
                    89:06:27:46:e3:a3:e8:2b:b4:b2:c3:c8:55:5c:b8:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.80.238.0/24
                IPv6:
                  2001:504:91::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33495

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:fb:5a:69:96:db:9c:b2:53:b7:19:e5:24:f2:99:4a:6e:
         50:38:4e:fc:ea:08:d3:5b:ee:23:9f:15:65:be:b1:26:a9:37:
         d9:d6:1a:f6:61:ab:87:f5:67:44:a7:9d:6b:d9:e8:c0:d2:60:
         3f:83:04:57:bc:df:36:eb:ec:7d:08:a1:cd:b4:27:11:de:26:
         40:c8:71:b2:66:be:a8:31:04:77:51:79:4e:d9:27:46:59:ee:
         8c:75:b5:33:e1:cb:05:68:d4:d1:c2:cb:e3:83:67:e6:5e:6f:
         af:63:c2:29:08:9d:0c:ae:56:b3:52:86:8a:e5:8c:68:19:0f:
         16:6e:2b:0f:ff:32:ed:82:77:5d:76:ce:95:89:60:04:09:5e:
         dd:19:78:ad:7c:e1:d2:f8:ef:a5:d5:9e:b9:57:c6:74:66:e5:
         05:5b:ea:ab:f7:10:11:a5:ea:b6:d7:08:28:3f:93:18:3c:1f:
         d0:4f:a1:e6:01:f6:6d:f7:55:2b:61:51:89:82:54:5d:4b:64:
         b9:78:ec:78:c7:b4:0d:f0:a5:d5:49:03:33:44:a7:e7:f5:c3:
         d3:cc:27:52:1c:29:77:d0:fa:9e:0c:69:8d:33:e3:0d:bf:d7:
         f7:a4:93:19:cc:2b:43:30:cf:c9:d8:6e:55:09:56:73:a3:2d:
         d1:6d:fd:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:25 2025 by rpki-client