Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
File:                     44bc2b87-223c-4280-a9b3-634e66111eeb.cer (raw, json)
Hash identifier:          AcnlfWQ/vSAOhW5AUEDg1DnYmVlAlL+8Lz/B4oAAMJw=
Subject key identifier:   3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E4834FC2918F277067D34C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 05 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 397373
                          IP: 104.152.222.0/23
                          IP: 104.255.168.0/21
                          IP: 155.254.16.0/20
                          IP: 185.167.60.0/22
                          IP: 192.154.224.0/21
                          IP: 192.158.224.0/20
                          IP: 2605:6c80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:c2:91:8f:27:70:67:d3:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  5 19:06:39 2025 GMT
        Subject: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:5c:29:25:a5:dd:05:10:e5:01:ed:df:fc:
                    66:4d:e1:01:e7:6f:cb:8c:93:67:14:89:1e:0b:27:
                    e1:41:b7:3c:47:4b:61:85:17:ec:ac:4f:b3:0b:97:
                    77:4f:7f:50:f8:ab:7a:3a:3a:5e:57:0f:f0:b3:24:
                    6c:a8:56:95:dc:aa:25:94:20:63:8b:36:49:12:7f:
                    fa:cb:0d:d9:b1:3c:fc:25:57:4e:46:56:7e:a3:d2:
                    11:b1:fb:f6:91:ac:e6:0c:40:00:40:34:87:68:16:
                    64:15:8a:ae:48:4b:4f:98:fa:b3:ce:ce:4b:e5:d4:
                    72:7a:eb:f4:61:05:bd:8e:d6:67:57:12:a7:72:00:
                    28:3b:03:56:77:94:53:25:97:cb:1a:6f:8a:25:66:
                    32:92:0e:d9:dc:7e:5e:84:93:82:c7:9a:13:1b:21:
                    82:7e:43:bf:bb:e7:6d:ac:5b:0e:de:9d:48:9d:07:
                    4b:20:d7:a5:ad:3e:22:22:bf:99:ca:91:c4:86:96:
                    66:fe:ab:b3:fe:e9:0a:81:52:79:d2:17:d6:92:bb:
                    ca:eb:63:d9:63:ce:eb:dc:10:ab:1f:8a:ef:1b:bf:
                    f0:58:7c:27:04:1a:6e:80:13:b9:f7:23:3a:54:b8:
                    c2:60:78:05:ac:ed:46:3b:69:b8:0c:38:4e:8f:18:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.222.0/23
                  104.255.168.0/21
                  155.254.16.0/20
                  185.167.60.0/22
                  192.154.224.0/21
                  192.158.224.0/20
                IPv6:
                  2605:6c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397373

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:11:fb:a5:30:a8:4b:fb:ef:13:71:a2:db:2c:e1:07:33:13:
         1d:2d:f1:d5:6a:ed:7a:5f:64:63:05:5d:78:89:d4:24:dd:1f:
         42:62:9f:3f:63:59:42:ea:b9:aa:1f:f6:98:6e:3f:66:37:cb:
         16:72:87:60:77:e4:34:d0:f0:2b:97:7a:51:0a:8d:1b:98:3d:
         3e:fd:70:cb:89:92:96:2c:e0:fe:bf:a0:e9:bb:d8:22:3b:28:
         cd:5c:c5:b1:25:5b:ab:37:c0:dc:5c:21:22:4f:8d:5e:ec:26:
         c9:0a:c3:5c:cf:3a:16:24:6b:8d:1b:57:9c:1d:d3:54:5c:d3:
         d5:ea:6d:fe:df:96:52:cb:df:f8:27:c9:48:f0:ab:ee:35:9e:
         a2:a1:6e:96:a0:c2:90:7b:38:40:bf:2f:6c:ff:af:7f:28:9c:
         fd:3b:98:f4:e0:56:31:00:af:30:25:5d:e3:35:c4:ba:f6:08:
         3b:77:54:22:75:07:05:96:e5:43:b5:47:06:20:5d:1b:58:b6:
         89:10:ae:72:6d:bf:0c:41:f6:7a:50:4e:3b:ea:a8:2c:da:e6:
         99:10:d2:ec:b2:f5:00:38:46:ce:b1:b7:31:08:16:80:20:a9:
         89:18:2c:91:75:7a:93:6c:09:f0:5e:9a:1e:e0:25:38:f7:43:
         cd:14:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:02:38 2024 by rpki-client on console-ams.rpki-client.org