Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9.cer
File:                     4a6ba250-5086-4d58-8336-494a05894bf9.cer (raw, json)
Hash identifier:          B1p61xls5s7m/CCpSmRmN9ddSxFNkbxC9S90OBDc+HA=
Subject key identifier:   CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843D6369EFF53176944BB6E8280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Nov 2023 01:45:14 +0000
Certificate not after:    Thu 12 Feb 2026 01:45:14 +0000
Subordinate resources:    AS: 62809
                          IP: 23.128.144.0/22
                          IP: 104.152.136.0/22
                          IP: 104.244.20.0/22
                          IP: 130.51.4.0/22
                          IP: 162.222.28.0/22
                          IP: 162.251.124.0/22
                          IP: 199.184.14.0/23
                          IP: 199.202.232.0/23
                          IP: 2605:2a40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:36:9e:ff:53:17:69:44:bb:6e:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 10 01:45:14 2023 GMT
            Not After : Feb 12 01:45:14 2026 GMT
        Subject: CN=4a6ba250-5086-4d58-8336-494a05894bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:38:a2:e3:99:ef:40:d1:57:22:93:16:72:
                    ef:f4:4c:f0:00:55:25:66:db:3c:7d:74:d4:18:b5:
                    f5:0b:3d:45:c6:b2:5c:4e:b5:ec:a7:ef:f2:cf:9f:
                    9d:88:9a:a8:f8:ab:36:bc:8f:0f:66:dd:fa:d0:cb:
                    b5:f3:f7:20:5b:5b:73:c4:5c:46:72:d1:1e:fa:ff:
                    9e:86:9c:b2:e1:36:47:49:3f:db:22:7a:c8:34:10:
                    2b:f1:d8:3b:65:ed:a8:5f:1a:a7:ca:d2:8c:4e:d4:
                    64:05:58:f9:96:e7:13:03:e0:4a:8d:25:ea:63:7d:
                    52:3a:3c:7b:f6:9d:4c:ae:91:6e:c8:ff:e5:6d:c0:
                    9b:ef:1f:e5:fa:46:c1:b6:4d:3d:d3:4d:32:0c:bc:
                    be:37:e3:5e:e4:6a:e6:75:be:f3:ce:a8:f8:0a:ff:
                    fe:44:7f:6f:e6:f5:c4:8c:9c:d6:91:e3:cd:c6:44:
                    a0:a8:49:df:ed:ae:72:d6:17:46:f0:9b:a6:b1:e0:
                    c1:95:57:75:f4:a8:86:29:39:84:0c:d5:ac:db:35:
                    d0:fc:1b:0a:1b:ed:ee:10:67:98:b3:6f:11:ad:df:
                    5d:3d:4e:5b:52:df:86:af:68:f7:e0:7d:a9:72:b8:
                    a9:da:95:31:ef:9a:7b:b4:e9:45:7f:6a:80:58:8f:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:0B:6B:78:3A:14:84:57:79:A4:CD:CB:EC:7B:BF:51:96:92:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a6ba250-5086-4d58-8336-494a05894bf9/4a6ba250-5086-4d58-8336-494a05894bf9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.144.0/22
                  104.152.136.0/22
                  104.244.20.0/22
                  130.51.4.0/22
                  162.222.28.0/22
                  162.251.124.0/22
                  199.184.14.0/23
                  199.202.232.0/23
                IPv6:
                  2605:2a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62809

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:51:52:29:38:46:5a:3a:96:f7:93:76:60:a1:e2:39:70:
         64:cb:43:59:2a:4a:01:0f:ab:ac:0d:23:52:44:03:76:33:5e:
         d6:3f:da:c0:4c:3e:1f:ff:31:91:fe:20:ba:0c:46:36:f2:ac:
         fc:e0:03:39:83:b1:19:8e:62:2b:f5:a1:68:d0:d8:65:3d:de:
         02:fc:eb:0d:a2:6e:26:24:29:00:f1:b7:f2:eb:f0:c8:a9:08:
         7f:ae:11:f6:56:f1:dd:65:87:53:0c:d8:c8:d1:55:55:f7:0f:
         34:8f:00:0b:66:e3:58:c7:ac:f4:eb:c7:68:34:3f:a8:f8:2c:
         73:74:aa:1a:8a:6e:38:59:a2:d1:25:79:fd:47:46:ba:4c:69:
         33:a8:b8:7f:97:77:c2:a0:23:ab:7d:bb:c5:b0:6d:22:ea:12:
         11:6f:f8:db:07:d9:a0:d1:b0:05:28:d7:ea:69:7d:71:52:cd:
         be:37:f4:96:e3:3a:e2:c2:e6:5a:44:82:09:c2:ed:d4:42:13:
         e6:e8:b7:b1:c2:fb:8a:bb:18:73:f3:41:cd:51:73:83:b9:75:
         bb:be:52:73:cc:a9:30:8b:bd:db:af:56:b9:b1:6a:f6:13:44:
         fc:ba:80:e7:5b:73:99:57:ec:71:8c:f6:49:7e:63:7d:b9:23:
         a3:cd:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:39:32 2024 by rpki-client on console-fra.rpki-client.org