Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05.cer
File:                     58551ca9-c834-4e94-9452-385a3685aa05.cer (raw, json)
Hash identifier:          Yeu/vNnYOI5iqx2GD2H+1x5HZsVjXmftNdslz8nImiw=
Subject key identifier:   A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858460CD1C18FF344B4736660A200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 31 May 2024 00:45:20 +0000
Certificate not after:    Thu 03 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 36198
                          IP: 23.181.64.0/24
                          IP: 170.39.64.0/22
                          IP: 2620:136:a000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:d1:c1:8f:f3:44:b4:73:66:60:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 31 00:45:20 2024 GMT
            Not After : Sep  3 00:45:20 2026 GMT
        Subject: CN=58551ca9-c834-4e94-9452-385a3685aa05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:6c:f4:f6:f4:71:d7:25:cf:34:37:7e:40:
                    93:f8:66:12:a2:3d:ca:44:b2:16:dc:0a:a6:a3:e9:
                    29:e1:94:fd:18:fd:50:bf:e3:72:b6:51:4f:6d:d0:
                    8e:f0:1a:be:94:f3:b3:f9:d1:66:6e:44:78:60:7b:
                    30:bf:f6:37:91:25:a7:1a:32:57:05:b8:1b:0b:d6:
                    b7:a6:90:00:ef:fc:8e:4e:3c:96:a1:7c:fe:9d:ca:
                    db:65:c4:fd:05:5c:fc:82:9a:e1:50:2d:47:b7:22:
                    fb:ea:a2:89:51:9e:03:04:2b:c8:33:85:61:dc:6a:
                    55:db:f3:b8:4f:ff:35:fd:d3:e7:51:8a:1a:06:d8:
                    be:e6:b1:f5:eb:22:2a:b7:84:a9:75:c5:5d:9a:22:
                    ea:99:97:37:7b:bb:31:c2:fc:9b:c9:3b:23:2d:35:
                    68:a9:ac:e2:f6:56:b4:53:d4:b2:65:11:56:10:3b:
                    71:55:40:04:1d:c0:7d:b1:bd:b7:fa:7a:76:e4:99:
                    a4:a8:57:63:c8:86:8c:72:bc:6b:2b:4a:25:f2:72:
                    a5:c6:8d:8f:0b:65:95:72:5d:88:89:fa:94:ea:e7:
                    59:bb:9d:71:99:85:43:c0:63:f3:89:aa:ad:56:cd:
                    53:c9:00:b0:94:7b:f3:a2:00:3c:62:fa:6f:77:e5:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:61:55:FC:1B:55:C3:F2:C7:22:B7:0D:54:55:94:CD:8F:02:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58551ca9-c834-4e94-9452-385a3685aa05/58551ca9-c834-4e94-9452-385a3685aa05.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.64.0/24
                  170.39.64.0/22
                IPv6:
                  2620:136:a000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36198

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:1d:da:6d:3a:0b:b7:d4:f5:74:b8:3d:93:19:1c:fd:80:
         22:88:ee:39:61:08:54:ca:39:2f:f9:19:73:5c:ae:be:6f:f0:
         e7:8d:59:8c:be:e1:19:26:45:70:8c:5a:2c:66:2a:8a:14:84:
         92:32:6d:19:b3:82:30:22:7f:65:aa:88:85:77:a5:bd:dc:eb:
         82:3d:56:98:d5:ef:10:1d:9f:66:43:b9:a8:2e:77:66:37:a9:
         3c:e8:cc:29:6b:a5:b5:41:76:69:7c:d4:2d:d8:9e:e3:37:9c:
         eb:32:6a:90:08:1e:9e:1e:e3:bb:e5:00:70:bf:9a:b8:87:ed:
         29:06:2f:c9:73:ae:2d:ab:ee:28:fc:ff:5e:b1:20:a9:94:d1:
         34:3a:f9:8d:61:f9:23:f9:61:0c:4e:a4:5f:7e:31:96:d4:68:
         74:8a:fb:7a:7c:f1:94:81:48:62:03:8e:e3:89:b8:66:f6:c4:
         81:53:80:ee:44:c8:b6:65:e4:9e:2f:44:59:19:14:90:3c:ed:
         38:1f:90:87:e4:31:be:be:60:4b:dd:62:fd:fa:34:70:74:94:
         40:05:46:ba:45:1d:ed:91:4c:35:23:a9:12:f9:55:39:3f:7a:
         95:a5:78:81:2c:37:1a:b7:02:2f:3d:1c:86:ba:d0:10:ce:a6:
         d7:87:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:28:35 2024 by rpki-client on console-ams.rpki-client.org