Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a.cer
File:                     750824e4-669c-4a78-911c-087bf64a7f4a.cer (raw, json)
Hash identifier:          dH1tgWyn0ravpk5PkU4GQgrCnhpOJ7wCjfSfg6j0kX8=
Subject key identifier:   38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844510CBB6B290C4D7B019BC3EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Dec 2023 01:45:16 +0000
Certificate not after:    Sat 28 Mar 2026 00:45:16 +0000
Subordinate resources:    IP: 23.148.176.0/23
                          IP: 104.250.224.0/22
                          IP: 136.175.232.0/22
                          IP: 139.64.128.0/22
                          IP: 206.28.180.0/22
                          IP: 207.174.44.0/22
                          IP: 2605:8c40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:51:0c:bb:6b:29:0c:4d:7b:01:9b:c3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 24 01:45:16 2023 GMT
            Not After : Mar 28 00:45:16 2026 GMT
        Subject: CN=750824e4-669c-4a78-911c-087bf64a7f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:11:42:73:7f:47:f8:d4:13:7e:52:fe:45:
                    1b:13:ce:23:93:75:18:fb:a4:e6:64:03:33:26:37:
                    8c:e9:98:cc:0f:aa:98:cd:97:0a:3c:b7:b9:34:a4:
                    4b:dc:e5:aa:2c:ba:14:cb:09:90:ca:46:2e:99:9d:
                    27:29:1a:d3:dd:b3:59:07:bf:91:47:66:ac:b7:2d:
                    37:ba:bf:b0:a9:48:4f:bb:05:3f:7c:3c:d4:f8:0b:
                    24:be:9b:40:71:41:16:9d:be:af:3e:64:bf:18:12:
                    6c:aa:f4:f0:6e:c6:87:3d:54:b9:3c:7f:13:3c:87:
                    4c:d1:97:2d:8d:6e:a1:ac:e1:c9:d7:dd:dd:a1:df:
                    27:2e:93:3e:91:ba:9e:e4:bb:ca:aa:89:6e:d1:91:
                    1a:76:74:ae:8a:c2:da:06:26:b6:3a:21:65:5e:fb:
                    8c:ab:bc:ba:6e:9f:d9:ce:2a:d0:44:e2:8d:14:e3:
                    b9:a5:7b:aa:a3:e2:9a:60:0e:a0:6a:5a:ba:45:e9:
                    3c:9f:0b:2c:2e:bc:bc:17:8b:15:ac:bb:ea:de:91:
                    f3:7d:66:70:88:34:3c:9c:a6:fc:2e:ef:e3:7a:9b:
                    70:35:0a:e4:7c:b2:f2:62:ec:35:b4:5f:2b:8d:c8:
                    6a:60:7a:ba:f2:81:41:fe:d4:5d:be:71:04:b0:29:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:54:59:88:87:D9:D6:6D:A5:A5:17:4B:AB:0F:11:46:E5:1C:4D:98
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750824e4-669c-4a78-911c-087bf64a7f4a/750824e4-669c-4a78-911c-087bf64a7f4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.176.0/23
                  104.250.224.0/22
                  136.175.232.0/22
                  139.64.128.0/22
                  206.28.180.0/22
                  207.174.44.0/22
                IPv6:
                  2605:8c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:17:c8:a9:db:75:7c:68:46:7a:e1:df:e1:5e:8a:5b:92:55:
         82:5b:66:32:08:c3:00:7c:eb:51:79:ce:1b:59:84:6f:72:58:
         fa:20:64:cf:b6:ab:9d:11:2f:78:0f:ea:59:f2:1c:40:f3:84:
         4a:49:12:69:5b:b7:0a:3a:e3:97:f6:2f:c1:7b:7d:cf:a2:8e:
         6b:4e:50:49:bb:9b:3c:b7:78:53:96:a9:55:11:08:d7:fb:ab:
         af:21:27:0e:85:c4:b8:a6:27:8d:b2:77:d6:ee:57:58:80:4e:
         a9:11:30:98:2c:94:98:7c:6b:e8:70:93:a7:dc:8d:bd:03:6c:
         1b:8c:1c:88:d3:74:54:ee:e4:5a:6a:32:02:b6:58:36:7b:92:
         8e:f2:e6:84:5a:69:7d:d7:7e:66:af:83:be:b5:53:05:39:94:
         fa:f3:c8:e6:a5:2b:09:7f:b7:45:36:87:1f:9f:dc:7b:17:b6:
         f2:7a:09:b3:67:3f:88:f1:52:ba:c7:9e:af:d7:72:ee:89:60:
         9c:9b:0f:38:d5:1c:68:a9:82:98:95:0e:d6:04:9e:c0:e7:ce:
         ff:a2:5a:fb:18:82:de:9d:22:f1:3c:54:3c:66:96:5d:4a:90:
         ad:fe:78:75:3d:67:c9:07:7f:e8:48:bb:a0:ae:55:e6:99:99:
         8f:f3:9f:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:42:55 2024 by rpki-client on console-fra.rpki-client.org