Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
File:                     75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer (raw, json)
Hash identifier:          xt485hMXr9KerdRyf8gFjVllpPCMTT/JGS4hfM5C7Dg=
Subject key identifier:   50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285842AE2C58878A1FB28045DFC400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 00:45:16 +0000
Certificate not after:    Wed 29 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 399533
                          IP: 23.151.16.0/23
                          IP: 64.112.76.0/22
                          IP: 208.64.216.0/22
                          IP: 208.86.32.0/22
                          IP: 209.142.68.0/22
                          IP: 2602:fd91::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ae:2c:58:87:8a:1f:b2:80:45:df:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 27 00:45:16 2023 GMT
            Not After : Oct 29 00:45:16 2025 GMT
        Subject: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:df:72:62:99:9f:f5:15:47:08:2a:fc:94:cd:
                    66:d3:dd:de:0b:63:40:8a:86:e0:8a:1c:85:a9:60:
                    e2:1e:67:10:86:20:de:5c:6e:06:9e:dd:32:03:a4:
                    37:d7:b9:84:6b:74:79:77:d1:8f:10:33:8f:76:a6:
                    6c:a4:e9:0a:6a:20:93:98:70:b7:e3:fc:db:0b:60:
                    7b:ba:42:50:29:41:29:b6:b2:ed:cf:8b:98:d8:f0:
                    62:d0:5d:6e:08:a7:55:b7:14:54:df:3c:97:93:93:
                    5b:b5:5b:4c:e8:52:33:8b:64:17:57:d8:7e:57:42:
                    27:2f:54:be:ed:3d:65:0c:df:ca:48:80:59:98:ac:
                    7c:2a:50:c0:6a:d8:43:ca:ee:58:30:09:05:a4:3d:
                    12:7e:35:7b:fe:0d:78:92:88:6d:75:63:69:bf:67:
                    90:29:04:8b:25:ae:59:02:6f:6e:9d:db:02:2f:92:
                    2c:4e:1e:a1:92:fe:21:98:38:3b:11:33:0d:04:64:
                    a7:1b:a8:aa:0a:e8:de:ac:5a:90:f2:68:ad:91:0d:
                    ef:a2:0e:1b:6e:0f:dd:3a:bb:41:6e:ec:ee:b2:4c:
                    12:68:a2:6b:3a:47:0e:fa:07:3b:bb:05:00:cf:d3:
                    e5:0d:c4:73:64:66:59:e7:85:5c:30:38:ca:9e:d4:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.16.0/23
                  64.112.76.0/22
                  208.64.216.0/22
                  208.86.32.0/22
                  209.142.68.0/22
                IPv6:
                  2602:fd91::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399533

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:db:09:ef:ca:9c:43:78:65:c5:56:91:ae:7c:6e:d1:28:26:
         cc:75:12:31:c9:a5:76:93:35:e3:0b:0e:1d:a6:49:0e:7a:ad:
         dc:0b:d6:8a:1d:5a:a8:1e:a9:f3:dc:b4:8d:06:77:9d:9d:9b:
         87:9d:f6:53:c7:9a:04:f9:2b:8f:9a:bc:b2:41:31:df:8b:33:
         67:af:3c:03:72:50:b9:3d:7b:2c:8b:d2:5f:23:14:9a:91:05:
         f7:03:d8:42:36:f4:f5:97:24:92:4a:7d:7b:b9:2a:66:31:1c:
         6e:1a:3c:8e:92:6a:06:85:47:15:01:e8:a3:50:18:87:02:a0:
         89:fb:74:2d:4b:15:16:50:cf:db:c9:7a:7f:cf:92:86:dc:eb:
         f4:6e:e9:fc:49:98:ae:06:64:94:96:23:a4:9e:e2:49:c9:c8:
         2a:57:86:1e:a8:58:e3:6f:e9:6a:82:46:7b:16:35:b1:8b:93:
         dd:e6:24:51:d7:07:09:00:c2:b2:6d:ef:4e:06:b2:1e:47:31:
         15:4c:0e:d7:95:d7:6d:b1:29:ab:1f:a5:b4:f2:bc:af:1b:8a:
         0c:22:09:09:93:bd:96:ef:d4:e3:5f:7f:87:1a:a1:e4:d5:f3:
         f2:f4:44:89:2b:67:d3:3a:77:da:0b:58:4a:06:97:70:2e:20:
         ae:05:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:46 2024 by rpki-client on console-fra.rpki-client.org