Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
File:                     9825dda6-0df7-4c35-af65-4bb69cf71053.cer (raw, json)
Hash identifier:          IkI7IU+dzPp/s29+m8aDYrOnOjoJc4UEpddScTYi71k=
Subject key identifier:   0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846EEF335C4C3B4007AA28D5080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Aug 2024 00:45:25 +0000
Certificate not after:    Mon 23 Nov 2026 01:45:25 +0000
Subordinate resources:    AS: 16943
                          AS: 21962
                          IP: 199.245.188.0/24
                          IP: 199.248.230.0/24
                          IP: 208.74.56.0/21
                          IP: 208.80.200.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:f3:35:c4:c3:b4:00:7a:a2:8d:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug 20 00:45:25 2024 GMT
            Not After : Nov 23 01:45:25 2026 GMT
        Subject: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:c5:32:e2:07:fc:65:3f:2f:bd:f7:fb:c4:
                    52:1a:49:55:42:95:cc:41:59:de:c0:08:f0:12:c4:
                    85:84:f3:17:a0:f0:ef:cf:d3:eb:ed:d8:da:ed:b0:
                    f1:86:a1:20:77:df:eb:70:3d:ad:0c:4e:c3:cb:b2:
                    b1:3e:2b:2c:c6:f2:6b:d4:b4:32:8a:a4:11:5f:78:
                    9f:43:87:2b:99:91:0d:61:01:2f:1f:78:6c:14:b0:
                    45:4a:ac:83:01:c5:af:99:54:5e:b7:bf:f0:5d:af:
                    ca:2d:d6:bc:81:fc:15:dd:01:e7:c1:6b:b3:95:c5:
                    80:87:f1:9f:de:5a:e0:fd:d0:7e:da:c0:df:0b:8d:
                    fc:45:97:60:8d:fe:57:f0:8d:50:5c:3f:e5:49:66:
                    b0:86:1a:ff:cc:b4:e8:27:a2:62:2b:7a:67:86:7b:
                    42:09:61:b9:4f:21:cf:f2:df:c6:5a:64:e5:bd:65:
                    5a:2c:3c:17:19:b9:93:fc:70:59:3e:70:6f:f4:fd:
                    44:a8:f0:ca:b0:01:8f:ab:f2:c5:be:3a:d2:49:ed:
                    e8:a2:4e:4e:41:c6:84:63:05:d1:e5:04:8a:b9:90:
                    ab:f2:65:c7:0b:4d:c3:01:1b:a9:f3:1d:c7:f6:7d:
                    14:9d:50:ca:13:48:bb:0e:e1:1f:df:25:1e:42:96:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.188.0/24
                  199.248.230.0/24
                  208.74.56.0/21
                  208.80.200.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16943
                  21962

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:42:a3:dd:76:aa:5a:73:1f:41:7f:80:4e:b3:5d:00:aa:
         54:d5:8c:a1:94:80:8a:2f:fe:03:d0:68:b8:99:7c:a2:62:fa:
         78:cf:bf:89:a0:ab:ba:f8:53:f6:b7:67:a2:4a:98:71:e9:94:
         77:42:fc:e3:0b:f7:1d:a9:27:00:5f:d6:7e:66:f9:9e:bc:db:
         86:93:a5:ca:57:7b:c9:b9:da:e9:a1:28:18:e8:22:dc:33:55:
         f3:83:01:96:e2:df:b9:fb:ef:af:1a:e2:f9:dd:eb:77:e9:fc:
         69:4e:46:51:5d:01:8c:b9:9a:65:71:67:5a:be:4e:31:d7:ed:
         61:be:59:e0:07:b7:43:67:b1:dd:ae:e8:22:cd:6f:64:4d:7b:
         30:ba:7b:36:2b:6d:e3:7e:90:f6:e5:17:c6:b4:d6:33:6b:d0:
         45:0e:ab:48:bb:3b:58:cc:68:30:16:7d:cd:3d:de:1d:2b:5e:
         b3:0f:af:a0:22:1d:e6:7d:32:fb:a1:4c:f9:97:25:30:48:ed:
         58:ad:b7:6a:8a:0c:a1:f4:08:17:ec:73:49:22:a4:2a:92:59:
         40:56:87:f2:3d:a4:e1:a9:56:b1:87:fb:62:9f:01:00:0d:25:
         ef:15:5b:2f:0c:63:ec:cb:1b:d4:0c:49:ab:f4:ea:fd:ad:20:
         04:3d:5c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:33:39 2024 by rpki-client on console-ams.rpki-client.org