Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
File:                     98cb5058-01ad-45bf-9c15-453f410bb9d7.cer (raw, json)
Hash identifier:          pH/WYLXbLTsn4nciWDWR8tv70FlIkc8gMBdP5EopjCs=
Subject key identifier:   82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584355AD6F71936DB2EB705F4200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Sep 2023 00:45:21 +0000
Certificate not after:    Sun 28 Dec 2025 01:45:21 +0000
Subordinate resources:    AS: 53667
                          IP: 23.183.80.0/22
                          IP: 45.61.128.0/18
                          IP: 104.194.128.0/19
                          IP: 104.244.72.0/21
                          IP: 107.189.0.0/19
                          IP: 144.172.64.0/18
                          IP: 162.244.92.0/22
                          IP: 162.245.0.0/21
                          IP: 167.88.160.0/20
                          IP: 172.86.64.0/18
                          IP: 198.98.48.0/20
                          IP: 198.251.80.0/20
                          IP: 199.19.224.0/22
                          IP: 199.195.248.0/21
                          IP: 205.185.112.0/20
                          IP: 209.141.32.0/19
                          IP: 2605:6400::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:55:ad:6f:71:93:6d:b2:eb:70:5f:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 25 00:45:21 2023 GMT
            Not After : Dec 28 01:45:21 2025 GMT
        Subject: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:21:69:4a:98:62:d2:8f:b8:69:8c:7e:c5:
                    40:f0:38:11:ef:ee:1f:61:37:88:b3:66:23:b3:cd:
                    a4:5f:6f:73:ab:0e:05:05:7b:bb:82:59:9b:f7:5e:
                    2a:0e:ed:a5:b2:28:8d:0e:86:bb:c8:ca:f2:c8:0f:
                    d1:ea:4a:05:dc:e4:47:90:40:b0:87:84:82:d8:bc:
                    90:a5:10:ad:37:b3:97:87:6d:e6:c0:cc:30:c8:02:
                    11:1a:df:f2:a1:92:05:23:8c:b9:b2:97:84:3d:16:
                    de:b1:2d:dd:b9:13:9c:c7:78:08:02:b0:63:b9:16:
                    e1:b3:b9:35:40:a5:d3:bd:fb:01:bc:de:e7:b1:f0:
                    5c:0c:2b:de:f1:1d:b1:fc:a3:ce:d6:29:fd:91:00:
                    4c:03:e1:50:03:3f:86:f4:f2:7e:20:2f:8e:3e:9b:
                    93:78:60:f6:92:8c:2b:ad:f6:a1:26:fb:cd:0f:0e:
                    32:ed:fa:70:e2:f5:f0:f1:7f:e4:ef:ed:d0:bb:c6:
                    f3:07:c6:68:68:78:38:2e:bd:d8:04:00:a2:77:36:
                    e1:38:60:ed:a5:04:a2:6e:59:45:92:12:a0:2a:09:
                    5d:37:67:fe:a4:5f:ca:5e:5b:df:31:23:e6:b9:62:
                    45:51:1c:e9:f6:43:6e:95:5c:87:7b:5e:c6:09:e8:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.80.0/22
                  45.61.128.0/18
                  104.194.128.0/19
                  104.244.72.0/21
                  107.189.0.0/19
                  144.172.64.0/18
                  162.244.92.0/22
                  162.245.0.0/21
                  167.88.160.0/20
                  172.86.64.0/18
                  198.98.48.0/20
                  198.251.80.0/20
                  199.19.224.0/22
                  199.195.248.0/21
                  205.185.112.0/20
                  209.141.32.0/19
                IPv6:
                  2605:6400::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53667

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:03:e7:d1:2b:97:1d:35:94:b6:aa:9f:27:85:b4:6f:63:5f:
         be:33:ca:1e:4a:bf:84:7e:d9:0a:b1:0c:cc:de:27:90:36:5f:
         5e:f2:90:6c:02:2e:30:74:65:8a:e6:84:68:fb:ff:e8:45:9c:
         84:80:32:a7:d5:db:38:e3:28:24:c6:f5:8c:67:f2:f0:ec:01:
         f3:63:46:2f:c7:77:b7:1f:cd:72:61:c3:40:cb:fe:b0:c1:76:
         45:a8:fe:3f:82:75:5c:32:f7:83:14:31:0a:e0:e2:2b:1f:be:
         8c:44:6a:ae:2d:5d:b6:3b:5f:1f:72:cf:74:8b:62:b0:90:d7:
         fa:6d:b6:e0:fd:34:2e:ff:ac:1a:75:db:b2:38:4f:1c:b1:8f:
         98:93:a6:28:39:bb:cc:51:2c:b0:63:35:7a:b3:c9:66:3b:aa:
         23:04:3c:ec:50:85:17:29:6d:f8:2a:4e:d6:1d:b3:af:2f:13:
         26:85:5c:e5:b9:a8:07:12:f5:22:1d:88:e2:a4:b9:c8:14:52:
         56:18:38:c7:3b:7c:c7:84:5a:7c:41:2b:61:66:ae:ee:b3:43:
         07:24:87:11:84:72:0b:1d:dd:25:aa:7e:12:87:54:1e:2c:e3:
         a7:71:d5:2f:7f:00:92:d1:e1:f9:dd:98:b9:4e:1d:70:77:5b:
         4f:41:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:11:03 2024 by rpki-client on console-ams.rpki-client.org