Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
File:                     9bc88207-e7c7-453e-a4ab-77b72152c33a.cer (raw, json)
Hash identifier:          BBCzSoYyDzPo4V9F3BKdVxef/c/oAjZkrFdm6qpRdew=
Subject key identifier:   49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846232739E220BC995BD3476400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 08 Jun 2024 00:45:20 +0000
Certificate not after:    Fri 11 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 22379
                          IP: 65.49.240.0/20
                          IP: 134.65.8.0/21
                          IP: 134.65.32.0/21
                          IP: 134.65.174.0/23
                          IP: 149.20.70.0/23
                          IP: 160.32.64.0/18
                          IP: 160.32.248.0 -- 160.32.253.255
                          IP: 173.46.224.0/19
                          IP: 184.75.144.0/20
                          IP: 199.73.12.0/22
                          IP: 209.127.208.0/22
                          IP: 216.52.100.0/23
                          IP: 216.86.72.0/21
                          IP: 2606:5e80::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:23:27:39:e2:20:bc:99:5b:d3:47:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun  8 00:45:20 2024 GMT
            Not After : Sep 11 00:45:20 2026 GMT
        Subject: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:fb:c6:55:d9:e5:bb:3f:24:ba:c0:e1:48:
                    4c:93:8d:1e:bf:00:02:89:7a:d1:c6:ba:06:24:8b:
                    ad:be:fa:6c:61:4c:d1:7f:ac:d1:c5:7d:74:68:64:
                    db:66:f9:18:7d:16:50:25:bc:56:8c:d5:34:43:6d:
                    eb:2b:d1:16:6d:cf:18:ff:1b:2b:e2:2b:d9:92:78:
                    47:03:5a:49:f3:33:75:3a:29:71:09:91:65:6c:88:
                    2c:e9:f6:fe:0c:1f:ab:5e:db:06:e2:6e:16:d1:64:
                    f1:18:68:0b:d5:58:bc:e0:f1:cb:56:da:0b:73:52:
                    72:e0:c6:21:82:f1:3d:d2:4a:7d:f8:96:83:f7:b3:
                    b5:05:cb:fe:d6:ae:f9:2b:01:97:04:22:76:c6:1c:
                    7d:d8:4d:94:8e:d8:0d:4a:15:2f:55:83:63:69:ce:
                    a4:37:e7:de:4c:48:94:ad:2e:22:53:6d:22:f8:97:
                    f0:57:1b:1e:c6:50:6f:bc:7d:92:3e:fd:62:85:15:
                    19:0f:eb:30:ca:79:c5:33:2f:78:16:b6:07:25:44:
                    a3:82:1f:1b:2e:f5:ee:b0:8a:55:4b:92:28:eb:df:
                    f7:00:5c:8e:f2:a9:80:f1:b4:ef:bd:d9:ca:1e:86:
                    13:6e:5b:48:e4:95:0d:27:cb:8b:c1:91:9f:22:01:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.240.0/20
                  134.65.8.0/21
                  134.65.32.0/21
                  134.65.174.0/23
                  149.20.70.0/23
                  160.32.64.0/18
                  160.32.248.0-160.32.253.255
                  173.46.224.0/19
                  184.75.144.0/20
                  199.73.12.0/22
                  209.127.208.0/22
                  216.52.100.0/23
                  216.86.72.0/21
                IPv6:
                  2606:5e80::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22379

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:4f:b9:1c:35:27:27:4c:0c:63:32:9f:29:26:d8:dc:2f:
         22:d5:7a:4f:69:80:88:df:af:cd:a5:51:3e:df:7b:3a:19:c5:
         ec:8d:0c:43:50:12:8d:36:a7:bf:6f:9b:58:29:fd:c2:3f:56:
         c6:9c:71:d7:33:82:e8:e6:1c:c1:fe:a4:b2:31:79:15:74:1b:
         a8:1e:07:0f:ed:20:5a:2c:3f:0d:50:21:44:e9:23:83:12:fb:
         cc:1a:c3:85:29:a3:85:fa:32:85:b3:dc:03:45:e3:dd:15:c8:
         0e:10:de:c8:23:51:32:68:2a:29:12:9d:54:05:56:2e:95:7d:
         97:e2:6d:cc:a6:6e:b8:d7:f8:a6:dd:99:b1:45:a2:b9:9c:08:
         96:18:7a:87:43:25:73:8f:bc:98:ba:a4:4e:91:b1:e7:ab:1c:
         de:b2:c5:3c:6c:6d:2d:3d:e4:2c:b5:9f:b5:49:92:d9:f4:d2:
         d5:d5:e3:1b:60:dc:f9:06:30:01:a9:ce:7e:44:7a:48:e6:83:
         4f:d3:70:ad:b7:70:fc:1d:76:20:5e:13:a9:5d:0f:78:5c:ea:
         4a:a7:b7:7a:13:93:98:56:56:bf:c2:b6:3a:bb:e0:7c:14:0d:
         5c:c4:40:89:eb:79:47:ae:cf:4b:1a:68:4b:a1:8a:21:d3:5c:
         de:57:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:42:59 2024 by rpki-client on console-fra.rpki-client.org