Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
File:                     a01c464d-9d20-46a1-858b-c36c8c1a3776.cer (raw, json)
Hash identifier:          Clf88M2xCMHBsjrVD5mTfy3c8yBfzjHfgyohZ3DOh9w=
Subject key identifier:   42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858454965DFF4EDE49B35C1FE1A60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Mar 2024 00:45:21 +0000
Certificate not after:    Thu 25 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 6360
                          IP: 128.171.0.0/16
                          IP: 132.160.0.0/16
                          IP: 166.122.0.0/16
                          IP: 168.105.0.0/16
                          IP: 192.35.145.0/24
                          IP: 192.48.34.0/24
                          IP: 205.166.204.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:49:65:df:f4:ed:e4:9b:35:c1:fe:1a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Mar 22 00:45:21 2024 GMT
            Not After : Jun 25 00:45:21 2026 GMT
        Subject: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:ed:40:63:10:ce:9e:fb:bd:b4:07:79:2b:
                    ae:62:f0:56:87:e5:9c:87:89:21:b1:22:7b:15:0d:
                    b2:a5:7c:9e:41:1a:04:f7:44:07:32:b7:eb:0a:cd:
                    8c:5c:58:6f:b4:96:ca:68:6d:82:39:f4:c0:59:c4:
                    38:e4:78:29:79:6a:c6:d7:62:36:64:43:9f:a1:5e:
                    09:51:43:fd:65:16:73:69:d9:aa:78:32:36:c5:42:
                    88:2a:25:7e:7d:61:fe:b0:43:10:c2:72:62:56:f1:
                    29:4d:47:36:cf:77:4c:8f:53:2f:74:f4:ac:ca:04:
                    28:91:d5:b7:76:2f:61:8c:69:f2:7a:dc:fd:0b:b7:
                    14:69:a5:0c:34:30:f9:e5:e0:c2:87:58:aa:af:5a:
                    dc:21:0d:1a:4d:ce:f5:5f:4d:1c:d5:95:c4:c1:2f:
                    c4:4f:45:7a:0e:df:f2:0c:82:49:17:9b:84:f6:6b:
                    45:79:a3:4f:06:be:8d:90:62:05:d6:25:91:dc:b6:
                    ca:e5:c7:14:91:9b:c6:0e:25:6e:3b:bd:df:98:d8:
                    e1:b9:94:37:d2:a9:be:59:a1:fd:ce:63:0a:9f:6b:
                    73:7e:96:70:54:cd:23:67:81:7c:41:7e:d6:65:fb:
                    4c:fd:09:cc:2f:7d:3e:b5:7f:7f:f8:19:09:e1:8e:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.171.0.0/16
                  132.160.0.0/16
                  166.122.0.0/16
                  168.105.0.0/16
                  192.35.145.0/24
                  192.48.34.0/24
                  205.166.204.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6360

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:bf:54:14:c2:45:d6:73:4c:f8:d9:17:24:ce:ec:d7:e1:
         1e:45:8c:49:a0:d7:f3:bc:02:36:c2:b2:19:4d:de:01:12:91:
         81:6e:30:c5:0e:f6:33:f5:1f:10:0a:31:6f:c3:82:68:58:5e:
         d5:78:35:d3:cf:a1:11:a9:4d:59:6f:0e:06:5b:1c:09:fa:8a:
         1c:4a:be:76:91:7a:10:da:4b:b5:16:e1:16:49:89:1e:10:35:
         42:ef:1f:56:81:ee:7e:eb:e9:72:53:61:e5:b2:8e:c8:94:9a:
         ff:c3:6b:bf:79:a9:4e:07:0f:43:3b:28:e4:cd:db:c7:85:f4:
         d9:c7:e2:da:7d:b2:bb:97:ce:15:0b:77:ef:d0:2c:8b:6b:1e:
         88:a5:8f:e3:b9:de:95:58:4e:25:fb:af:71:54:1d:83:ec:c0:
         84:f5:64:6f:01:84:2f:ae:ec:b3:c6:95:ef:c7:75:6b:2f:ce:
         71:15:f6:57:62:b4:f7:0f:e7:aa:b8:26:20:2f:01:be:b9:aa:
         2d:67:cb:3a:0d:a0:c8:d3:5a:f5:b4:aa:a5:af:1f:85:9b:72:
         d6:a0:75:c0:c7:10:d4:a7:88:61:25:5c:09:c0:f1:68:c7:6e:
         f1:fc:63:1d:2b:f8:41:00:53:dc:70:be:5c:ff:c3:3a:35:32:
         d6:6c:1e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:33:40 2024 by rpki-client on console-ams.rpki-client.org