Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
File:                     a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer (raw, json)
Hash identifier:          tiNawNUxSNA8eV6noUHv0mzoKG2E8P+himeuwgxNIFA=
Subject key identifier:   34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285842C07E6B9C2E781BD0BDE383B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 02 Aug 2023 14:15:11 +0000
Certificate not after:    Fri 10 Oct 2025 00:45:16 +0000
Subordinate resources:    IP: 23.132.184.0/23
                          IP: 128.254.204.0/22
                          IP: 192.138.210.0/23
                          IP: 192.209.62.0/23
                          IP: 216.73.156.0/22
                          IP: 2606:b940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 Mar 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c0:7e:6b:9c:2e:78:1b:d0:bd:e3:83:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  2 14:15:11 2023 GMT
            Not After : Oct 10 00:45:16 2025 GMT
        Subject: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cf:ab:4c:2c:27:e4:c6:63:7a:06:e5:37:1e:
                    9d:30:df:62:1e:49:8d:a0:36:47:d7:9f:75:07:da:
                    2b:11:22:9f:cf:ef:ae:0c:10:0e:93:52:4e:b6:aa:
                    b0:db:e3:b0:6c:50:f0:70:30:95:95:97:06:b2:29:
                    7c:72:05:61:b1:40:e0:00:13:f0:c9:bb:6d:94:44:
                    5a:e2:3b:3e:a7:e4:59:15:e1:14:bd:40:5d:17:f5:
                    f3:76:f0:b9:f4:51:70:75:97:b0:67:53:9f:08:b0:
                    66:95:ca:74:57:bc:d2:09:00:93:33:53:4e:58:aa:
                    d9:0d:bc:70:7f:84:c5:05:e9:5f:59:bf:7d:2c:2a:
                    f9:9b:a5:1e:02:6e:d7:24:d1:3a:02:6b:7c:ce:81:
                    99:c1:6c:e4:b3:c3:ad:2a:ca:d1:7b:b2:22:96:19:
                    a5:bc:c0:81:86:78:e8:6c:f4:d4:a2:bb:9d:12:29:
                    2d:1e:76:95:10:ad:6f:09:74:ac:af:50:30:d9:c1:
                    d8:8e:d6:86:57:75:a7:29:b4:5e:49:5a:ad:62:cf:
                    11:11:9f:8f:46:a7:24:16:e7:fe:f3:88:28:3f:84:
                    e2:b4:75:43:4d:c4:1b:ee:b7:a7:2d:61:24:f1:f9:
                    6a:b7:55:96:8e:ce:27:f4:a2:e6:3f:d4:5c:f5:c3:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/23
                  128.254.204.0/22
                  192.138.210.0/23
                  192.209.62.0/23
                  216.73.156.0/22
                IPv6:
                  2606:b940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3f:1a:ed:0f:ed:65:0d:3a:13:02:31:5d:64:f2:ab:c4:aa:
         4a:50:fa:25:3f:14:ce:38:b5:af:16:ca:eb:ad:d4:67:de:4a:
         99:70:ad:27:5d:d9:f0:ba:c5:87:22:e1:b4:76:7e:bf:ab:1b:
         8a:31:8c:da:b3:36:86:92:60:6e:81:0b:1c:0d:b3:85:88:2f:
         9a:ef:bd:14:5e:01:dd:c8:71:74:1f:d4:0f:6b:8e:e4:2f:66:
         f4:3a:7a:e0:54:ce:da:2d:9a:88:9f:c3:6b:57:a0:a9:1e:e9:
         d5:1a:01:88:7c:35:a6:3b:6e:de:61:d4:85:8c:b7:65:ee:7e:
         5f:15:33:f7:fe:a9:33:36:92:32:f0:8f:ec:2f:dc:67:98:b4:
         15:eb:d1:71:dc:85:39:b4:76:65:45:b6:ad:5d:b3:94:23:11:
         e9:b7:e9:f4:98:89:2f:35:ca:6e:8a:27:fc:92:6c:06:c6:ef:
         66:46:4a:1b:fc:f0:60:c1:c6:1d:28:09:14:7d:8e:5b:ee:2d:
         33:72:35:e5:ef:0f:30:90:9e:77:b4:61:5e:85:32:d6:75:20:
         fa:17:d8:08:a5:9b:ac:82:b9:83:3d:a9:ed:51:a7:f9:2a:b3:
         08:4b:99:b6:ca:47:54:d6:26:b7:f9:00:2e:01:bf:a5:56:6c:
         3f:8c:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:04:53 2024 by rpki-client on console-fra.rpki-client.org