Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
File:                     a3049800-ff17-49a6-b029-ec908e1c7cb3.cer (download)
Hash identifier:          Kj0GVxkUvrYXI6/PYXh+T1ZlwjQJ8FRNQjjzLpFEAZc=
Subject key identifier:   68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328576D51CC73C042CFC170439116A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Thu 14 Feb 2030 11:59:06 +0000
Subordinate resources:
    1: AS: 20150
    2: IP: 45.59.112.0/20
    3: IP: 66.23.192.0/21
    4: IP: 104.36.80.0/21
    5: IP: 216.126.224.0/20
    6: IP: 2604:4ac0::/32
    7: IP: 2604:4cc0::/32
    8: IP: 2604:4d40::/32
    9: IP: 2604:4fc0::/32
   10: IP: 2604:5040::/32
   11: IP: 2604:50c0::/32
   12: IP: 2604:6a40::/32
   13: IP: 2605:7980::/32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:43:91:16:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 14 11:59:06 2020 GMT
            Not After : Feb 14 11:59:06 2030 GMT
        Subject: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e1:44:0e:b5:8d:9c:c7:1e:cb:7a:27:9d:31:
                    73:2b:bf:8e:98:26:dd:23:ca:ce:98:00:12:07:c9:
                    67:7e:88:a2:76:96:c6:66:a9:8e:09:e3:91:69:4e:
                    76:88:74:01:0f:3b:49:a4:f4:e4:87:5a:6a:52:da:
                    fd:79:04:89:67:1c:19:30:81:ac:20:da:88:64:9c:
                    0c:86:d5:2f:d7:d2:d0:0d:24:02:03:35:55:08:b3:
                    57:d5:51:d7:26:ea:eb:12:72:00:23:af:26:99:9a:
                    b0:7a:26:3e:ab:e6:c0:1b:26:b8:b8:76:00:68:40:
                    47:0f:e1:5b:ae:28:9f:0e:e4:fe:04:38:62:af:1e:
                    d2:a9:02:f5:32:9e:99:51:21:34:e6:73:cb:52:13:
                    fe:ea:61:7f:80:ac:6c:cf:c5:30:7a:ea:27:e4:cd:
                    13:e0:58:3d:80:5c:26:c2:65:6b:e2:6b:2d:71:05:
                    b3:00:d3:d8:c3:09:90:79:2e:e5:a3:77:c8:f1:14:
                    45:79:dc:7d:ce:52:69:c0:a9:2a:e0:d6:56:13:6e:
                    f2:be:02:93:f5:97:f0:5b:74:32:d7:ae:54:77:2d:
                    47:e2:ca:f5:ba:14:71:df:8c:8e:6d:50:bd:11:17:
                    41:dc:a8:7f:71:eb:9a:e4:f4:23:25:a5:c5:f0:d7:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier: 
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.112.0/20
                  66.23.192.0/21
                  104.36.80.0/21
                  216.126.224.0/20
                IPv6:
                  2604:4ac0::/32
                  2604:4cc0::/32
                  2604:4d40::/32
                  2604:4fc0::/32
                  2604:5040::/32
                  2604:50c0::/32
                  2604:6a40::/32
                  2605:7980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20150

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:70:7b:45:fa:05:78:14:8c:4a:2d:9c:ab:ee:4f:75:64:32:
         db:2a:7a:14:b6:05:4b:3b:a3:e8:31:53:cf:79:41:ae:57:b2:
         02:f0:50:a5:8f:b7:88:20:18:c8:0a:7b:96:14:bd:73:c7:25:
         e3:5d:ce:12:3f:f2:2c:15:ef:fe:57:d0:66:82:46:61:b7:98:
         c4:9a:7b:be:cf:c2:13:fd:16:64:5a:e3:2e:49:54:32:68:a3:
         60:3b:bf:23:45:15:e4:d2:1a:76:7c:4b:68:9d:1c:b0:b9:b1:
         af:b3:21:b0:e6:94:6c:1b:a8:60:9d:3b:00:4a:cb:9e:eb:93:
         b5:89:97:0c:ad:c5:37:1b:4a:64:f5:96:34:03:bc:a6:6a:a5:
         e8:27:e2:f2:1f:91:c6:ed:df:eb:27:55:96:ab:bb:06:d7:3a:
         2e:48:46:cf:b0:a8:e6:54:39:29:5f:7a:4a:a2:65:b6:1a:93:
         30:bf:15:27:a3:1a:a4:a1:80:ea:aa:a0:d6:2e:00:c8:56:74:
         c0:53:de:ac:d8:74:61:51:5a:7b:93:9c:76:75:c6:ee:ec:b8:
         04:54:dd:56:a8:7c:a4:af:6b:0d:58:58:98:a1:ec:08:bd:11:
         44:92:92:48:cb:4d:19:39:4c:ea:b7:f7:0c:2e:35:12:1d:20:
         13:b0:ac:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 8 05:53:26 2023 by rpki-client.