Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
File:                     abf1f0ec-0f56-4356-9ce5-9c637405f386.cer (raw, json)
Hash identifier:          wSTmz9N1q/ujomVK6MhQnkJkdd0z73kbp3jcIIGzXV4=
Subject key identifier:   97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285847133E1C57B8D3312AD2079B18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 00:45:27 +0000
Certificate not after:    Sun 06 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 22423
                          AS: 54777
                          AS: 64254
                          AS: 396338
                          AS: 396363
                          IP: 24.231.96.0/20
                          IP: 45.42.72.0/21
                          IP: 45.58.96.0/20
                          IP: 65.23.128.0 -- 65.23.151.255
                          IP: 65.38.64.0/19
                          IP: 66.97.64.0/19
                          IP: 104.159.0.0/17
                          IP: 104.244.64.0/22
                          IP: 138.229.16.0/20
                          IP: 142.90.192.0/18
                          IP: 144.208.96.0/21
                          IP: 144.208.112.0/22
                          IP: 160.20.232.0/22
                          IP: 162.222.80.0/22
                          IP: 162.246.52.0/22
                          IP: 166.48.0.0/16
                          IP: 170.100.160.0/19
                          IP: 170.100.208.0/21
                          IP: 180.181.160.0/19
                          IP: 192.214.128.0/19
                          IP: 192.214.224.0/19
                          IP: 199.166.219.0/24
                          IP: 199.189.76.0/22
                          IP: 199.202.146.0/24
                          IP: 199.202.200.0/24
                          IP: 199.202.204.0/24
                          IP: 199.241.128.0/21
                          IP: 205.233.150.0/24
                          IP: 205.236.43.0/24
                          IP: 205.236.80.0/24
                          IP: 205.236.89.0/24
                          IP: 205.236.104.0/22
                          IP: 205.236.120.0/22
                          IP: 205.236.226.0/24
                          IP: 206.180.240.0/20
                          IP: 209.182.228.0/22
                          IP: 2604:a8c0::/32
                          IP: 2607:9500::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:3e:1c:57:b8:d3:31:2a:d2:07:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep  2 00:45:27 2024 GMT
            Not After : Dec  6 01:45:27 2026 GMT
        Subject: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:81:5d:70:20:8a:67:fa:f6:aa:65:d1:94:
                    59:91:b8:8d:a1:7f:f8:38:ea:b9:0e:4c:b4:7a:58:
                    cd:d7:b8:8b:06:15:a2:03:63:fb:55:bd:f3:42:e2:
                    ed:e3:3d:79:b2:a4:69:8f:d5:a2:45:31:62:7c:26:
                    c8:b8:28:07:97:eb:bf:c9:ab:64:d3:ed:a7:6f:89:
                    22:53:5b:de:02:67:71:85:f3:9c:43:f4:df:55:8f:
                    2d:82:44:42:af:b0:4a:b9:d5:74:36:53:39:37:74:
                    5b:06:01:6d:ee:2e:8e:6b:9f:a6:ea:e9:d0:e7:2d:
                    7b:f4:23:31:06:6b:c2:4e:98:6a:ac:64:55:f5:9c:
                    4e:d4:13:a3:45:47:2e:3d:4e:f3:22:a0:0e:4b:40:
                    6e:21:f2:c4:5f:1f:e7:28:c9:1f:cb:07:e9:b7:1d:
                    c8:6c:aa:f7:cc:1e:a5:ad:f1:ab:9b:bb:2a:f7:f9:
                    df:23:5d:98:b0:6a:c5:09:35:38:66:8f:8d:42:55:
                    c0:97:4d:b6:96:8a:2b:ac:0a:5e:a7:56:03:d3:0d:
                    10:da:b1:22:a8:ed:4c:7b:5d:1f:75:a7:aa:72:f3:
                    2b:64:d2:c3:32:7f:b8:f5:61:78:2b:9a:00:44:3b:
                    bf:c7:8e:90:c2:71:a3:77:b4:e9:78:39:5c:a4:fa:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.23.128.0-65.23.151.255
                  65.38.64.0/19
                  66.97.64.0/19
                  104.159.0.0/17
                  104.244.64.0/22
                  138.229.16.0/20
                  142.90.192.0/18
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  162.222.80.0/22
                  162.246.52.0/22
                  166.48.0.0/16
                  170.100.160.0/19
                  170.100.208.0/21
                  180.181.160.0/19
                  192.214.128.0/19
                  192.214.224.0/19
                  199.166.219.0/24
                  199.189.76.0/22
                  199.202.146.0/24
                  199.202.200.0/24
                  199.202.204.0/24
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.104.0/22
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/22
                IPv6:
                  2604:a8c0::/32
                  2607:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22423
                  54777
                  64254
                  396338
                  396363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:31:7c:8d:36:7c:16:f6:7f:f3:d0:3e:90:23:39:e9:dc:67:
         60:fb:5c:e3:53:d8:bc:8c:55:81:0a:df:c5:18:4d:90:6c:0e:
         2a:a2:67:80:28:90:d9:41:d6:5a:9f:7d:3e:bd:25:38:a3:d2:
         b1:55:d6:c6:f7:d8:e1:fa:47:b6:50:c3:a2:db:7e:dc:86:a6:
         83:8f:f1:4e:db:82:70:b7:b0:35:2e:c3:e8:51:41:58:22:82:
         dc:e8:86:5e:dd:ae:e5:22:dc:26:e0:ad:fb:8d:99:55:07:30:
         39:d0:b7:91:a3:05:23:c5:6b:c0:e4:4d:81:04:59:f0:4d:99:
         31:93:02:60:82:bf:42:e1:69:f6:90:b5:ce:ee:56:9b:dc:91:
         da:38:6e:41:4c:e4:12:9d:56:f5:4e:08:17:2f:bf:6c:63:8f:
         8d:49:fc:f1:9f:e2:8a:6c:5d:cf:d1:5e:c4:38:66:0d:35:c6:
         2a:84:8c:99:93:6a:8c:f3:f3:14:8f:df:19:6f:e9:31:e8:f9:
         7d:68:fe:f3:e0:bb:86:a9:33:4d:ce:35:12:ff:2f:1f:e4:07:
         11:85:ce:e5:d1:c4:19:62:c7:9f:5a:ed:2b:84:c4:09:20:f8:
         cc:af:10:4d:07:d0:2c:06:91:35:e4:13:95:39:a6:42:98:da:
         da:ec:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:33:46 2024 by rpki-client on console-ams.rpki-client.org