Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
File:                     abf1f0ec-0f56-4356-9ce5-9c637405f386.cer (raw, json)
Hash identifier:          cRWrvLkQ76h/XZFZra0iX/kseBJZjdxW/l8LYGpaEmo=
Subject key identifier:   97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858444D5E3633BEAA189C09521300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Dec 2023 18:06:12 +0000
Certificate not after:    Tue 02 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 22423
                          AS: 54777
                          AS: 64254
                          AS: 396338
                          AS: 396363
                          IP: 24.231.96.0/20
                          IP: 45.42.72.0/21
                          IP: 45.58.96.0/20
                          IP: 65.23.128.0 -- 65.23.151.255
                          IP: 65.38.64.0/19
                          IP: 66.97.64.0/19
                          IP: 104.159.0.0/17
                          IP: 104.244.64.0/22
                          IP: 138.229.16.0/20
                          IP: 142.90.192.0/18
                          IP: 144.208.96.0/21
                          IP: 144.208.112.0/22
                          IP: 160.20.232.0/22
                          IP: 162.222.80.0/22
                          IP: 162.246.52.0/22
                          IP: 166.48.0.0/16
                          IP: 192.214.128.0/19
                          IP: 192.214.224.0/19
                          IP: 199.166.219.0/24
                          IP: 199.189.76.0/22
                          IP: 199.202.146.0/24
                          IP: 199.202.200.0/24
                          IP: 199.202.204.0/24
                          IP: 199.241.128.0/21
                          IP: 205.233.150.0/24
                          IP: 205.236.43.0/24
                          IP: 205.236.80.0/24
                          IP: 205.236.89.0/24
                          IP: 205.236.104.0/22
                          IP: 205.236.120.0/22
                          IP: 205.236.226.0/24
                          IP: 206.180.240.0/20
                          IP: 209.182.228.0/22
                          IP: 2604:a8c0::/32
                          IP: 2607:9500::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:4d:5e:36:33:be:aa:18:9c:09:52:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 22 18:06:12 2023 GMT
            Not After : Sep  2 00:45:16 2025 GMT
        Subject: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:81:5d:70:20:8a:67:fa:f6:aa:65:d1:94:
                    59:91:b8:8d:a1:7f:f8:38:ea:b9:0e:4c:b4:7a:58:
                    cd:d7:b8:8b:06:15:a2:03:63:fb:55:bd:f3:42:e2:
                    ed:e3:3d:79:b2:a4:69:8f:d5:a2:45:31:62:7c:26:
                    c8:b8:28:07:97:eb:bf:c9:ab:64:d3:ed:a7:6f:89:
                    22:53:5b:de:02:67:71:85:f3:9c:43:f4:df:55:8f:
                    2d:82:44:42:af:b0:4a:b9:d5:74:36:53:39:37:74:
                    5b:06:01:6d:ee:2e:8e:6b:9f:a6:ea:e9:d0:e7:2d:
                    7b:f4:23:31:06:6b:c2:4e:98:6a:ac:64:55:f5:9c:
                    4e:d4:13:a3:45:47:2e:3d:4e:f3:22:a0:0e:4b:40:
                    6e:21:f2:c4:5f:1f:e7:28:c9:1f:cb:07:e9:b7:1d:
                    c8:6c:aa:f7:cc:1e:a5:ad:f1:ab:9b:bb:2a:f7:f9:
                    df:23:5d:98:b0:6a:c5:09:35:38:66:8f:8d:42:55:
                    c0:97:4d:b6:96:8a:2b:ac:0a:5e:a7:56:03:d3:0d:
                    10:da:b1:22:a8:ed:4c:7b:5d:1f:75:a7:aa:72:f3:
                    2b:64:d2:c3:32:7f:b8:f5:61:78:2b:9a:00:44:3b:
                    bf:c7:8e:90:c2:71:a3:77:b4:e9:78:39:5c:a4:fa:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.23.128.0-65.23.151.255
                  65.38.64.0/19
                  66.97.64.0/19
                  104.159.0.0/17
                  104.244.64.0/22
                  138.229.16.0/20
                  142.90.192.0/18
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  162.222.80.0/22
                  162.246.52.0/22
                  166.48.0.0/16
                  192.214.128.0/19
                  192.214.224.0/19
                  199.166.219.0/24
                  199.189.76.0/22
                  199.202.146.0/24
                  199.202.200.0/24
                  199.202.204.0/24
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.104.0/22
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/22
                IPv6:
                  2604:a8c0::/32
                  2607:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22423
                  54777
                  64254
                  396338
                  396363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1b:47:4e:35:a2:4f:94:f4:21:e0:9f:15:c4:7a:e3:ef:ca:
         bb:c4:e7:ec:93:a4:d8:61:07:81:a1:0d:a9:38:de:d4:a6:ec:
         f6:66:fc:72:c6:09:d5:7f:14:90:fb:e2:70:b4:87:21:8f:43:
         37:50:62:bd:ca:4a:39:3e:00:08:e0:1f:57:c6:4c:a4:1e:e2:
         93:92:11:ae:3e:6d:0d:c4:48:f6:fa:97:c8:1b:f5:39:57:17:
         77:00:2c:eb:7f:2a:c2:b2:2c:62:fc:f5:36:17:6c:8a:96:5d:
         d4:8b:d5:8f:58:ce:67:09:91:ec:28:32:8d:d3:e4:4f:6e:38:
         46:a7:ee:2d:02:c9:06:29:0f:a4:67:8e:3e:7a:dc:38:83:42:
         ad:a8:ec:ea:59:22:66:15:fd:75:32:fc:eb:48:0c:b9:d8:81:
         1b:97:2e:7d:77:bd:66:b4:0d:fe:7c:41:66:71:35:dc:02:5d:
         5a:ec:39:71:e2:1b:9c:40:04:a6:b0:9c:db:ec:22:88:ad:fc:
         66:c8:2a:39:87:47:5e:eb:17:b9:82:96:4a:e7:30:d8:6b:33:
         c3:62:34:19:e1:77:f8:78:20:4e:88:9c:1a:b8:8e:af:f6:3f:
         ad:2e:bf:90:bb:ba:75:0b:11:42:c6:15:1e:3c:93:d6:5a:6e:
         3c:8e:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:18:04 2024 by rpki-client on console-ams.rpki-client.org