Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
File:                     abf1f0ec-0f56-4356-9ce5-9c637405f386.cer (raw, json)
Hash identifier:          xLdCooeCu/p6p1ZaFMwyyS80dEV+TzL0WBg3P86iUZI=
Subject key identifier:   97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584856CAFE1E2A178CAF35199280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Dec 2024 22:15:25 +0000
Certificate not after:    Sun 06 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 22423
                          AS: 54777
                          AS: 64254
                          AS: 396338
                          AS: 396363
                          IP: 24.231.96.0/20
                          IP: 45.42.72.0/21
                          IP: 45.58.96.0/20
                          IP: 65.23.128.0 -- 65.23.151.255
                          IP: 65.38.64.0/19
                          IP: 66.97.64.0/19
                          IP: 69.9.64.0/18
                          IP: 104.159.0.0/17
                          IP: 104.244.64.0/22
                          IP: 108.175.128.0/20
                          IP: 138.229.16.0/20
                          IP: 142.90.192.0/18
                          IP: 144.208.96.0/21
                          IP: 144.208.112.0/22
                          IP: 160.20.232.0/22
                          IP: 162.222.80.0/22
                          IP: 162.246.52.0/22
                          IP: 166.48.0.0/16
                          IP: 170.100.160.0/19
                          IP: 170.100.208.0/21
                          IP: 180.181.160.0/19
                          IP: 192.83.128.0/20
                          IP: 192.214.128.0/19
                          IP: 192.214.224.0/19
                          IP: 198.72.48.0/20
                          IP: 199.166.219.0/24
                          IP: 199.189.76.0/22
                          IP: 199.189.164.0/23
                          IP: 199.202.146.0/24
                          IP: 199.202.200.0/24
                          IP: 199.202.204.0/24
                          IP: 199.241.128.0/21
                          IP: 205.233.150.0/24
                          IP: 205.236.43.0/24
                          IP: 205.236.80.0/24
                          IP: 205.236.89.0/24
                          IP: 205.236.104.0/22
                          IP: 205.236.120.0/22
                          IP: 205.236.226.0/24
                          IP: 206.180.240.0/20
                          IP: 209.182.228.0/22
                          IP: 2604:a8c0::/32
                          IP: 2607:9500::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:56:ca:fe:1e:2a:17:8c:af:35:19:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 26 22:15:25 2024 GMT
            Not After : Dec  6 01:45:27 2026 GMT
        Subject: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:81:5d:70:20:8a:67:fa:f6:aa:65:d1:94:
                    59:91:b8:8d:a1:7f:f8:38:ea:b9:0e:4c:b4:7a:58:
                    cd:d7:b8:8b:06:15:a2:03:63:fb:55:bd:f3:42:e2:
                    ed:e3:3d:79:b2:a4:69:8f:d5:a2:45:31:62:7c:26:
                    c8:b8:28:07:97:eb:bf:c9:ab:64:d3:ed:a7:6f:89:
                    22:53:5b:de:02:67:71:85:f3:9c:43:f4:df:55:8f:
                    2d:82:44:42:af:b0:4a:b9:d5:74:36:53:39:37:74:
                    5b:06:01:6d:ee:2e:8e:6b:9f:a6:ea:e9:d0:e7:2d:
                    7b:f4:23:31:06:6b:c2:4e:98:6a:ac:64:55:f5:9c:
                    4e:d4:13:a3:45:47:2e:3d:4e:f3:22:a0:0e:4b:40:
                    6e:21:f2:c4:5f:1f:e7:28:c9:1f:cb:07:e9:b7:1d:
                    c8:6c:aa:f7:cc:1e:a5:ad:f1:ab:9b:bb:2a:f7:f9:
                    df:23:5d:98:b0:6a:c5:09:35:38:66:8f:8d:42:55:
                    c0:97:4d:b6:96:8a:2b:ac:0a:5e:a7:56:03:d3:0d:
                    10:da:b1:22:a8:ed:4c:7b:5d:1f:75:a7:aa:72:f3:
                    2b:64:d2:c3:32:7f:b8:f5:61:78:2b:9a:00:44:3b:
                    bf:c7:8e:90:c2:71:a3:77:b4:e9:78:39:5c:a4:fa:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.96.0/20
                  45.42.72.0/21
                  45.58.96.0/20
                  65.23.128.0-65.23.151.255
                  65.38.64.0/19
                  66.97.64.0/19
                  69.9.64.0/18
                  104.159.0.0/17
                  104.244.64.0/22
                  108.175.128.0/20
                  138.229.16.0/20
                  142.90.192.0/18
                  144.208.96.0/21
                  144.208.112.0/22
                  160.20.232.0/22
                  162.222.80.0/22
                  162.246.52.0/22
                  166.48.0.0/16
                  170.100.160.0/19
                  170.100.208.0/21
                  180.181.160.0/19
                  192.83.128.0/20
                  192.214.128.0/19
                  192.214.224.0/19
                  198.72.48.0/20
                  199.166.219.0/24
                  199.189.76.0/22
                  199.189.164.0/23
                  199.202.146.0/24
                  199.202.200.0/24
                  199.202.204.0/24
                  199.241.128.0/21
                  205.233.150.0/24
                  205.236.43.0/24
                  205.236.80.0/24
                  205.236.89.0/24
                  205.236.104.0/22
                  205.236.120.0/22
                  205.236.226.0/24
                  206.180.240.0/20
                  209.182.228.0/22
                IPv6:
                  2604:a8c0::/32
                  2607:9500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22423
                  54777
                  64254
                  396338
                  396363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:46:23:13:cb:17:53:9b:8b:f1:20:4d:fd:49:76:5d:60:
         1d:5b:4d:20:49:76:15:23:1f:c6:12:bd:e9:08:59:e1:1d:a8:
         d5:d9:10:19:58:7e:34:86:c9:c6:3c:1b:6c:20:61:9a:30:eb:
         e6:da:e0:31:15:73:98:33:36:b7:59:a3:91:bb:4c:09:6b:5c:
         58:76:72:9c:75:f8:c5:8d:cc:d2:b6:3e:db:0f:fc:10:b7:4d:
         ba:72:f2:91:95:34:b4:92:c6:db:5a:29:02:ce:ab:5d:f3:c3:
         cf:71:03:e4:dc:69:ea:e6:86:f9:69:9b:0c:d2:26:bb:d7:0c:
         af:23:fe:4d:8b:51:84:95:e4:d1:a6:be:da:33:5a:03:a9:d8:
         d8:d1:6b:66:f4:16:8d:da:08:ee:18:f3:f9:d6:cb:d6:a5:dd:
         52:f1:8e:ff:83:0d:3d:c2:1a:e7:3e:11:f8:af:12:7b:6d:48:
         f4:cb:10:b3:46:12:2a:7c:77:47:7d:aa:a8:12:75:45:59:33:
         ae:6f:cc:e4:c0:f5:39:1b:10:fa:db:1c:f7:b0:a5:f6:a2:0b:
         62:82:4e:1a:eb:66:dc:87:67:cf:87:b0:36:39:15:08:81:92:
         40:ec:01:79:72:95:28:5d:63:70:d3:1d:ed:14:48:8d:fc:58:
         60:b9:9e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 14 16:22:34 2025 by rpki-client on console-ams.rpki-client.org