Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d.cer
File:                     c5866eff-c061-4d47-9ecb-06697eb4f13d.cer (raw, json)
Hash identifier:          1b7u83oPfIBTG8rBmpYtrIRH322A2ULO7BZFEwZWJgI=
Subject key identifier:   3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845734620D015F2FC32DFBABE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 06 Apr 2024 00:45:20 +0000
Certificate not after:    Fri 10 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 53591
                          IP: 208.74.136.0/22
                          IP: 208.94.32.0/22
                          IP: 2604:4700::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:46:20:d0:15:f2:fc:32:df:ba:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr  6 00:45:20 2024 GMT
            Not After : Jul 10 00:45:20 2026 GMT
        Subject: CN=c5866eff-c061-4d47-9ecb-06697eb4f13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:44:e9:e8:24:3b:04:af:ac:c7:e8:e6:94:
                    48:d6:ca:95:36:72:48:0d:70:a0:87:d6:bf:58:92:
                    41:25:00:98:b5:f6:01:1b:cf:f2:53:7e:f7:1a:f2:
                    80:69:fd:2c:88:33:b6:ae:7d:da:74:31:21:ef:8f:
                    5d:06:c8:9f:4a:3b:e5:5c:cf:80:38:14:56:a3:3e:
                    86:d0:96:c4:10:58:c2:05:22:f9:74:62:34:ec:52:
                    da:09:61:d9:fa:df:e0:b9:5d:e1:25:9f:d1:ff:bb:
                    ed:9c:0b:38:8c:00:6b:54:17:e9:73:88:46:83:d9:
                    a1:4d:4d:af:05:fe:29:4e:c5:e2:76:a8:e2:d6:b7:
                    4d:73:1d:1b:e3:7c:8c:b6:31:8f:00:40:47:0b:f0:
                    8c:6f:44:9c:9a:86:5e:10:48:f9:f7:2c:e1:d5:e4:
                    46:cb:68:c3:4e:f2:47:e3:5b:ab:42:32:da:95:d7:
                    9a:3e:6c:28:91:b6:90:39:d6:d3:68:5a:ac:b2:97:
                    43:d1:c0:53:68:a4:18:25:55:8e:2a:ac:2e:48:a3:
                    2f:0c:cd:f2:1a:7e:e4:2f:1e:b9:e3:15:5c:67:d2:
                    9d:11:d1:de:09:4c:8f:56:29:8f:78:c1:fb:ee:a8:
                    65:43:f2:00:3c:a4:8d:59:d9:08:3f:c0:43:36:9c:
                    53:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:B2:FE:08:94:AD:35:E3:7C:3D:13:A3:80:5A:29:23:51:B4:ED
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c5866eff-c061-4d47-9ecb-06697eb4f13d/c5866eff-c061-4d47-9ecb-06697eb4f13d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.136.0/22
                  208.94.32.0/22
                IPv6:
                  2604:4700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53591

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:a6:49:b6:73:ef:1f:03:b9:1f:c4:9c:09:98:b2:5e:20:
         8a:d4:db:63:45:55:f2:54:86:a4:ad:7d:a1:cd:d4:a6:3b:ba:
         4e:b0:0c:d0:fc:d9:fe:74:15:60:5e:7a:cc:0b:92:07:b3:43:
         00:95:56:3c:db:6e:3e:13:ac:b8:f1:1c:58:35:02:51:fb:3b:
         df:ee:61:1e:fa:19:14:f0:16:50:a6:4a:44:ea:dd:e9:f6:ed:
         0e:25:bd:d4:d9:7a:9a:45:73:01:ce:3a:58:08:75:a8:52:9a:
         cd:5d:13:cb:7a:3b:6b:01:8d:6a:ca:ce:df:f8:29:84:e9:76:
         b9:84:67:b2:c2:8a:e6:f5:cd:e2:46:d9:75:d5:1e:ea:bf:44:
         b8:f0:46:68:c0:ea:ee:e6:9f:b1:39:43:a5:c6:51:4f:96:8b:
         26:6f:b2:70:b8:db:72:4f:10:4b:a9:2c:36:d7:67:cf:14:af:
         4b:98:7a:5a:dd:0f:14:a2:b3:09:ac:95:dc:28:39:8b:52:0a:
         ae:9b:73:dd:38:a5:50:bf:d5:bf:2e:f5:28:0d:47:e1:a4:72:
         1d:12:17:d6:b0:18:90:08:34:62:8b:f6:8b:78:b7:de:70:ea:
         ec:d5:2c:8a:4e:ff:17:b1:95:f6:eb:e9:e1:1d:22:b6:da:9c:
         82:b3:63:7c
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEVzRiDQFfL8Mt+6vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDQwNjAwNDUyMFoXDTI2MDcxMDAwNDUyMFowLzEtMCsGA1UEAxMk
YzU4NjZlZmYtYzA2MS00ZDQ3LTllY2ItMDY2OTdlYjRmMTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzctE6egkOwSvrMfo5pRI1sqVNnJIDXCgh9a/
WJJBJQCYtfYBG8/yU373GvKAaf0siDO2rn3adDEh749dBsifSjvlXM+AOBRWoz6G
0JbEEFjCBSL5dGI07FLaCWHZ+t/guV3hJZ/R/7vtnAs4jABrVBfpc4hGg9mhTU2v
Bf4pTsXidqji1rdNcx0b43yMtjGPAEBHC/CMb0ScmoZeEEj59yzh1eRGy2jDTvJH
41urQjLaldeaPmwokbaQOdbTaFqsspdD0cBTaKQYJVWOKqwuSKMvDM3yGn7kLx65
4xVcZ9KdEdHeCUyPVimPeMH77qhlQ/IAPKSNWdkIP8BDNpxTJwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFD9Rsv4IlK0143w9E6OAWikjUbTtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j
NTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2ViNGYxM2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2M1ODY2ZWZmLWMwNjEtNGQ0Ny05
ZWNiLTA2Njk3ZWI0ZjEzZC9jNTg2NmVmZi1jMDYxLTRkNDctOWVjYi0wNjY5N2Vi
NGYxM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBALQSogDBALQXiAwDQQCAAIwBwMFACYERwAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDANFXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFPHpkm2c+8fA7kfxJwJ
mLJeIIrU22NFVfJUhqStfaHN1KY7uk6wDND82f50FWBeeswLkgezQwCVVjzbbj4T
rLjxHFg1AlH7O9/uYR76GRTwFlCmSkTq3en27Q4lvdTZeppFcwHOOlgIdahSms1d
E8t6O2sBjWrKzt/4KYTpdrmEZ7LCiub1zeJG2XXVHuq/RLjwRmjA6u7mn7E5Q6XG
UU+WiyZvsnC423JPEEupLDbXZ88Ur0uYelrdDxSiswmsldwoOYtSCq6bc904pVC/
1b8u9SgNR+Gkch0SF9awGJAINGKL9ot4t95w6uzVLIpO/xexlfbr6eEdIrbanIKz
Y3w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:43:11 2024 by rpki-client on console-fra.rpki-client.org