Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer
File:                     d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer (raw, json)
Hash identifier:          RhR1siRKhzXlX+qPEYVP3X/uOQd8X812b/sh0uhLayY=
Subject key identifier:   9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843C558C106CCCD3CA4427A11C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 04 Nov 2023 00:45:16 +0000
Certificate not after:    Fri 06 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 13917
                          IP: 66.206.160.0/20
                          IP: 2606:f000::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c5:58:c1:06:cc:cd:3c:a4:42:7a:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov  4 00:45:16 2023 GMT
            Not After : Feb  6 01:45:16 2026 GMT
        Subject: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:84:19:9a:95:dc:0e:70:6e:7d:bc:33:5f:
                    e8:b8:e5:63:0c:7a:19:fd:36:76:17:c0:84:b1:98:
                    1f:64:e6:86:ff:9c:f2:4f:53:63:bd:d2:98:d9:3d:
                    13:ee:f2:9c:f6:62:4c:11:30:9d:7d:4c:46:18:2c:
                    70:b8:31:87:bc:81:a5:b4:47:fd:56:27:49:ed:dc:
                    9e:67:6f:7f:5f:7e:5a:1b:3e:37:e4:57:6e:02:d7:
                    8b:d1:41:17:41:9a:0a:1f:ee:6e:08:9a:f7:5b:4d:
                    16:73:e4:fe:a2:9e:77:54:54:c8:e7:e7:ca:d4:4c:
                    ef:e1:12:7b:d9:e8:b7:6f:37:11:66:57:51:8a:34:
                    07:d2:bb:2b:8b:54:c1:f9:a6:c9:e0:32:de:4a:7c:
                    c8:cf:51:49:39:a7:d2:d0:52:24:07:5a:8c:1b:fd:
                    1b:ec:77:cc:d1:7d:7c:54:ca:f4:98:b9:e9:91:d2:
                    2a:b4:4d:d3:f2:c9:66:8a:b5:8f:60:6c:07:7e:b1:
                    fa:6d:f1:b0:1f:04:3b:ba:60:fc:6e:06:b6:bf:1b:
                    fb:59:50:79:23:4e:49:25:98:15:4a:fd:ff:50:d8:
                    39:c6:e2:50:cd:0a:61:7f:1f:9a:08:ea:16:2f:73:
                    69:8a:2f:d0:d2:52:4f:44:1b:35:b6:f2:a2:f4:57:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.160.0/20
                IPv6:
                  2606:f000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13917

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:55:b2:90:e7:94:08:bd:b6:1c:94:5e:54:6c:ea:08:ff:
         b0:85:c2:16:9f:e7:35:cd:2d:cc:b6:d6:20:e0:a1:f9:7d:dc:
         40:09:07:a1:08:74:16:62:c4:4e:a2:6e:46:21:73:f4:2b:84:
         52:88:19:1a:be:c3:b8:a8:21:6b:bd:f1:02:af:c0:8d:78:10:
         f2:4e:9a:0d:af:b5:ea:4d:bf:26:de:0e:0b:88:70:5b:f5:02:
         a9:7c:0c:8a:72:c2:92:3c:f7:65:d6:f4:f5:86:63:b4:ca:e7:
         b4:c9:d5:78:65:6f:36:e4:f4:e4:fc:98:3c:57:e9:0a:7e:6f:
         78:45:00:27:bb:ef:67:2c:c0:96:9b:29:bb:96:86:7b:d5:54:
         15:5b:ed:bf:40:0a:00:1b:8f:cb:fd:84:ce:1b:d2:89:b8:ce:
         0e:34:0d:b2:de:f3:92:5e:fb:3c:2e:50:a8:9e:8b:f5:3b:a3:
         a5:f8:95:2a:f1:96:f7:4f:75:52:d5:96:a8:47:43:4c:61:57:
         c9:a9:4b:3d:72:b3:16:9f:33:14:76:89:68:3d:ac:cd:b1:cd:
         ef:25:f4:fe:5f:a8:c2:ae:4a:6f:53:d2:34:53:63:a0:ef:4a:
         18:9d:11:15:f9:e7:b2:53:0d:17:e1:40:74:e5:7f:13:c0:d1:
         26:19:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:43:12 2024 by rpki-client on console-fra.rpki-client.org