Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692.cer
File:                     d426c818-fe62-465f-8184-d4f8176e2692.cer (raw, json)
Hash identifier:          TDp5iXdgSnSc6VfLx/1pxX2wCcjzkYq3pD9kcTpDi6I=
Subject key identifier:   F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844ED631168B370C21EE5DD6A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 18 Feb 2024 01:45:19 +0000
Certificate not after:    Sat 23 May 2026 00:45:19 +0000
Subordinate resources:    AS: 6507
                          IP: 104.160.128.0/19
                          IP: 151.106.240.0/20
                          IP: 162.249.72.0/21
                          IP: 192.64.168.0/21
                          IP: 192.207.0.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:63:11:68:b3:70:c2:1e:e5:dd:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 18 01:45:19 2024 GMT
            Not After : May 23 00:45:19 2026 GMT
        Subject: CN=d426c818-fe62-465f-8184-d4f8176e2692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e4:c2:36:19:cb:74:21:80:ae:c8:c2:ad:47:
                    5c:b9:ea:38:5f:b2:92:0f:c1:0e:9d:06:c0:66:38:
                    87:d1:ff:d3:aa:d0:5c:2d:da:b1:61:c4:51:b8:5c:
                    65:16:fb:85:25:dc:49:2f:14:49:76:3e:51:ab:76:
                    ac:24:18:d1:a6:93:6c:b0:a0:8e:25:ce:f6:ed:0d:
                    87:c2:b8:ac:02:93:58:23:70:d4:df:d7:23:f7:cb:
                    03:fe:46:10:aa:c6:a3:fb:5b:72:f7:51:86:84:60:
                    4b:a3:40:b9:56:b4:1c:9c:35:30:08:4d:18:07:6e:
                    81:df:01:ea:60:f5:a2:68:18:eb:b3:94:69:db:d9:
                    fb:3c:cc:62:07:5c:3b:21:d4:8a:0b:d6:22:f9:d6:
                    0a:f0:ea:70:99:53:07:7c:e9:5b:f1:85:1a:94:c6:
                    5b:7f:3f:0d:ce:3f:c8:f8:be:28:67:b4:70:52:fe:
                    f9:05:a5:05:03:bf:13:20:06:24:de:d2:97:28:dd:
                    53:d9:92:d8:ff:a2:f5:8f:6c:ed:50:f1:3a:3a:f0:
                    c4:72:e0:68:b6:ad:d7:a7:1a:3f:e9:bd:1e:d4:79:
                    3e:4e:2a:84:67:77:d4:42:b9:bc:d5:47:0a:90:b1:
                    64:be:b4:fd:62:a6:18:9b:09:5a:a7:39:fe:7a:e5:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:A9:A7:39:32:76:56:38:8F:91:60:69:64:D6:40:25:0E:3C:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d426c818-fe62-465f-8184-d4f8176e2692/d426c818-fe62-465f-8184-d4f8176e2692.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.128.0/19
                  151.106.240.0/20
                  162.249.72.0/21
                  192.64.168.0/21
                  192.207.0.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:ba:1c:09:84:d2:c6:c8:bf:4e:6e:17:7f:cc:a6:9f:26:
         d1:63:84:90:d4:1a:40:68:3b:bf:a2:5b:82:b9:3b:a7:34:59:
         64:28:a4:b2:88:fb:34:bf:1b:ab:6f:65:53:ba:7e:02:02:67:
         53:db:32:63:1b:83:97:44:28:34:d4:de:95:7b:62:b5:41:f7:
         37:81:18:dc:12:1f:9e:98:18:83:d0:54:7f:99:52:51:39:21:
         53:17:61:31:6c:8e:5a:b6:f8:b0:3f:63:a7:39:3c:5b:bc:3f:
         8e:14:d4:9b:9a:a3:2d:c4:42:fc:4c:c5:7f:07:81:ba:da:06:
         fc:42:34:b1:53:ce:7a:25:ab:b1:e3:d6:36:c9:21:53:fd:19:
         a6:eb:bd:1c:78:04:9d:db:93:a5:67:bd:93:a9:63:db:84:37:
         21:eb:0c:c8:7a:2c:31:ea:78:1f:fb:6c:ab:21:4b:d2:11:60:
         fc:47:f7:36:a2:07:5a:54:74:f5:93:e5:64:ad:20:2e:03:52:
         dc:86:91:a2:8f:07:45:65:fd:1e:5f:32:3e:df:21:4a:db:1d:
         65:87:59:da:79:74:b6:bd:9a:b8:54:6f:fa:14:f0:8b:ea:57:
         c0:bd:c1:37:ac:1e:53:65:e0:29:06:30:f0:f9:65:0d:05:3e:
         94:16:e5:15
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWETtYxFos3DCHuXdagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDIxODAxNDUxOVoXDTI2MDUyMzAwNDUxOVowLzEtMCsGA1UEAxMk
ZDQyNmM4MTgtZmU2Mi00NjVmLTgxODQtZDRmODE3NmUyNjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OTCNhnLdCGArsjCrUdcueo4X7KSD8EOnQbA
ZjiH0f/TqtBcLdqxYcRRuFxlFvuFJdxJLxRJdj5Rq3asJBjRppNssKCOJc727Q2H
wrisApNYI3DU39cj98sD/kYQqsaj+1ty91GGhGBLo0C5VrQcnDUwCE0YB26B3wHq
YPWiaBjrs5Rp29n7PMxiB1w7IdSKC9Yi+dYK8OpwmVMHfOlb8YUalMZbfz8Nzj/I
+L4oZ7RwUv75BaUFA78TIAYk3tKXKN1T2ZLY/6L1j2ztUPE6OvDEcuBotq3Xpxo/
6b0e1Hk+TiqEZ3fUQrm81UcKkLFkvrT9YqYYmwlapzn+euWPaQIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFPBfqac5MnZWOI+RYGlk1kAlDjy7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k
NDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2ZTI2OTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q0MjZjODE4LWZlNjItNDY1Zi04
MTg0LWQ0ZjgxNzZlMjY5Mi9kNDI2YzgxOC1mZTYyLTQ2NWYtODE4NC1kNGY4MTc2
ZTI2OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNwYIKwYBBQUH
AQcBAf8EKDAmMCQEAgABMB4DBAVooIADBASXavADBAOi+UgDBAPAQKgDBADAzwAw
GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICGWswVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACie6HAmE0sbIv05u
F3/Mpp8m0WOEkNQaQGg7v6Jbgrk7pzRZZCiksoj7NL8bq29lU7p+AgJnU9syYxuD
l0QoNNTelXtitUH3N4EY3BIfnpgYg9BUf5lSUTkhUxdhMWyOWrb4sD9jpzk8W7w/
jhTUm5qjLcRC/EzFfweButoG/EI0sVPOeiWrsePWNskhU/0Zpuu9HHgEnduTpWe9
k6lj24Q3IesMyHosMep4H/tsqyFL0hFg/Ef3NqIHWlR09ZPlZK0gLgNS3IaRoo8H
RWX9Hl8yPt8hStsdZYdZ2nl0tr2auFRv+hTwi+pXwL3BN6weU2XgKQYw8PllDQU+
lBblFQ==
-----END CERTIFICATE-----