Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer
File:                     da61168f-5649-4fda-acc2-e65f377d2592.cer (raw, json)
Hash identifier:          qqUEKkFPgr+ZmS8mKkCcNTTd7D8WJClSxQSa2gLBr0g=
Subject key identifier:   E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858465AFCE7D47FFD9EB3B6136100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Jun 2024 00:45:20 +0000
Certificate not after:    Thu 01 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 1787
                          AS: 13619
                          AS: 17168
                          AS: 20186
                          AS: 21931
                          AS: 23109
                          AS: 40319
                          AS: 398928
                          AS: 398934
                          AS: 399616
                          IP: 155.46.96.0 -- 155.46.255.255
                          IP: 159.42.128.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:fc:e7:d4:7f:fd:9e:b3:b6:13:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 28 00:45:20 2024 GMT
            Not After : Oct  1 00:45:20 2026 GMT
        Subject: CN=da61168f-5649-4fda-acc2-e65f377d2592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:6b:6f:9c:73:c0:82:1d:95:5d:9a:11:93:
                    4a:1d:21:86:1c:03:04:d6:06:f0:97:ee:0f:bd:f0:
                    64:00:96:61:3d:b0:b8:82:e9:93:11:6b:da:7b:39:
                    df:9a:b0:d0:ee:af:45:b8:c2:a9:ce:23:c3:65:37:
                    17:6e:bb:fd:48:50:05:9b:28:36:5f:3f:6a:1b:7f:
                    9a:31:bd:44:8f:19:09:c5:e6:1b:8f:93:8b:8d:3f:
                    67:79:55:b9:ea:d6:c9:87:78:a2:54:88:dc:91:d9:
                    db:d6:ef:a9:2e:21:e7:5b:89:0d:a1:a7:90:29:51:
                    36:8f:eb:ff:a0:37:b3:f3:ab:49:35:0c:7a:98:f6:
                    a0:89:31:f6:e1:18:57:02:50:36:0f:1e:19:14:1f:
                    d0:c2:2a:a0:be:b6:b8:a6:93:6b:98:02:4e:fa:2b:
                    50:89:a2:07:11:a9:a2:19:bd:23:3e:ec:dc:29:52:
                    c5:89:4a:5c:b0:73:19:38:4c:76:36:3f:d0:d6:f3:
                    0e:5f:83:cc:f8:1c:24:eb:34:f8:88:d6:77:d8:e2:
                    40:c4:28:ae:fc:5d:0b:d0:74:48:0b:a5:75:2b:fa:
                    89:53:75:f4:93:81:18:0f:d9:ad:80:9c:2f:ac:ea:
                    c9:26:12:d8:ba:e7:6e:11:2e:1b:16:b6:8f:56:bf:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.46.96.0-155.46.255.255
                  159.42.128.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1787
                  13619
                  17168
                  20186
                  21931
                  23109
                  40319
                  398928
                  398934
                  399616

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:2f:bd:33:7f:ef:e6:5d:51:e3:5e:04:dc:e0:5a:e3:25:
         df:9c:02:d6:9d:bc:d0:e8:9f:38:0d:90:ec:b9:41:9f:6c:ec:
         bd:15:3b:f9:e5:50:d8:ad:a8:61:ad:3f:02:a4:31:e4:46:61:
         8e:d0:49:51:d1:e3:19:86:d4:91:4a:af:32:4b:be:8c:d1:2f:
         67:a8:6c:99:7f:b6:f7:d4:e4:27:49:d4:f7:3b:1f:72:85:28:
         3b:c0:37:ca:3b:c7:8d:af:f9:1b:ed:2d:79:84:9b:66:3b:0b:
         15:60:70:1f:4e:1d:6e:7f:c2:cc:d7:fa:6e:35:17:84:a4:c1:
         38:32:49:b6:38:2c:a9:ee:80:76:79:9b:74:2e:f9:c6:45:cc:
         b1:26:e3:14:9d:ae:65:b0:82:85:b0:8a:2c:64:5e:40:35:2d:
         2c:0a:33:b1:3a:1d:03:01:48:9d:3e:4d:c2:06:4a:67:89:b9:
         08:b0:93:21:3e:07:af:14:d0:d6:87:fe:07:1f:3f:92:70:a5:
         c0:fd:85:1b:70:9a:dd:b8:b5:c4:1e:ba:53:34:44:d2:0a:57:
         d1:e7:a5:73:7b:75:c1:53:a5:e3:03:e3:06:4d:7c:54:b1:d0:
         37:9c:35:71:64:5b:68:bb:a7:61:5b:4a:33:6d:e7:f0:94:aa:
         ee:91:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----