Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
File:                     f4f85718-cda0-442f-9727-709a536e1e27.cer (raw, json)
Hash identifier:          /M6TOPNGLzf725O7M2UHQ6fPCcfuaQdIhy/AtUF7Dig=
Subject key identifier:   6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846B9E82E9CB606B40AE9AC2380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Aug 2024 00:45:22 +0000
Certificate not after:    Wed 04 Nov 2026 01:45:22 +0000
Subordinate resources:    IP: 63.136.112.0/21
                          IP: 162.211.136.0/22
                          IP: 192.0.4.0/22
                          IP: 199.201.84.0/22
                          IP: 208.157.144.0/21
                          IP: 208.168.224.0/19
                          IP: 209.27.52.0/22
                          IP: 209.27.60.0/22
                          IP: 2606:600::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:e8:2e:9c:b6:06:b4:0a:e9:ac:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  1 00:45:22 2024 GMT
            Not After : Nov  4 01:45:22 2026 GMT
        Subject: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:bb:f8:df:98:55:1c:ef:a5:0d:59:34:04:
                    c1:50:5f:2e:a2:8c:02:04:7b:de:32:42:fc:73:41:
                    69:5b:21:55:da:ba:4c:9f:f3:ac:d7:9a:e5:ce:24:
                    00:fd:fe:e2:c9:e4:7e:98:10:fa:78:44:e1:09:2c:
                    21:3a:3d:d6:e0:07:22:86:7d:94:e0:12:78:38:ec:
                    1a:7d:03:ff:33:1d:7f:15:82:eb:8a:ae:a3:c9:82:
                    43:38:35:13:ac:3e:a9:a2:73:14:4f:f5:ec:32:58:
                    37:e0:4d:21:57:c5:7d:3a:1a:d9:c2:00:40:5a:2a:
                    ca:a8:b4:48:8d:f6:3c:df:51:22:ec:e3:da:93:d9:
                    86:d7:75:40:e9:39:3b:9c:57:9e:bb:fa:af:ac:be:
                    cc:80:04:42:bb:2a:09:db:2f:0e:4b:3a:ad:49:f2:
                    b1:64:84:67:46:e1:50:57:0f:39:1c:fa:78:6f:33:
                    b8:23:53:be:78:79:3e:9b:2d:ad:73:64:48:84:20:
                    37:31:7b:ae:7c:d7:3e:6b:e1:42:cf:d9:05:39:c6:
                    3f:de:e6:e2:68:fd:fe:b3:4a:35:a8:e6:05:62:24:
                    08:c3:56:18:15:a4:9a:a1:2c:9b:6b:45:09:c6:54:
                    30:a3:96:84:f3:21:c3:cc:41:5d:f5:b0:6b:89:fd:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.136.112.0/21
                  162.211.136.0/22
                  192.0.4.0/22
                  199.201.84.0/22
                  208.157.144.0/21
                  208.168.224.0/19
                  209.27.52.0/22
                  209.27.60.0/22
                IPv6:
                  2606:600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:58:7a:a3:f5:89:89:8c:f0:75:68:24:b6:c5:e0:34:fb:ab:
         ce:0b:4a:a8:89:97:97:92:0b:0c:48:92:d0:fe:f8:fe:be:52:
         f5:cc:10:0c:01:37:10:48:c1:97:23:e6:36:10:63:5d:1b:7d:
         3c:8e:1e:d6:32:ad:6d:1f:c8:d5:31:a5:ad:f1:8c:50:0b:50:
         7a:03:14:c8:f3:90:c0:8b:fa:40:e9:27:b9:d3:1a:b9:46:7a:
         a3:18:f8:70:40:2d:56:b6:3c:72:88:59:0a:27:c2:24:ec:80:
         16:03:a2:e7:12:72:21:f5:67:3d:7d:16:82:f5:57:d8:4e:f1:
         6b:49:af:75:e4:b8:25:a1:3a:c0:f2:a9:e3:21:7a:70:96:e1:
         b0:83:9b:0c:39:4a:92:25:1b:74:ad:ed:4d:dc:18:98:8c:f9:
         eb:67:71:34:a6:10:63:21:1d:e8:b0:10:93:af:11:37:c3:55:
         ab:42:85:b3:55:21:d0:8f:4c:68:bc:8d:01:3f:67:68:2c:60:
         4c:0e:6a:72:82:ed:f6:ac:af:2e:ef:f4:06:19:4c:7b:d2:35:
         a3:97:94:78:ff:b4:65:f6:4e:c7:05:59:c9:8a:93:8f:4a:c7:
         2f:00:f8:dd:79:47:8f:31:4c:63:c3:78:5d:d7:2b:f1:a5:71:
         12:b5:df:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:43:15 2024 by rpki-client on console-fra.rpki-client.org