Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer
File:                     f5b47d91-eb0d-4085-9bc2-452042c0b313.cer (raw, json)
Hash identifier:          CBQ4XYBYDaCEmivLLrQv+wnaClRyaInzl1nKrhhLtyI=
Subject key identifier:   DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846A9281024AB88367B84840E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jul 2024 00:45:20 +0000
Certificate not after:    Thu 29 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 31775
                          IP: 64.201.232.0/22
                          IP: 104.153.28.0/22
                          IP: 104.244.192.0/22
                          IP: 149.76.32.0/19
                          IP: 162.0.160.0/19
                          IP: 199.241.26.0/23
                          IP: 2605:9480::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a9:28:10:24:ab:88:36:7b:84:84:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 26 00:45:20 2024 GMT
            Not After : Oct 29 00:45:20 2026 GMT
        Subject: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:4d:38:5e:0f:c0:3f:7a:85:02:07:2c:58:
                    fc:37:5f:ee:5e:74:cd:57:ca:11:bd:ae:17:44:27:
                    bb:81:fa:08:89:57:81:d9:df:2b:59:b7:15:b3:df:
                    7a:e9:06:53:2c:d9:6a:9d:55:51:48:1b:51:55:8b:
                    60:7f:27:22:95:fa:a8:aa:95:84:81:20:ec:72:64:
                    70:44:f4:b8:59:fc:52:01:9e:a9:bd:d0:ce:23:1f:
                    28:16:47:89:32:b1:7a:e3:7a:8e:d2:f1:63:b1:c4:
                    0e:69:67:0d:a3:84:65:98:2d:00:dd:22:93:cf:b1:
                    d2:36:68:7a:70:2e:e8:30:e5:b4:42:15:d3:92:27:
                    d8:29:7a:5f:d0:11:79:ba:a9:c9:e7:0d:a4:1e:88:
                    47:14:29:02:80:24:b0:9d:81:00:40:93:62:f5:f9:
                    d7:aa:bb:d9:99:09:05:30:a5:69:7c:cd:75:10:31:
                    4b:f8:ea:45:4a:18:f7:04:60:b0:65:16:35:ce:41:
                    0a:d5:36:82:37:8f:bd:89:16:91:fd:f3:df:9a:92:
                    bb:2f:54:11:c0:22:58:14:00:6e:5e:60:80:f3:f6:
                    82:2d:c0:98:ed:49:46:c5:cd:5e:b4:68:60:fa:48:
                    a0:34:5f:ba:9d:c9:41:ef:b0:53:22:29:e4:6d:5e:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.232.0/22
                  104.153.28.0/22
                  104.244.192.0/22
                  149.76.32.0/19
                  162.0.160.0/19
                  199.241.26.0/23
                IPv6:
                  2605:9480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31775

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:59:bb:e9:0c:f0:72:e0:dc:3d:64:bb:02:5e:7b:dc:a2:4c:
         d5:97:61:75:e9:3d:28:2f:4d:a2:eb:92:d9:83:1e:78:88:ff:
         30:fd:29:9c:df:0c:fb:e9:be:11:41:f4:da:40:06:0f:88:be:
         d2:a5:6a:be:23:df:68:3d:b2:4f:f3:44:a7:f8:0a:cb:6e:2f:
         7c:d1:4d:b4:c4:a0:f8:cf:fe:6f:d7:dd:30:57:8a:fa:3d:ef:
         6a:c3:e1:91:72:7a:2b:2a:31:e8:28:c8:06:5f:80:e9:79:bf:
         ed:0a:ec:9e:4e:24:2a:12:b9:2f:f9:9e:99:25:d2:e3:e2:89:
         5f:59:49:06:da:e3:e7:e8:7a:2f:6a:56:69:5c:7f:6c:d4:7a:
         0e:39:49:fb:f8:3b:46:4a:be:93:94:ef:4a:1f:ec:28:f3:01:
         81:2e:80:37:33:0a:ef:53:32:a9:94:0b:e8:0c:71:91:95:ad:
         6c:91:b1:04:70:a9:18:1b:64:04:32:d7:63:25:37:d3:86:ff:
         67:3e:bf:5e:b1:8f:25:4c:1c:5d:09:bf:66:00:f1:a0:45:90:
         86:d9:ce:c9:a8:c4:5f:1e:1e:e0:b0:32:54:62:e4:24:fa:b3:
         76:36:63:d7:93:15:84:e8:fb:d0:89:41:dd:b6:d5:1c:6d:c0:
         cb:fa:64:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:43:15 2024 by rpki-client on console-fra.rpki-client.org