Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
File:                     0c27bc55-b041-47cd-84eb-f3e9707acff1.cer (raw, json)
Hash identifier:          Y58B5gTea4YpIoQWIXmTQdY39yHt2ek4YVlJi42/pzQ=
Subject key identifier:   C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858426DF69FBF1E84D59EBF28B400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Jul 2023 00:45:17 +0000
Certificate not after:    Mon 06 Oct 2025 00:45:17 +0000
Subordinate resources:    AS: 53828
                          IP: 45.43.240.0/20
                          IP: 45.61.16.0/20
                          IP: 64.63.128.0/18
                          IP: 64.191.64.0/18
                          IP: 64.237.112.0/20
                          IP: 74.85.96.0/19
                          IP: 96.8.96.0/20
                          IP: 104.218.104.0/22
                          IP: 104.245.24.0/21
                          IP: 142.44.64.0/18
                          IP: 144.91.176.0 -- 144.91.255.255
                          IP: 172.98.96.0/19
                          IP: 207.5.64.0/19
                          IP: 207.200.192.0/19
                          IP: 216.40.0.0/19
                          IP: 2605:a380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:6d:f6:9f:bf:1e:84:d5:9e:bf:28:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  4 00:45:17 2023 GMT
            Not After : Oct  6 00:45:17 2025 GMT
        Subject: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:b1:63:6f:52:b0:ce:41:4f:1e:56:bb:03:
                    27:df:65:fb:25:6e:3f:3f:9f:f6:07:c9:95:55:9c:
                    7a:57:be:1c:c5:ca:fb:df:11:f6:6f:05:4d:1f:0c:
                    5c:ac:22:fc:2d:41:c2:fd:85:99:71:af:b3:c5:6d:
                    80:22:d4:73:f8:a6:1c:2c:09:73:59:29:1f:e8:b2:
                    0f:01:35:60:8e:71:3e:5f:13:d9:a5:f6:b5:ac:35:
                    ad:3b:78:a7:7f:8c:ff:ca:d0:c5:63:3e:6c:32:0a:
                    5d:17:f5:e6:96:1e:f1:06:6d:ee:77:44:b1:11:d2:
                    99:58:5e:53:a5:2a:14:a8:49:85:35:14:fd:90:95:
                    43:9e:a0:10:d4:34:44:cd:9a:cc:52:4d:0d:83:1e:
                    ed:da:4c:45:50:6f:f5:4f:44:72:90:f7:04:80:30:
                    ce:41:b0:5f:71:d3:38:93:c8:2d:77:ab:78:a9:f4:
                    3b:04:e3:db:17:ea:8d:c0:3e:60:cc:28:f4:70:ba:
                    03:88:69:0b:05:57:f2:76:f1:40:56:5f:1a:5b:db:
                    3f:cf:12:37:32:77:2f:86:1d:cc:2c:d2:f3:24:ce:
                    c2:7b:03:eb:16:00:26:e5:29:91:c9:c4:83:b6:17:
                    c1:fd:04:9a:ff:35:33:0d:01:36:e6:e1:f1:e8:89:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.240.0/20
                  45.61.16.0/20
                  64.63.128.0/18
                  64.191.64.0/18
                  64.237.112.0/20
                  74.85.96.0/19
                  96.8.96.0/20
                  104.218.104.0/22
                  104.245.24.0/21
                  142.44.64.0/18
                  144.91.176.0-144.91.255.255
                  172.98.96.0/19
                  207.5.64.0/19
                  207.200.192.0/19
                  216.40.0.0/19
                IPv6:
                  2605:a380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53828

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:ef:ca:22:61:03:51:23:9a:ad:7e:70:72:1f:ee:1f:49:
         a0:d1:71:d5:5b:87:37:7a:de:28:13:24:b8:c8:30:a9:e5:ba:
         2c:07:fa:3e:17:71:9d:9a:59:36:59:92:2a:86:71:93:d5:8e:
         02:70:6e:90:a5:53:37:72:ee:6f:fe:ba:25:ac:6f:60:ea:06:
         a6:98:ce:a7:6a:c0:09:b2:a0:53:a2:3a:a5:fa:22:6f:ea:a2:
         18:8f:3b:77:67:91:70:bc:ff:a3:b0:4e:a8:b6:9a:d0:93:97:
         fd:3c:12:f5:84:57:b9:ce:c2:27:8a:30:f2:56:b8:de:bc:67:
         91:56:8e:b8:f4:30:7e:67:40:44:48:20:b4:73:52:8d:ea:a8:
         de:77:15:0b:3b:f4:5c:44:f6:3e:55:0a:94:51:37:34:cc:02:
         3d:1b:8d:f4:47:4b:37:0b:14:28:60:3f:3e:9f:e1:2b:8f:5f:
         48:e4:8d:59:8e:ef:9e:74:39:ed:53:2a:90:fb:6d:ba:dc:1c:
         98:5e:8a:a6:8f:d6:22:60:5e:a0:0a:e8:d2:8c:84:e2:6a:8e:
         e4:36:15:01:5b:6f:c6:a3:a0:d3:8b:8c:14:df:38:e5:28:60:
         ef:af:96:bb:82:1a:61:9a:fb:68:b8:2a:fb:8f:06:08:63:31:
         fb:65:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:35 2024 by rpki-client on console-fra.rpki-client.org