Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
File:                     184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer (raw, json)
Hash identifier:          BfwnE6156G/9mMg/osfZ4ty5F6jd3bM9xwlnGFo/I9Q=
Subject key identifier:   D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858461531D03DF4B4C329755168C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Jun 2024 00:45:21 +0000
Certificate not after:    Sun 06 Sep 2026 00:45:21 +0000
Subordinate resources:    AS: 14496
                          AS: 18554
                          AS: 19442
                          AS: 26379
                          IP: 129.248.0.0/16
                          IP: 130.27.0.0/16
                          IP: 130.29.0.0 -- 130.30.255.255
                          IP: 130.168.0.0/16
                          IP: 134.40.0.0/16
                          IP: 141.188.0.0/16
                          IP: 146.223.0.0/16
                          IP: 148.5.0.0/16
                          IP: 192.6.3.0/24
                          IP: 192.6.7.0/24
                          IP: 192.6.143.0/24
                          IP: 192.25.30.0/23
                          IP: 192.25.74.0/24
                          IP: 192.25.81.0 -- 192.25.100.255
                          IP: 192.25.106.0/24
                          IP: 192.25.109.0/24
                          IP: 192.25.114.0/24
                          IP: 192.25.117.0/24
                          IP: 192.25.122.0 -- 192.25.126.255
                          IP: 192.25.133.0 -- 192.25.134.255
                          IP: 192.25.140.0 -- 192.25.142.255
                          IP: 192.25.144.0/23
                          IP: 192.25.148.0/23
                          IP: 192.25.152.0/24
                          IP: 192.25.155.0/24
                          IP: 192.25.169.0/24
                          IP: 192.25.191.0/24
                          IP: 192.25.199.0/24
                          IP: 192.25.218.0/24
                          IP: 192.25.230.0/24
                          IP: 192.25.240.0/24
                          IP: 198.183.200.0 -- 198.183.202.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:15:31:d0:3d:f4:b4:c3:29:75:51:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun  3 00:45:21 2024 GMT
            Not After : Sep  6 00:45:21 2026 GMT
        Subject: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:2b:c9:ad:c0:b1:4e:b0:06:ee:77:7a:be:
                    f6:33:f2:11:3c:07:18:ff:ec:68:b3:ad:4e:0b:38:
                    2d:29:51:9c:8d:a3:b5:1b:68:02:c4:34:98:15:a0:
                    24:27:fe:d5:50:bd:c1:a0:2f:12:b9:b8:1c:84:10:
                    5e:f3:6f:aa:73:71:70:46:b4:d6:a7:8b:35:74:cc:
                    bd:fa:b1:78:3a:e9:0e:53:41:9c:fb:cc:d7:63:33:
                    2b:89:05:62:d2:ba:35:2c:be:a4:1f:5e:89:41:b8:
                    0a:80:41:1c:a0:b4:23:3d:43:1e:44:e9:ae:82:f2:
                    a5:03:c7:b5:4f:11:d9:13:e7:61:f7:5e:d7:fc:bb:
                    6c:20:59:73:d2:57:4a:df:0e:a3:a4:70:53:fb:4b:
                    a7:d8:06:68:50:89:6f:d1:18:62:1b:9b:3e:1a:3a:
                    7f:cb:5c:01:14:8e:06:f3:0d:17:37:ce:33:f3:0b:
                    74:4d:18:68:e9:77:ff:ef:5a:c3:f8:c3:51:63:7e:
                    ec:24:6f:4e:0b:cb:f5:5c:09:ba:68:f1:89:8e:f6:
                    55:0e:b1:87:7f:5d:81:4b:c4:75:3b:64:c6:ed:6b:
                    9a:e4:77:e3:8c:ff:a3:d3:2f:77:7a:76:6d:04:93:
                    17:97:4f:9b:10:66:31:47:1e:32:51:0e:00:79:48:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.248.0.0/16
                  130.27.0.0/16
                  130.29.0.0-130.30.255.255
                  130.168.0.0/16
                  134.40.0.0/16
                  141.188.0.0/16
                  146.223.0.0/16
                  148.5.0.0/16
                  192.6.3.0/24
                  192.6.7.0/24
                  192.6.143.0/24
                  192.25.30.0/23
                  192.25.74.0/24
                  192.25.81.0-192.25.100.255
                  192.25.106.0/24
                  192.25.109.0/24
                  192.25.114.0/24
                  192.25.117.0/24
                  192.25.122.0-192.25.126.255
                  192.25.133.0-192.25.134.255
                  192.25.140.0-192.25.142.255
                  192.25.144.0/23
                  192.25.148.0/23
                  192.25.152.0/24
                  192.25.155.0/24
                  192.25.169.0/24
                  192.25.191.0/24
                  192.25.199.0/24
                  192.25.218.0/24
                  192.25.230.0/24
                  192.25.240.0/24
                  198.183.200.0-198.183.202.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14496
                  18554
                  19442
                  26379

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fa:85:3c:61:7b:cc:8a:21:7a:13:f2:a2:8d:d6:6a:ce:54:
         56:6a:a7:da:2c:d7:b1:cb:73:93:5f:a4:41:75:10:5c:c4:b7:
         b4:71:ce:f7:10:bf:21:de:d0:b6:8b:31:a1:8e:28:07:50:03:
         ae:94:8b:7a:af:f6:bc:7e:da:a4:f2:c0:3f:a4:5a:77:31:98:
         da:77:f0:1a:ba:57:13:a4:02:7d:9d:a4:9a:88:f1:cf:e2:d9:
         41:ca:d6:bb:b7:63:49:a9:b0:08:36:a4:18:7a:cf:97:fa:b5:
         04:d7:ba:88:83:73:59:9d:ee:e6:51:be:e5:0a:6f:83:df:b4:
         67:1a:f8:90:1f:56:ee:3c:64:66:33:37:78:48:3c:b8:3b:fa:
         02:a2:74:c1:17:27:b7:1d:a2:65:d2:61:01:14:99:ad:d1:56:
         93:de:c1:0a:a2:11:52:b9:79:a3:91:78:99:25:46:ea:54:f7:
         64:c6:eb:64:e6:5b:ef:f9:3f:92:1f:36:5f:13:e1:c6:1f:2a:
         f2:43:a5:20:32:51:ad:68:8d:a7:a8:3b:a1:3a:99:b9:f0:f6:
         81:5f:ca:e1:df:ad:31:22:b1:3e:bb:2b:2f:c3:ad:e1:f1:84:
         35:42:2b:1e:4f:07:44:7c:d2:7f:78:b2:56:24:fb:04:b4:34:
         3f:33:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:46 2024 by rpki-client on console-ams.rpki-client.org