Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
File:                     4746a92d-5f69-4264-863f-81298a3d93ed.cer (raw, json)
Hash identifier:          NriaIS36Gau1Hnyo6dGgf5cEC7jZYyeWHCYT9O/98/k=
Subject key identifier:   81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858455BE7976B1DCCB46CB6FC9600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Mar 2024 15:51:16 +0000
Certificate not after:    Wed 10 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 36114
                          AS: 53340
                          AS: 62956
                          IP: 72.46.128.0/21
                          IP: 76.164.192.0/20
                          IP: 76.164.234.0 -- 76.164.239.255
                          IP: 104.128.68.0/22
                          IP: 104.143.0.0/23
                          IP: 104.143.10.0/23
                          IP: 104.194.0.0/22
                          IP: 104.225.134.0/23
                          IP: 104.225.250.0/23
                          IP: 104.225.254.0/23
                          IP: 104.238.210.0/23
                          IP: 162.249.226.0/23
                          IP: 162.251.232.0/21
                          IP: 172.93.0.0/23
                          IP: 192.228.96.0/23
                          IP: 192.228.100.0/23
                          IP: 192.228.104.0 -- 192.228.109.255
                          IP: 199.19.76.0/23
                          IP: 199.47.208.0/22
                          IP: 199.127.56.0/22
                          IP: 199.241.140.0/22
                          IP: 204.77.0.0 -- 204.77.9.255
                          IP: 204.77.14.0/23
                          IP: 2604:2280::/32
                          IP: 2605:6f80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:e7:97:6b:1d:cc:b4:6c:b6:fc:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 28 15:51:16 2024 GMT
            Not After : Jun 10 00:45:20 2026 GMT
        Subject: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:a3:5f:f3:14:1b:7b:df:07:e7:d3:dc:35:
                    b0:c0:f6:f4:d4:e1:bf:87:54:1d:fd:8a:1c:60:9a:
                    86:0e:b7:84:39:8c:fd:59:c8:1f:49:fa:91:d4:10:
                    13:e1:ae:b1:e5:e7:7f:b1:93:cf:82:86:34:15:42:
                    aa:74:4b:ae:81:20:2c:ae:b7:00:55:61:cc:8e:21:
                    c5:e9:5c:b2:af:ca:4c:cd:8f:9c:ce:f0:a5:26:c1:
                    f3:59:ef:e2:cf:d0:4e:43:7a:3b:c1:23:7d:73:57:
                    f1:75:ba:de:53:8c:14:6c:03:38:56:48:1a:b0:f2:
                    92:18:73:96:4c:ed:ea:82:a8:b1:2e:16:02:f1:ed:
                    84:e9:42:cb:56:5a:ce:44:5c:e2:93:19:e1:a5:1f:
                    f6:4c:f2:80:7f:c1:41:00:96:41:12:bb:2e:24:e7:
                    da:dd:3c:2c:d6:e6:c9:c7:9d:15:b7:57:89:ae:eb:
                    a8:fe:95:3c:37:36:f6:92:91:ee:13:90:07:4e:74:
                    d4:c9:7a:88:bb:a8:a1:42:0c:64:56:c3:fa:f7:1b:
                    f9:88:d1:b4:62:f4:80:55:1f:29:7b:03:93:c4:d6:
                    0c:63:e8:51:5c:13:da:34:69:15:f2:f6:c6:99:8a:
                    71:28:6d:bf:0c:d5:f6:93:78:10:22:8d:6e:92:c2:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.128.0/21
                  76.164.192.0/20
                  76.164.234.0-76.164.239.255
                  104.128.68.0/22
                  104.143.0.0/23
                  104.143.10.0/23
                  104.194.0.0/22
                  104.225.134.0/23
                  104.225.250.0/23
                  104.225.254.0/23
                  104.238.210.0/23
                  162.249.226.0/23
                  162.251.232.0/21
                  172.93.0.0/23
                  192.228.96.0/23
                  192.228.100.0/23
                  192.228.104.0-192.228.109.255
                  199.19.76.0/23
                  199.47.208.0/22
                  199.127.56.0/22
                  199.241.140.0/22
                  204.77.0.0-204.77.9.255
                  204.77.14.0/23
                IPv6:
                  2604:2280::/32
                  2605:6f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36114
                  53340
                  62956

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:8d:b3:71:70:ec:73:1a:c3:d3:52:1d:c8:c5:81:80:bb:a5:
         46:8f:1c:a5:e8:68:e5:4b:3a:3c:94:4b:3c:69:87:06:a8:9d:
         1a:7f:76:1f:b7:22:d1:60:41:3a:84:f4:e2:d5:3d:46:72:94:
         74:1a:4d:52:9d:7d:37:b8:39:3d:29:06:d7:d6:05:b2:0b:ae:
         70:e1:82:0a:38:dc:c1:20:c8:26:84:bc:e1:89:75:9c:a6:47:
         99:36:14:d8:b6:1b:cf:e3:26:de:9e:ed:31:c9:b2:ef:1e:fb:
         e8:35:9e:03:3b:60:d5:09:f1:e6:37:5a:9b:51:77:91:b8:a1:
         79:ca:ce:c6:83:3e:ac:7e:3b:e7:2f:4e:2f:b7:19:66:b7:32:
         78:89:2a:7c:c0:a9:72:34:ad:7f:45:63:a5:18:cf:11:ff:e4:
         bb:c6:4d:8e:d6:3c:ce:66:b5:62:d3:b0:b8:db:1a:f2:fa:89:
         9e:dc:2c:fb:4e:e0:0e:4a:ce:fe:19:12:6c:23:b1:94:16:54:
         fc:7d:31:bd:5d:22:fe:89:b9:e9:dc:b4:c3:f7:0a:7a:15:b5:
         26:54:02:4d:9c:2c:dd:7f:66:36:a5:98:7b:2d:1e:53:82:60:
         de:bc:e4:50:a6:5f:b0:bb:58:4a:73:dc:ee:82:3a:28:d4:d3:
         45:95:8a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:29:26 2024 by rpki-client on console-ams.rpki-client.org