Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer
File:                     e83c85e5-8535-4793-9639-6216c5afd18a.cer (raw, json)
Hash identifier:          as2ftW8eD8JATlEZKPXjMenU2EaCwdZ6TWfRviVHrgk=
Subject key identifier:   49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584297D6DFFBF07BBFAB5BD182C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/e83c85e5-8535-4793-9639-6216c5afd18a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jul 2023 00:45:16 +0000
Certificate not after:    Tue 21 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 11588
                          AS: 18607
                          AS: 20446
                          AS: 25761
                          AS: 26769
                          AS: 29798
                          AS: 33438
                          AS: 54104
                          AS: 64259
                          IP: 64.145.64.0/24
                          IP: 64.145.66.0/24
                          IP: 64.145.68.0 -- 64.145.72.255
                          IP: 64.145.74.0/23
                          IP: 64.145.77.0 -- 64.145.78.255
                          IP: 64.145.80.0 -- 64.145.89.255
                          IP: 64.145.92.0/24
                          IP: 64.145.95.0/24
                          IP: 69.16.128.0 -- 69.16.144.255
                          IP: 69.16.146.0/24
                          IP: 69.16.148.0 -- 69.16.156.255
                          IP: 69.16.158.0 -- 69.16.171.255
                          IP: 69.16.173.0 -- 69.16.191.255
                          IP: 69.197.0.0/18
                          IP: 72.8.128.0/18
                          IP: 72.20.0.0/18
                          IP: 74.209.128.0/20
                          IP: 108.161.176.0/20
                          IP: 146.88.136.0/21
                          IP: 151.139.0.0/16
                          IP: 162.220.32.0/22
                          IP: 173.245.192.0 -- 173.245.201.255
                          IP: 173.245.204.0/23
                          IP: 173.245.208.0/24
                          IP: 173.245.210.0/24
                          IP: 173.245.212.0 -- 173.245.216.255
                          IP: 173.245.218.0/24
                          IP: 173.245.220.0/22
                          IP: 199.192.72.0/21
                          IP: 199.241.192.0/21
                          IP: 205.185.194.0 -- 205.185.198.255
                          IP: 205.185.200.0 -- 205.185.208.255
                          IP: 205.185.210.0 -- 205.185.213.255
                          IP: 205.185.215.0 -- 205.185.217.255
                          IP: 205.185.219.0 -- 205.185.220.255
                          IP: 209.107.194.0/24
                          IP: 209.107.197.0 -- 209.107.203.255
                          IP: 209.107.205.0 -- 209.107.209.255
                          IP: 209.107.211.0/24
                          IP: 209.107.213.0/24
                          IP: 209.107.215.0/24
                          IP: 209.107.217.0 -- 209.107.218.255
                          IP: 209.107.220.0/22
                          IP: 209.197.0.0/19
                          IP: 209.234.240.0/21
                          IP: 209.234.249.0 -- 209.234.252.255
                          IP: 209.234.254.0/23
                          IP: 216.151.176.0/22
                          IP: 216.151.181.0 -- 216.151.182.255
                          IP: 216.151.185.0 -- 216.151.190.255
                          IP: 2001:1938::/32
                          IP: 2604:6840::/32
                          IP: 2606:ce80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:d6:df:fb:f0:7b:bf:ab:5b:d1:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 19 00:45:16 2023 GMT
            Not After : Oct 21 00:45:16 2025 GMT
        Subject: CN=e83c85e5-8535-4793-9639-6216c5afd18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:1f:f2:8d:7a:0a:fb:77:63:2f:7f:59:12:
                    fe:d3:b2:a2:73:a5:7d:f2:76:ab:a2:5b:89:67:01:
                    51:87:6a:8f:12:24:1a:7d:b4:44:c1:a8:5d:ad:41:
                    0b:f0:82:fa:72:69:1c:f3:2a:12:ba:f9:67:82:09:
                    a1:6e:52:64:18:43:45:a5:8d:2c:c6:86:3e:bf:79:
                    34:56:c7:5c:26:ec:21:08:29:c1:a8:3b:8b:53:8b:
                    be:7c:f0:7d:bc:bb:1a:c1:ff:4a:c2:41:65:c1:2b:
                    2b:7e:12:2c:f8:7f:91:f6:b6:53:02:0b:d1:15:41:
                    ea:5c:b6:6d:1e:17:e5:13:50:ef:35:54:fd:62:54:
                    4b:29:27:87:db:ab:f4:3e:b2:83:4c:16:08:a0:d3:
                    0c:05:8b:2b:81:8d:bf:b9:f5:c2:5e:ef:49:d0:7f:
                    d0:56:d0:3d:13:42:8e:0c:ae:5e:4c:45:9a:dd:17:
                    d4:01:02:3b:20:e8:67:a4:68:f0:af:b2:b7:af:c3:
                    f6:11:8e:67:42:cd:6c:c9:7b:23:86:18:b3:8b:7d:
                    79:05:b1:97:95:06:f0:cf:17:dd:4c:90:89:7b:2a:
                    93:64:4d:b3:e6:7e:b7:2a:8e:15:c8:72:fc:5a:1f:
                    71:dc:c7:b9:ff:d0:4b:4f:b8:b2:8b:ed:23:96:f5:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/e83c85e5-8535-4793-9639-6216c5afd18a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.64.0/24
                  64.145.66.0/24
                  64.145.68.0-64.145.72.255
                  64.145.74.0/23
                  64.145.77.0-64.145.78.255
                  64.145.80.0-64.145.89.255
                  64.145.92.0/24
                  64.145.95.0/24
                  69.16.128.0-69.16.144.255
                  69.16.146.0/24
                  69.16.148.0-69.16.156.255
                  69.16.158.0-69.16.171.255
                  69.16.173.0-69.16.191.255
                  69.197.0.0/18
                  72.8.128.0/18
                  72.20.0.0/18
                  74.209.128.0/20
                  108.161.176.0/20
                  146.88.136.0/21
                  151.139.0.0/16
                  162.220.32.0/22
                  173.245.192.0-173.245.201.255
                  173.245.204.0/23
                  173.245.208.0/24
                  173.245.210.0/24
                  173.245.212.0-173.245.216.255
                  173.245.218.0/24
                  173.245.220.0/22
                  199.192.72.0/21
                  199.241.192.0/21
                  205.185.194.0-205.185.198.255
                  205.185.200.0-205.185.208.255
                  205.185.210.0-205.185.213.255
                  205.185.215.0-205.185.217.255
                  205.185.219.0-205.185.220.255
                  209.107.194.0/24
                  209.107.197.0-209.107.203.255
                  209.107.205.0-209.107.209.255
                  209.107.211.0/24
                  209.107.213.0/24
                  209.107.215.0/24
                  209.107.217.0-209.107.218.255
                  209.107.220.0/22
                  209.197.0.0/19
                  209.234.240.0/21
                  209.234.249.0-209.234.252.255
                  209.234.254.0/23
                  216.151.176.0/22
                  216.151.181.0-216.151.182.255
                  216.151.185.0-216.151.190.255
                IPv6:
                  2001:1938::/32
                  2604:6840::/32
                  2606:ce80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11588
                  18607
                  20446
                  25761
                  26769
                  29798
                  33438
                  54104
                  64259

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ce:fc:44:4c:f2:b2:c5:8c:3d:86:de:bc:58:06:11:86:34:
         9b:f5:f9:4b:f7:bb:2c:da:ba:53:59:a4:5b:28:fd:6a:eb:7c:
         72:03:55:83:16:1c:d2:e8:4e:ff:f0:94:10:3c:05:18:f1:e1:
         d5:5d:55:f6:72:f3:4a:3e:eb:e3:22:dd:51:4f:90:35:40:d6:
         1d:05:3f:d8:4a:60:14:9c:5f:51:54:ed:8b:7b:23:b2:de:7f:
         59:16:58:ff:db:51:40:8a:ba:8f:df:f3:04:13:e6:dc:bb:74:
         60:53:67:dc:d4:50:6e:da:35:11:b0:8b:13:ec:6d:04:c1:00:
         21:90:55:ff:3e:f0:75:b4:c7:f1:1f:ce:26:86:f9:9b:02:4b:
         f6:a8:8f:43:63:33:dd:a2:b8:d1:8e:22:67:2f:7d:b5:b9:2c:
         f2:5b:10:ea:12:01:76:8f:e1:c8:53:a3:90:47:e0:c7:36:8a:
         a6:ef:2a:06:97:39:3e:47:d2:ab:83:bd:02:ea:8e:16:f1:2e:
         a1:5a:bf:c2:a6:59:db:c3:72:62:6e:df:f4:9f:bf:f3:1a:e3:
         5c:89:85:4c:e5:24:d0:49:bc:40:0b:28:ad:b4:07:66:c7:e6:
         2b:12:7c:f1:7c:e1:8f:28:a4:d8:96:fd:14:3f:64:02:f9:24:
         1e:bd:2d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:27:39 2024 by rpki-client on console-ams.rpki-client.org