Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
File:                     fcbf2352-8296-41fd-bfd5-576c02b9d483.cer (raw, json)
Hash identifier:          lBJxpXe5vMfH06JmxtGDrpS1AAWKppxhviVgQa1IZI4=
Subject key identifier:   90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584584063CE4A0E57BFE3F7C1300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Apr 2024 00:45:21 +0000
Certificate not after:    Thu 16 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 20283
                          AS: 64227
                          IP: 64.90.64.0/19
                          IP: 68.170.112.0/20
                          IP: 69.168.240.0/20
                          IP: 161.199.130.0/24
                          IP: 167.94.42.0/23
                          IP: 167.94.52.0/23
                          IP: 167.94.62.0/23
                          IP: 167.94.76.0/23
                          IP: 172.87.0.0/20
                          IP: 199.59.116.0/22
                          IP: 205.214.160.0/20
                          IP: 209.73.80.0/20
                          IP: 209.212.32.0/20
                          IP: 2605:5000::/32
                          IP: 2606:df80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:06:3c:e4:a0:e5:7b:fe:3f:7c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 12 00:45:21 2024 GMT
            Not After : Jul 16 00:45:21 2026 GMT
        Subject: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:32:a2:8c:28:62:b9:4b:d3:45:44:cb:67:
                    a6:d2:fe:d1:cf:2f:69:58:5c:a7:f8:d8:b2:7d:d6:
                    dc:cf:18:e1:92:1b:25:c7:19:98:45:16:90:fb:20:
                    fe:81:c9:12:60:1f:16:52:c3:1d:8f:2a:3a:9d:14:
                    85:dd:56:11:45:5f:b3:d6:2d:22:7e:06:e5:93:40:
                    90:7e:15:d3:2d:63:21:6d:ea:99:58:be:20:50:d4:
                    c0:fb:09:64:76:80:08:db:16:6e:44:1d:6c:08:e4:
                    51:97:8b:cd:3b:5c:f7:ed:ea:b9:b1:18:a1:69:64:
                    3d:76:d8:6e:f1:11:aa:f2:a0:31:1c:5c:7e:57:2f:
                    1d:fa:84:a2:ef:33:6e:25:b3:c0:0e:32:5a:aa:0b:
                    14:b9:3e:04:3d:be:28:8b:a1:a0:06:1b:9b:5e:6f:
                    ce:0b:80:58:d4:a2:2e:f7:ba:26:f7:d6:81:f5:c1:
                    69:42:bb:c2:e4:8e:ae:ca:d7:d6:b1:ae:1e:6f:67:
                    d2:81:e5:b4:2f:33:fa:fd:80:f4:76:31:92:ba:c7:
                    4d:97:e6:22:bc:d5:cb:49:4a:ab:07:c1:c6:c2:2b:
                    5d:2a:ef:15:eb:8d:fd:bd:a2:ef:d7:33:e9:89:ea:
                    9e:d7:b1:fb:ce:1d:d6:fd:c3:c5:bd:1d:91:22:95:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.64.0/19
                  68.170.112.0/20
                  69.168.240.0/20
                  161.199.130.0/24
                  167.94.42.0/23
                  167.94.52.0/23
                  167.94.62.0/23
                  167.94.76.0/23
                  172.87.0.0/20
                  199.59.116.0/22
                  205.214.160.0/20
                  209.73.80.0/20
                  209.212.32.0/20
                IPv6:
                  2605:5000::/32
                  2606:df80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20283
                  64227

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:bb:1d:8f:81:b5:0c:20:35:93:4b:a6:83:e3:b0:d1:33:
         e0:39:6d:f6:ca:4b:53:81:90:db:94:3b:98:9f:ef:4d:36:96:
         0f:34:67:55:ab:5c:94:7a:3a:cc:09:aa:8a:f7:8a:25:d7:df:
         3a:ec:ab:23:71:53:ed:d7:f6:bc:8d:5e:58:d1:de:02:6b:05:
         01:03:df:e3:d5:ea:c8:01:fe:9c:b2:6f:31:48:5e:89:71:0d:
         b5:ae:66:10:03:fd:b1:0b:67:18:40:b2:cb:4d:fe:06:be:a2:
         90:a4:db:bf:a1:4b:04:b6:f6:ce:85:a3:e9:95:c8:6c:18:0e:
         a2:b8:87:9b:e2:75:cd:b3:d0:e3:3a:51:1a:5e:5b:f1:37:f8:
         c1:ae:0e:06:f0:fd:2f:a3:5c:81:e7:c7:fb:f5:5e:17:48:af:
         db:88:27:40:3c:a1:bc:b6:bc:0d:51:94:27:cc:bb:53:10:27:
         75:6c:66:09:7a:4a:85:4f:ab:17:28:c0:57:ee:ac:52:1b:0c:
         83:91:46:cd:6f:b5:90:ed:53:7a:37:75:ba:20:a7:06:15:f5:
         50:9a:0d:25:ab:84:14:86:a9:c6:3d:2e:14:67:40:c0:08:f7:
         a6:0f:a4:7d:47:81:b6:ab:31:4e:2c:4c:61:5b:35:74:da:94:
         83:d7:cc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:28:39 2024 by rpki-client on console-fra.rpki-client.org