Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
File:                     8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer (raw, json)
Hash identifier:          1Mi+5May9NsLV2A68O0AtLxAVmIAhZZE5ujRcdF6X/Q=
Subject key identifier:   7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847D9928004CDC78DD425C2CE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Nov 2024 01:45:32 +0000
Certificate not after:    Mon 15 Feb 2027 01:45:32 +0000
Subordinate resources:    AS: 12281
                          AS: 14499
                          AS: 16415
                          AS: 18452
                          AS: 19372
                          AS: 32399
                          IP: 64.142.128.0/17
                          IP: 66.196.128.0/18
                          IP: 69.173.0.0/19
                          IP: 74.119.136.0/21
                          IP: 142.192.0.0/16
                          IP: 170.8.0.0/16
                          IP: 198.99.155.0/24
                          IP: 198.153.237.0/24
                          IP: 208.90.64.0/22
                          IP: 208.94.8.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:92:80:04:cd:c7:8d:d4:25:c2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 12 01:45:32 2024 GMT
            Not After : Feb 15 01:45:32 2027 GMT
        Subject: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:30:57:ae:a2:72:b9:45:59:7e:85:4d:c2:
                    8e:e6:77:e5:d9:7c:2c:ab:4e:07:50:d5:51:d1:a1:
                    51:99:88:30:b1:96:ef:a4:a1:30:35:0a:d4:eb:d1:
                    b0:3f:d2:47:2c:8c:a9:73:34:25:09:8d:56:f3:9c:
                    77:00:7c:1b:80:28:28:c5:bb:2e:51:0e:06:92:03:
                    8e:f0:4e:12:f1:8f:ff:25:05:3f:f8:a7:8a:77:65:
                    4a:13:11:8b:8e:90:d3:d7:46:f0:20:12:ac:2a:62:
                    13:ae:c5:02:6e:06:a5:ad:17:95:62:ed:d5:8d:61:
                    23:b5:aa:e9:5f:d0:48:2e:a0:19:c9:4e:da:1f:a9:
                    81:6a:47:ee:be:f2:04:66:94:55:ff:72:8e:fe:37:
                    06:54:47:48:8d:9b:27:f8:01:9a:b9:f9:41:d5:95:
                    20:d4:bb:63:8b:14:90:92:69:98:35:7b:60:04:a2:
                    22:28:38:c1:26:fd:3c:f7:9c:7f:bc:41:a4:9e:02:
                    ed:51:13:e0:2d:e0:50:ce:94:8b:e2:2d:a0:99:c5:
                    fa:d3:99:40:6f:73:9a:ea:bf:c9:7a:a0:f2:f9:ba:
                    28:d5:e5:dc:c6:ff:eb:2c:0c:a6:0d:ad:e0:84:08:
                    95:9d:4b:cf:d4:52:8d:c7:98:b6:05:66:49:05:0e:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.142.128.0/17
                  66.196.128.0/18
                  69.173.0.0/19
                  74.119.136.0/21
                  142.192.0.0/16
                  170.8.0.0/16
                  198.99.155.0/24
                  198.153.237.0/24
                  208.90.64.0/22
                  208.94.8.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12281
                  14499
                  16415
                  18452
                  19372
                  32399

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5f:3b:bc:d9:70:cb:04:77:32:67:8b:d1:25:a6:f4:22:cb:
         04:86:e7:99:97:9e:21:5b:fd:30:50:2d:3d:df:bf:86:6a:86:
         7b:ca:61:40:45:00:4d:ac:34:5a:15:bf:38:db:37:78:77:f5:
         68:ca:b3:69:14:5a:78:37:dd:52:d7:d7:94:7b:e5:48:e8:99:
         e7:d7:f2:9c:d4:5e:42:b2:c1:bc:87:cd:3f:e7:8e:f3:28:19:
         de:6b:69:e1:fc:31:9d:1e:b3:2c:36:f5:5e:1b:c0:e7:c7:0b:
         08:d0:a6:0d:26:ad:db:f8:de:f7:81:27:ce:d5:7e:19:4f:60:
         47:69:d8:ea:d8:28:a1:eb:f9:79:dc:95:31:01:74:29:db:f7:
         3c:3c:f4:b7:f3:b7:f6:86:97:c0:f4:5a:a3:6a:bd:1f:d3:17:
         ec:b8:c6:81:5b:54:6c:cb:bf:06:17:f3:e4:3b:29:38:a1:b6:
         bc:9a:f6:cb:9f:9f:01:a3:ab:02:ea:16:3b:b7:f3:2f:15:a3:
         18:1a:e3:44:93:f3:21:19:fc:97:48:16:c5:dd:06:25:c5:b8:
         51:aa:95:77:72:fc:27:fa:f9:44:6b:de:a1:5c:a8:f0:2f:c1:
         c8:bc:24:7b:47:b4:9c:6a:db:cb:d4:c1:b6:ed:10:26:97:22:
         cd:30:58:61
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEfZkoAEzceN1CXCzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTExMjAxNDUzMloXDTI3MDIxNTAxNDUzMlowLzEtMCsGA1UEAxMk
OGNmMTIzMzctOGViOC00M2EyLWE3NWUtMmIwMWNlYjk1YzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/8wV66icrlFWX6FTcKO5nfl2Xwsq04HUNVR
0aFRmYgwsZbvpKEwNQrU69GwP9JHLIypczQlCY1W85x3AHwbgCgoxbsuUQ4GkgOO
8E4S8Y//JQU/+KeKd2VKExGLjpDT10bwIBKsKmITrsUCbgalrReVYu3VjWEjtarp
X9BILqAZyU7aH6mBakfuvvIEZpRV/3KO/jcGVEdIjZsn+AGauflB1ZUg1LtjixSQ
kmmYNXtgBKIiKDjBJv0895x/vEGkngLtURPgLeBQzpSL4i2gmcX605lAb3Oa6r/J
eqDy+boo1eXcxv/rLAymDa3ghAiVnUvP1FKNx5i2BWZJBQ6txQIDAQABo4IEYjCC
BF4wHQYDVR0OBBYEFHzfeYR1zk/HDHbEWxVekdkcmj5sMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84
Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2ViOTVjMzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhjZjEyMzM3LThlYjgtNDNhMi1h
NzVlLTJiMDFjZWI5NWMzOS84Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2Vi
OTVjMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwUwYIKwYBBQUH
AQcBAf8ERDBCMEAEAgABMDoDBAdAjoADBAZCxIADBAVFrQADBANKd4gDAwCOwAMD
AKoIAwQAxmObAwQAxpntAwQC0FpAAwQD0F4IMC0GCCsGAQUFBwEIAQH/BB4wHKAa
MBgCAi/5AgI4owICQB8CAkgUAgJLrAICfo8wVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYF87vNlwywR3MmeL
0SWm9CLLBIbnmZeeIVv9MFAtPd+/hmqGe8phQEUATaw0WhW/ONs3eHf1aMqzaRRa
eDfdUtfXlHvlSOiZ59fynNReQrLBvIfNP+eO8ygZ3mtp4fwxnR6zLDb1XhvA58cL
CNCmDSat2/je94EnztV+GU9gR2nY6tgooev5edyVMQF0Kdv3PDz0t/O39oaXwPRa
o2q9H9MX7LjGgVtUbMu/Bhfz5DspOKG2vJr2y5+fAaOrAuoWO7fzLxWjGBrjRJPz
IRn8l0gWxd0GJcW4UaqVd3L8J/r5RGveoVyo8C/ByLwke0e0nGrby9TBtu0QJpci
zTBYYQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org