Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
File:                     01fc1815-34ef-424d-8258-506f8b486e35.cer (raw, json)
Hash identifier:          cOmYegxNJtnGx4S/vwCIBqsuR7jpZj1n/Vrc6b1FgrY=
Subject key identifier:   51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858461EB720F14C1776912D961D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Jun 2024 10:36:15 +0000
Certificate not after:    Sun 02 Aug 2026 13:41:37 +0000
Subordinate resources:    AS: 10835
                          AS: 12078
                          AS: 12111
                          AS: 20151
                          AS: 25757
                          AS: 33635
                          AS: 46193
                          AS: 63188
                          IP: 64.35.128.0/20
                          IP: 64.184.224.0/19
                          IP: 65.38.128.0/19
                          IP: 66.36.112.0/20
                          IP: 66.117.64.0/19
                          IP: 66.198.192.0/19
                          IP: 66.201.128.0/19
                          IP: 66.225.0.0/19
                          IP: 68.170.32.0/19
                          IP: 69.71.160.0/19
                          IP: 72.55.192.0/19
                          IP: 74.118.88.0/22
                          IP: 162.212.224.0/22
                          IP: 162.255.156.0/22
                          IP: 184.164.96.0/19
                          IP: 199.7.96.0/21
                          IP: 199.114.228.0/22
                          IP: 199.180.88.0/21
                          IP: 204.10.248.0/21
                          IP: 208.38.192.0/19
                          IP: 209.193.64.0 -- 209.193.111.255
                          IP: 216.229.160.0/19
                          IP: 2001:5f0::/32
                          IP: 2601:c000::/24
                          IP: 2604:d000::/32
                          IP: 2607:f498::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1e:b7:20:f1:4c:17:76:91:2d:96:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  6 10:36:15 2024 GMT
            Not After : Aug  2 13:41:37 2026 GMT
        Subject: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:d6:1e:ac:79:c7:68:2e:ab:8d:c2:41:ed:
                    19:00:71:ca:54:3a:64:23:9c:b0:d6:74:b9:19:ab:
                    e4:ba:78:e4:d1:a0:d8:5c:65:f6:9a:11:0f:9e:07:
                    b2:39:7e:e5:23:b9:3f:ed:69:c5:fb:c4:f7:ff:b4:
                    5a:fe:90:04:cb:d5:55:d8:ec:3f:4a:8e:72:9e:e7:
                    c8:c7:57:d8:40:90:22:fa:4a:85:77:ff:56:e9:0e:
                    35:ed:c0:71:bf:99:3f:7f:5e:20:05:f7:e4:b9:27:
                    10:18:9a:63:ac:ae:79:20:08:92:8f:8d:69:fc:4a:
                    d5:ff:eb:f8:ee:a1:0a:8a:c7:c6:14:e6:fb:5f:91:
                    ba:69:af:de:2c:d4:51:4a:17:61:da:38:28:ea:be:
                    bd:a5:d8:57:73:74:00:e9:d7:87:3e:c8:9a:25:b0:
                    ce:68:1a:59:03:a4:35:2a:c0:8f:34:15:b6:b9:cc:
                    81:a5:5b:1e:b7:6a:b8:f2:35:ff:c0:a3:a7:1f:4e:
                    bf:d2:39:3d:8e:8d:e7:04:7c:c6:15:d5:48:7b:79:
                    d4:f2:24:40:f2:de:0b:59:cc:ad:26:2a:ec:5c:62:
                    e5:ce:bb:e6:cf:ea:36:2a:68:c4:af:21:a9:00:bf:
                    eb:10:c3:57:23:b3:e2:b5:59:17:35:ae:6f:cd:a3:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.128.0/20
                  64.184.224.0/19
                  65.38.128.0/19
                  66.36.112.0/20
                  66.117.64.0/19
                  66.198.192.0/19
                  66.201.128.0/19
                  66.225.0.0/19
                  68.170.32.0/19
                  69.71.160.0/19
                  72.55.192.0/19
                  74.118.88.0/22
                  162.212.224.0/22
                  162.255.156.0/22
                  184.164.96.0/19
                  199.7.96.0/21
                  199.114.228.0/22
                  199.180.88.0/21
                  204.10.248.0/21
                  208.38.192.0/19
                  209.193.64.0-209.193.111.255
                  216.229.160.0/19
                IPv6:
                  2001:5f0::/32
                  2601:c000::/24
                  2604:d000::/32
                  2607:f498::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10835
                  12078
                  12111
                  20151
                  25757
                  33635
                  46193
                  63188

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f0:0d:64:9e:70:3c:25:10:01:0e:8b:68:b0:00:e3:cb:66:
         e6:55:0c:f9:90:e0:cf:57:21:f9:08:51:56:16:11:bf:e8:a7:
         5c:2a:d1:22:95:0a:07:41:ba:65:3b:84:a0:ef:5c:ee:74:4b:
         c0:b3:0b:b0:ab:36:b9:52:8f:81:da:8d:a7:ef:5f:18:22:65:
         a6:3b:fe:32:fa:3f:2c:fc:88:58:90:47:e4:ac:d9:af:ba:b6:
         54:db:fb:03:ff:33:b2:ab:a5:f0:53:28:b0:eb:1b:0e:19:c3:
         97:60:e6:b3:85:20:2a:0e:2a:f4:89:ee:a2:ea:1d:75:17:57:
         22:5b:f2:1a:a5:8d:4a:dc:fa:18:9c:21:60:38:b3:39:b0:4f:
         1f:76:08:e9:db:84:32:7b:ad:39:9e:97:2c:35:a3:4f:a9:82:
         67:86:00:33:23:9e:ee:eb:b9:c4:0f:5c:41:47:d7:6d:51:ef:
         6f:8e:85:1a:b7:ce:64:2c:cd:fa:cb:25:b4:c9:9a:87:97:a5:
         2a:8d:00:e4:b7:db:79:47:23:d5:a9:2c:80:86:62:68:78:ab:
         21:26:75:29:4e:e2:db:43:62:0f:eb:9e:fa:91:7c:6b:66:3e:
         c2:b4:fe:30:7e:c0:21:d1:99:5e:de:30:5b:55:5b:2b:c6:0a:
         de:00:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:34 2024 by rpki-client on console-fra.rpki-client.org