Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
File:                     69686900-f201-4b2c-a1c7-afb725abe47f.cer (raw, json)
Hash identifier:          i5aWAwsrvPPEsBmslJ45m5nQUjNdag+JP06Tz0N7pTY=
Subject key identifier:   46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584651768F6D4BD0AE8826EE5300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Jun 2024 14:52:22 +0000
Certificate not after:    Sun 27 Sep 2026 14:52:22 +0000
Subordinate resources:    AS: 6502
                          AS: 7385
                          AS: 7395
                          AS: 7845
                          AS: 12003
                          AS: 14342
                          AS: 22936
                          AS: 29983
                          AS: 32016
                          IP: 63.135.192.0/19
                          IP: 64.16.0.0/18
                          IP: 64.42.0.0/17
                          IP: 64.62.0.0/17
                          IP: 64.65.128.0/18
                          IP: 64.122.0.0 -- 64.122.36.255
                          IP: 64.122.38.0 -- 64.122.127.255
                          IP: 64.122.129.0 -- 64.122.255.255
                          IP: 66.182.0.0/18
                          IP: 66.213.192.0/18
                          IP: 66.224.0.0/16
                          IP: 67.50.0.0 -- 67.50.129.255
                          IP: 67.50.132.0 -- 67.51.255.255
                          IP: 67.136.0.0/14
                          IP: 68.178.0.0/17
                          IP: 69.2.224.0/19
                          IP: 69.88.64.0/18
                          IP: 69.164.160.0/20
                          IP: 70.96.0.0 -- 70.96.203.255
                          IP: 70.96.208.0 -- 70.96.219.255
                          IP: 70.96.224.0 -- 70.97.85.255
                          IP: 70.97.88.0 -- 70.97.133.255
                          IP: 70.97.136.0 -- 70.97.175.255
                          IP: 70.98.0.0/21
                          IP: 70.98.16.0 -- 70.98.99.255
                          IP: 70.98.102.0 -- 70.98.108.255
                          IP: 70.98.110.0 -- 70.98.159.255
                          IP: 70.98.161.0 -- 70.98.220.255
                          IP: 70.98.223.0 -- 70.99.71.255
                          IP: 70.99.80.0 -- 70.99.103.255
                          IP: 70.99.112.0 -- 70.99.250.255
                          IP: 70.99.252.0/22
                          IP: 70.102.0.0/15
                          IP: 72.11.64.0/18
                          IP: 72.25.128.0/18
                          IP: 76.164.0.0 -- 76.164.10.255
                          IP: 76.164.12.0 -- 76.164.14.255
                          IP: 76.164.16.0 -- 76.164.47.255
                          IP: 76.164.50.0/24
                          IP: 76.164.54.0/23
                          IP: 76.164.58.0/24
                          IP: 76.164.62.0/24
                          IP: 162.211.20.0/22
                          IP: 192.195.24.0/22
                          IP: 199.48.48.0/22
                          IP: 204.11.200.0/21
                          IP: 204.130.255.0/24
                          IP: 207.173.0.0/16
                          IP: 207.190.128.0/19
                          IP: 208.79.144.0/21
                          IP: 208.186.0.0 -- 208.186.203.255
                          IP: 208.186.206.0 -- 208.187.43.255
                          IP: 208.187.46.0 -- 208.187.115.255
                          IP: 208.187.118.0/23
                          IP: 208.187.124.0 -- 208.187.255.255
                          IP: 209.63.0.0/16
                          IP: 209.150.192.0/19
                          IP: 209.210.0.0/16
                          IP: 216.104.64.0/20
                          IP: 216.173.192.0/19
                          IP: 216.174.192.0/18
                          IP: 216.185.160.0/19
                          IP: 216.187.128.0/18
                          IP: 216.190.0.0/16
                          IP: 216.210.128.0/17
                          IP: 2607:f0d8::/29
                          IP: 2607:fbf8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:76:8f:6d:4b:d0:ae:88:26:ee:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 24 14:52:22 2024 GMT
            Not After : Sep 27 14:52:22 2026 GMT
        Subject: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e8:8b:17:ec:5f:e5:35:25:2b:e3:0d:8d:31:
                    96:7f:cf:e2:1a:6e:b6:0a:51:1b:b1:cd:04:f3:7d:
                    50:3f:b6:ab:c0:fc:05:c6:5a:1f:e9:6d:b7:98:ad:
                    a7:63:ff:8b:02:e0:c7:11:1b:ac:b3:1f:ce:07:40:
                    6b:f7:5b:08:00:07:1f:bf:6a:f5:e8:0f:9f:de:9b:
                    e3:af:b9:9c:72:8a:08:18:2a:94:5a:87:4d:84:0d:
                    97:32:16:5b:a1:93:4f:5e:dd:b5:c5:73:f5:89:90:
                    7d:d6:ff:bc:4c:fe:0f:c3:ca:45:00:39:b5:62:6c:
                    84:ad:61:a6:04:09:a6:fb:7b:34:16:8c:f9:3e:38:
                    00:c0:54:57:ea:ff:30:b9:2f:d7:e3:83:91:da:88:
                    50:6c:04:56:b8:14:ad:0c:db:5a:21:68:30:fc:33:
                    f7:cd:03:e2:58:e8:f0:96:ec:ff:5b:b7:ce:dd:d5:
                    64:b3:6a:6f:64:38:29:45:41:a5:fe:14:cd:2d:61:
                    a6:11:59:e6:92:00:c0:75:1c:4d:0b:cb:fe:08:4b:
                    65:b0:4b:e5:bd:26:47:7e:42:66:db:7f:d6:f8:02:
                    8c:57:09:92:b5:5c:1f:b1:4b:b7:2e:6c:04:5e:c8:
                    2b:38:41:15:da:ef:85:7b:80:29:0f:88:9f:2e:84:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.192.0/19
                  64.16.0.0/18
                  64.42.0.0/17
                  64.62.0.0/17
                  64.65.128.0/18
                  64.122.0.0-64.122.36.255
                  64.122.38.0-64.122.127.255
                  64.122.129.0-64.122.255.255
                  66.182.0.0/18
                  66.213.192.0/18
                  66.224.0.0/16
                  67.50.0.0-67.50.129.255
                  67.50.132.0-67.51.255.255
                  67.136.0.0/14
                  68.178.0.0/17
                  69.2.224.0/19
                  69.88.64.0/18
                  69.164.160.0/20
                  70.96.0.0-70.96.203.255
                  70.96.208.0-70.96.219.255
                  70.96.224.0-70.97.85.255
                  70.97.88.0-70.97.133.255
                  70.97.136.0-70.97.175.255
                  70.98.0.0/21
                  70.98.16.0-70.98.99.255
                  70.98.102.0-70.98.108.255
                  70.98.110.0-70.98.159.255
                  70.98.161.0-70.98.220.255
                  70.98.223.0-70.99.71.255
                  70.99.80.0-70.99.103.255
                  70.99.112.0-70.99.250.255
                  70.99.252.0/22
                  70.102.0.0/15
                  72.11.64.0/18
                  72.25.128.0/18
                  76.164.0.0-76.164.10.255
                  76.164.12.0-76.164.14.255
                  76.164.16.0-76.164.47.255
                  76.164.50.0/24
                  76.164.54.0/23
                  76.164.58.0/24
                  76.164.62.0/24
                  162.211.20.0/22
                  192.195.24.0/22
                  199.48.48.0/22
                  204.11.200.0/21
                  204.130.255.0/24
                  207.173.0.0/16
                  207.190.128.0/19
                  208.79.144.0/21
                  208.186.0.0-208.186.203.255
                  208.186.206.0-208.187.43.255
                  208.187.46.0-208.187.115.255
                  208.187.118.0/23
                  208.187.124.0-208.187.255.255
                  209.63.0.0/16
                  209.150.192.0/19
                  209.210.0.0/16
                  216.104.64.0/20
                  216.173.192.0/19
                  216.174.192.0/18
                  216.185.160.0/19
                  216.187.128.0/18
                  216.190.0.0/16
                  216.210.128.0/17
                IPv6:
                  2607:f0d8::/29
                  2607:fbf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6502
                  7385
                  7395
                  7845
                  12003
                  14342
                  22936
                  29983
                  32016

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8a:bd:12:05:87:7b:c0:f5:16:8f:72:17:c1:f7:12:56:00:
         ae:ef:e2:1b:16:b8:fa:eb:ae:e5:3b:d1:5a:32:8a:a5:58:35:
         f0:4e:0f:58:16:5f:01:e7:00:06:6c:c0:6c:e8:82:a5:cf:80:
         ae:e0:6e:0b:91:ab:26:5f:94:8c:f9:d1:86:80:cf:38:02:42:
         3f:97:fd:c1:11:2e:69:f1:46:e7:84:b2:e3:4f:e8:12:07:cf:
         29:22:e9:d2:20:af:a5:b4:28:6a:9f:30:5b:b5:75:80:3e:88:
         e9:df:c1:d1:94:78:50:35:d9:14:1b:a3:21:52:30:08:68:00:
         c8:8e:02:af:f9:c8:9d:2f:78:01:39:e2:23:20:d9:ac:cb:23:
         5f:b2:bd:3f:1b:75:94:e5:95:8d:f0:e8:fc:dc:24:ad:3b:d3:
         99:25:02:ba:2f:80:76:fd:83:95:f7:8d:1f:9a:65:f0:63:11:
         12:5c:52:f5:5f:0a:03:dd:46:06:1f:80:f4:f9:b9:cb:36:d8:
         c2:c7:99:8e:3f:cc:e2:ed:54:7d:fb:be:1b:4a:bd:f0:12:6a:
         9e:91:14:70:2e:ce:73:7b:e7:ca:65:12:2a:0b:b2:e7:1b:b4:
         7a:24:01:82:d8:48:70:1d:4f:a7:4a:12:29:30:01:61:8d:be:
         09:8d:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:38 2024 by rpki-client on console-fra.rpki-client.org