Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
File:                     1c5adecb-4ac8-432f-817c-84bec47b7708.cer (raw, json)
Hash identifier:          xXGZvuMGT3JCNhbhI47/mJQ0T3LIitpGFUjMpS3qrq4=
Subject key identifier:   55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858474B13C9C770D502C635072534
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 Sep 2024 00:45:26 +0000
Certificate not after:    Sat 26 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 16673
                          AS: 23167
                          AS: 396121
                          AS: 398416
                          AS: 399076
                          IP: 149.234.0.0/21
                          IP: 149.234.192.0 -- 149.234.225.255
                          IP: 149.234.228.0/22
                          IP: 149.234.234.0 -- 149.234.255.255
                          IP: 192.80.67.0 -- 192.80.68.255
                          IP: 192.80.73.0/24
                          IP: 192.122.250.0/24
                          IP: 192.206.64.0/24
                          IP: 205.166.66.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:13:c9:c7:70:d5:02:c6:35:07:25:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 22 00:45:26 2024 GMT
            Not After : Dec 26 01:45:26 2026 GMT
        Subject: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:7b:c6:56:a3:ea:c2:b4:8d:10:00:b3:9c:
                    50:43:13:07:b5:05:bc:ed:78:b0:1d:37:54:c3:a4:
                    a5:15:d6:31:17:26:5a:3a:89:c6:fc:0d:46:9d:cc:
                    08:ab:d3:b0:2d:7d:26:96:9d:e0:9e:ee:df:93:02:
                    df:79:ab:6c:c8:52:76:f4:0e:d5:73:c5:03:93:70:
                    15:52:17:65:2f:2e:e9:f3:d1:a2:3d:d5:45:68:ac:
                    18:a8:0d:73:5f:f2:59:78:34:44:41:1d:d1:98:5f:
                    f0:54:6b:f6:1f:2e:e8:ac:bf:6d:5e:9c:7d:50:4c:
                    20:f0:6a:cd:74:b3:53:57:b8:e6:e1:66:6e:3e:ab:
                    a1:f1:f1:5d:18:41:66:ae:54:6e:a6:cb:b7:4f:11:
                    67:38:ef:73:e7:63:ef:90:89:69:3d:ae:cf:a5:59:
                    c7:28:b9:92:c4:2e:d5:ec:97:2a:94:8d:dd:0f:35:
                    82:70:0e:5a:74:ac:fb:0f:bb:0c:29:a9:ce:c4:40:
                    35:62:5c:33:e9:3f:c4:9c:07:b4:6a:fb:de:e4:3e:
                    51:10:d4:b6:30:e9:05:6e:d8:bb:ad:36:09:a3:1b:
                    c2:94:e5:72:c1:82:50:cf:88:49:3b:33:38:36:2a:
                    ed:15:60:9b:c9:7c:99:22:e0:39:56:c5:b6:86:db:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.0.0/21
                  149.234.192.0-149.234.225.255
                  149.234.228.0/22
                  149.234.234.0-149.234.255.255
                  192.80.67.0-192.80.68.255
                  192.80.73.0/24
                  192.122.250.0/24
                  192.206.64.0/24
                  205.166.66.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16673
                  23167
                  396121
                  398416
                  399076

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f0:24:41:6b:fb:56:5e:25:73:ad:7d:d1:ac:e6:b0:3c:ef:
         1c:72:07:7d:24:ec:0a:2d:7b:62:38:b7:1b:d1:7c:a0:f1:1c:
         65:51:53:d8:64:af:98:9b:75:e8:1b:40:a4:82:a0:2a:ff:d2:
         b3:60:de:44:25:3c:06:0d:5b:b3:7a:62:fd:a1:72:8c:44:c9:
         48:70:6f:32:3a:6d:21:cf:57:a1:9c:8d:8b:0f:77:79:ba:ab:
         30:0c:b6:93:99:38:b4:7d:76:ee:95:4e:2b:62:b8:b1:88:8b:
         b8:3b:1c:5e:72:08:87:b7:61:8a:2b:09:31:82:a5:82:55:f7:
         65:33:84:1b:86:2c:1c:89:86:4b:b1:5e:cc:67:e1:5f:fd:72:
         41:4f:d8:38:1c:83:08:ff:21:69:2d:2a:7a:43:7a:0b:0d:34:
         f9:5d:64:07:7e:38:50:c8:dc:fc:bf:02:d1:e1:cb:d9:55:75:
         4f:63:d5:3c:04:6f:ba:4d:c9:a3:fb:a5:55:b9:f7:61:c8:55:
         f9:62:49:50:9e:80:0c:91:9b:3c:01:9e:b9:b0:ff:af:68:f9:
         34:39:a7:79:5e:c3:02:80:e4:42:d9:c1:7c:98:6e:82:55:0f:
         a3:a8:8e:37:1d:45:bc:2c:ff:2e:70:7e:95:b6:9a:95:98:21:
         39:b7:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:12 2024 by rpki-client on console-fra.rpki-client.org