Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
File:                     32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer (raw, json)
Hash identifier:          Xr57aU5w6yGZXR8OCYsNgCOxq7Z+0JAUe367ToQD0lE=
Subject key identifier:   C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845E2F17D60AA3DFB8305AE1400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 May 2024 00:45:20 +0000
Certificate not after:    Wed 19 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 399629
                          IP: 64.7.198.0/23
                          IP: 64.52.80.0/24
                          IP: 64.94.84.0/23
                          IP: 64.95.10.0 -- 64.95.13.255
                          IP: 64.190.113.0/24
                          IP: 65.38.120.0/23
                          IP: 67.217.228.0/24
                          IP: 72.5.42.0/23
                          IP: 149.248.76.0/22
                          IP: 162.33.176.0/22
                          IP: 168.100.8.0/22
                          IP: 192.153.57.0/24
                          IP: 193.149.129.0/24
                          IP: 193.149.176.0/24
                          IP: 193.149.180.0/24
                          IP: 193.149.185.0/24
                          IP: 193.149.187.0/24
                          IP: 193.149.189.0 -- 193.149.190.255
                          IP: 195.85.114.0/23
                          IP: 206.71.148.0/23
                          IP: 206.166.251.0/24
                          IP: 206.188.196.0/23
                          IP: 216.245.184.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Oct 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e2:f1:7d:60:aa:3d:fb:83:05:ae:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 16 00:45:20 2024 GMT
            Not After : Aug 19 00:45:20 2026 GMT
        Subject: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:c2:1d:af:6c:4e:a4:5d:d6:8d:e3:9d:20:
                    f2:85:18:cd:a8:12:c5:6a:18:e1:75:a2:34:e5:d8:
                    be:6d:5f:d9:e9:33:ad:49:c1:ca:d5:5f:99:85:27:
                    aa:be:d1:ae:e2:ec:10:b2:b8:50:e8:99:97:7e:00:
                    ef:9f:ba:a9:e7:45:8b:a3:5c:8f:34:6a:02:1a:a0:
                    27:08:90:7e:2c:a5:40:6e:f0:0c:2d:23:9b:f4:34:
                    39:2d:98:04:a2:22:9c:a6:d0:9d:37:31:74:31:00:
                    d4:ae:01:e5:52:d3:1a:57:bf:4f:ac:53:57:0e:0f:
                    b6:bf:db:f2:00:03:fe:2c:70:35:e0:41:e9:c1:14:
                    aa:5d:e4:12:ab:bf:ea:22:27:6b:6d:72:e1:0b:c5:
                    e8:58:c2:63:0b:a8:26:df:1b:a1:8c:4a:0c:ee:70:
                    7e:97:a1:a7:d7:b2:f7:e9:84:d2:b8:6a:be:c6:4c:
                    c9:ab:8f:e5:00:70:b6:3b:5c:5d:99:e6:11:28:b5:
                    a3:5b:dd:b9:e6:72:dc:df:4f:b7:a6:bd:ee:55:e2:
                    ef:25:65:a2:22:38:8e:6a:02:f5:fa:15:82:1d:40:
                    29:19:9c:55:31:c3:9c:1b:39:41:da:ce:da:ad:72:
                    63:9d:48:55:c4:3c:91:2c:32:8a:fb:f9:7b:f9:3a:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.198.0/23
                  64.52.80.0/24
                  64.94.84.0/23
                  64.95.10.0-64.95.13.255
                  64.190.113.0/24
                  65.38.120.0/23
                  67.217.228.0/24
                  72.5.42.0/23
                  149.248.76.0/22
                  162.33.176.0/22
                  168.100.8.0/22
                  192.153.57.0/24
                  193.149.129.0/24
                  193.149.176.0/24
                  193.149.180.0/24
                  193.149.185.0/24
                  193.149.187.0/24
                  193.149.189.0-193.149.190.255
                  195.85.114.0/23
                  206.71.148.0/23
                  206.166.251.0/24
                  206.188.196.0/23
                  216.245.184.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399629

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:92:89:bf:04:fe:b1:f2:59:c4:43:61:f8:0e:5c:1e:eb:70:
         8d:04:58:ce:a4:54:e1:17:e1:16:16:2f:53:1f:a2:71:13:99:
         ad:0f:a4:a1:77:ee:2e:a6:b6:b5:b3:14:fe:13:cf:5f:32:f3:
         be:1a:a7:58:c7:9f:0b:ff:8f:41:93:30:c9:04:a3:49:2d:61:
         4a:cc:c5:40:eb:fc:f6:2c:02:99:62:71:7c:81:9c:a9:22:ea:
         00:02:25:a3:85:e7:f2:a5:34:9a:05:17:5e:5c:e5:7c:4f:33:
         62:ef:73:0c:7a:e0:9a:5a:a3:71:f9:0c:e8:28:29:95:60:80:
         e6:91:9e:b4:f0:14:6b:00:7f:39:ed:b9:df:8c:00:4f:f4:df:
         a8:4a:fa:8f:d0:51:a0:cc:8d:df:8d:8b:2c:6e:91:d5:ad:60:
         73:2b:76:59:82:77:f7:06:30:33:68:7b:50:73:85:15:fd:7e:
         6d:fe:51:f5:b8:07:6d:cb:d2:f1:92:23:d3:0c:ab:20:74:ad:
         6c:ea:80:44:15:10:85:9a:73:51:0e:91:3f:f7:70:3b:df:32:
         0a:ae:97:cb:fa:20:e9:a7:ea:a4:bf:d9:c3:60:f9:c9:6e:e9:
         42:c2:97:4e:b0:7b:27:b7:ba:15:06:ea:4a:61:10:7f:1d:cf:
         f1:8c:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 21:14:22 2024 by rpki-client on console-fra.rpki-client.org