Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
File:                     529d57aa-cd56-41d8-b3ad-b413b968b610.cer (raw, json)
Hash identifier:          GoQa2JQgXu93EDBdCT3YR6HA3wRxpj5qDApbgS9wHfk=
Subject key identifier:   2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E4835058BAAA375B3964A7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 09 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 22878
                          IP: 68.171.208.0/20
                          IP: 162.247.76.0/22
                          IP: 173.230.240.0/20
                          IP: 192.64.32.0/22
                          IP: 192.197.207.0/24
                          IP: 207.45.176.0/20
                          IP: 2607:f548::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:50:58:ba:aa:37:5b:39:64:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  9 19:06:39 2025 GMT
        Subject: CN=529d57aa-cd56-41d8-b3ad-b413b968b610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:7b:ed:38:2e:85:97:08:0b:bc:22:60:5f:
                    45:32:e6:09:9e:15:03:c6:ca:78:30:20:98:b3:b5:
                    af:69:36:c7:3d:7a:bf:e2:fc:10:df:98:80:28:ea:
                    87:dd:a4:ae:d3:57:39:05:f0:a3:65:9e:8d:d0:75:
                    a5:74:49:15:ce:07:fe:96:26:12:e9:1a:e0:b3:13:
                    0a:6a:2a:be:91:97:d3:2f:92:36:b9:46:0c:11:80:
                    93:13:11:22:9f:ab:26:86:02:47:56:6c:a1:93:e7:
                    12:58:63:89:20:75:02:ea:a1:65:d2:d7:80:32:33:
                    03:ba:b4:75:71:b3:85:ac:d3:1c:a3:4c:24:1d:1f:
                    d4:ca:1d:7f:b8:d4:24:b0:ea:e4:b5:2d:ea:90:5c:
                    f4:e1:24:ca:6a:b9:fa:6a:b4:91:ac:85:7f:c9:a6:
                    8c:d4:43:71:9f:63:68:c8:7a:ee:d3:fc:2e:70:17:
                    7e:ac:63:d6:b0:60:3f:91:f0:b7:4d:c6:f7:af:31:
                    fa:8b:cb:c1:78:9a:fe:6a:4f:94:72:46:f0:0a:06:
                    e8:07:9a:46:8c:13:0c:9d:92:db:b5:6a:f3:ec:67:
                    da:43:41:36:7a:27:ff:be:96:18:ac:e0:ea:b8:fe:
                    65:b9:c2:59:4d:b4:26:d6:5c:0f:8c:c3:ae:4b:f6:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.171.208.0/20
                  162.247.76.0/22
                  173.230.240.0/20
                  192.64.32.0/22
                  192.197.207.0/24
                  207.45.176.0/20
                IPv6:
                  2607:f548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22878

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fe:0d:a9:2a:ef:7b:ac:45:31:09:e8:38:0f:a8:95:af:c6:
         75:ac:80:e3:9d:ec:e9:64:5a:7e:13:0e:36:4f:79:3b:67:7d:
         31:12:f0:14:9c:1b:4f:59:84:4b:a6:5f:e8:9f:cd:24:26:48:
         27:7d:1a:62:43:5f:c1:10:92:44:9e:39:30:ba:f7:33:ec:43:
         ce:42:cc:d7:ad:ec:be:1d:8f:f0:fa:cf:ef:ab:65:fc:8f:27:
         7a:e5:9f:7b:00:8d:f8:24:fa:c6:e6:c0:e7:e3:64:3d:0b:81:
         66:13:32:82:29:20:e5:ea:d0:42:c0:53:0a:bd:83:f0:49:6a:
         e3:f9:78:aa:19:64:2c:41:eb:b8:16:aa:c3:23:b9:be:44:e7:
         18:11:83:89:96:50:79:73:13:95:32:43:c3:05:9f:63:2b:c2:
         c9:1a:d0:62:7f:9f:91:e9:7b:7e:9d:8a:c0:62:b1:58:ed:72:
         12:cc:f1:ea:b3:4f:31:c8:67:89:04:63:4a:02:ae:76:f8:dd:
         cf:ef:27:68:5f:aa:35:30:4c:06:4e:ae:fd:7b:6c:f3:07:44:
         e0:9f:90:3c:de:db:c0:94:de:ba:80:52:42:d6:38:a0:15:88:
         7e:97:55:c7:d5:cb:e5:dd:a4:cd:4d:65:ec:73:6d:a7:3a:62:
         a5:13:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:10 2024 by rpki-client on console-fra.rpki-client.org