Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
File:                     9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer (raw, json)
Hash identifier:          nk1fIjQ+yCPvUkcqsXtGoYB09+GfFm2L+dgx6uW9Pnw=
Subject key identifier:   D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285846EC2883E5127E6C314AE82CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Aug 2024 00:45:24 +0000
Certificate not after:    Sun 22 Nov 2026 01:45:24 +0000
Subordinate resources:    AS: 20205
                          IP: 64.246.96.0/19
                          IP: 104.37.52.0/22
                          IP: 137.83.84.0/23
                          IP: 158.247.72.0/22
                          IP: 168.245.180.0/22
                          IP: 192.211.11.0/24
                          IP: 2001:4950::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:28:83:e5:12:7e:6c:31:4a:e8:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 19 00:45:24 2024 GMT
            Not After : Nov 22 01:45:24 2026 GMT
        Subject: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:11:8b:de:75:7a:d0:fe:7a:d2:d2:9c:ab:
                    d0:77:a2:bf:04:a9:57:f3:ae:5f:6d:6f:e6:7f:37:
                    44:3c:16:43:4c:b5:50:ec:c1:54:93:be:e8:74:db:
                    dc:b9:a1:63:17:4d:1c:bf:20:55:59:54:31:09:d4:
                    fb:a6:4c:a0:9a:8a:3e:7a:e7:b4:ac:c0:94:ea:7d:
                    2e:ff:87:fe:fd:ab:f0:ff:15:ac:4e:2c:10:ce:ec:
                    24:29:18:fd:c2:78:73:d7:32:9c:68:a7:54:09:0c:
                    b7:70:5c:1d:5b:bc:fe:57:39:f9:35:37:76:0d:41:
                    fa:48:de:03:d9:a4:c6:ad:d0:ae:10:3b:a3:00:ef:
                    57:01:d9:cf:22:59:50:7f:49:24:30:5b:7d:d3:86:
                    49:ed:cd:44:c6:3d:c6:a8:e5:ff:38:7f:47:a7:b0:
                    60:24:6f:d9:1a:0f:33:57:81:c4:26:b0:0c:d4:bf:
                    01:8e:04:dd:8e:8d:c3:c1:a2:76:0a:23:95:d8:7b:
                    bc:e1:c7:d7:9d:09:89:df:4f:5a:93:c0:d0:82:b9:
                    c3:e9:ac:08:be:82:5c:a4:d1:f5:02:dd:c8:16:fc:
                    4d:f2:42:71:36:5d:83:f3:c7:e0:7c:bf:6d:4e:1f:
                    9a:66:f2:12:60:80:91:50:bb:e2:eb:f4:b4:fa:e0:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19
                  104.37.52.0/22
                  137.83.84.0/23
                  158.247.72.0/22
                  168.245.180.0/22
                  192.211.11.0/24
                IPv6:
                  2001:4950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:68:e1:99:7d:22:69:0d:6b:58:c6:8c:f6:93:7f:7a:95:
         06:18:f5:27:34:89:e6:e8:7b:4a:80:69:18:b4:33:ca:86:7a:
         a3:96:8c:3b:ed:f2:ae:0f:f3:07:80:cc:aa:24:22:69:83:a9:
         26:c2:a5:9d:6d:ee:aa:c9:22:fb:5c:1d:12:43:ef:65:36:70:
         22:df:7d:3b:8b:77:8a:9c:7a:d6:f1:b3:f8:c4:ec:67:35:40:
         97:46:81:e6:4e:4a:a0:fa:e9:65:c3:ab:a2:78:c6:89:d6:9d:
         27:67:8b:73:44:f8:34:20:bb:4c:46:7d:d7:6b:5e:d2:8c:26:
         b3:c8:a3:4a:b9:98:1d:a7:52:a9:c1:86:48:c2:8d:82:4e:4a:
         aa:00:8e:81:68:21:e0:42:4d:fc:42:cb:1a:db:48:73:0c:44:
         f9:13:27:1c:a2:67:57:cd:db:e0:64:8a:7d:95:04:59:2b:5d:
         ff:5c:66:11:de:a7:c0:5c:9c:46:8d:9a:31:bd:96:0f:3f:c2:
         80:91:bb:7c:c1:70:2c:11:42:7f:b2:d3:c8:72:c2:7e:60:4e:
         5f:eb:03:61:18:4c:f2:9f:c4:9b:7b:e2:ab:e5:e1:be:26:bf:
         06:9d:ca:ed:5f:b6:f0:98:49:b1:71:9d:9b:c8:3b:14:71:13:
         52:ce:6a:83
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEbsKIPlEn5sMUroLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDgxOTAwNDUyNFoXDTI2MTEyMjAxNDUyNFowLzEtMCsGA1UEAxMk
OWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2NmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi38Ri951etD+etLSnKvQd6K/BKlX865fbW/m
fzdEPBZDTLVQ7MFUk77odNvcuaFjF00cvyBVWVQxCdT7pkygmoo+eue0rMCU6n0u
/4f+/avw/xWsTiwQzuwkKRj9wnhz1zKcaKdUCQy3cFwdW7z+Vzn5NTd2DUH6SN4D
2aTGrdCuEDujAO9XAdnPIllQf0kkMFt904ZJ7c1Exj3GqOX/OH9Hp7BgJG/ZGg8z
V4HEJrAM1L8BjgTdjo3DwaJ2CiOV2Hu84cfXnQmJ309ak8DQgrnD6awIvoJcpNH1
At3IFvxN8kJxNl2D88fgfL9tTh+aZvISYICRULvi6/S0+uBY4wIDAQABo4IERzCC
BEMwHQYDVR0OBBYEFNjWvze1tk7UHXlVzZN+pl4AiZ/4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzllZDQ1ZTk3LTkwYzItNDgzZC1h
NjhiLTJkZDJjODMyNjZhMi85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgz
MjY2YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH
AQcBAf8EPTA7MCoEAgABMCQDBAVA9mADBAJoJTQDBAGJU1QDBAKe90gDBAKo9bQD
BADA0wswDQQCAAIwBwMFACABSVAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTu0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZ5xo4Zl9ImkNa1jGjPaTf3qVBhj1JzSJ5uh7SoBpGLQzyoZ6o5aM
O+3yrg/zB4DMqiQiaYOpJsKlnW3uqski+1wdEkPvZTZwIt99O4t3ipx61vGz+MTs
ZzVAl0aB5k5KoPrpZcOronjGidadJ2eLc0T4NCC7TEZ912te0owms8ijSrmYHadS
qcGGSMKNgk5KqgCOgWgh4EJN/ELLGttIcwxE+RMnHKJnV83b4GSKfZUEWStd/1xm
Ed6nwFycRo2aMb2WDz/CgJG7fMFwLBFCf7LTyHLCfmBOX+sDYRhM8p/Em3viq+Xh
via/Bp3K7V+28JhJsXGdm8g7FHETUs5qgw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:26:57 2024 by rpki-client on console-ams.rpki-client.org