Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
File:                     bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer (raw, json)
Hash identifier:          K6mVEA7mb4bH7ZpkKRNMnQaxZuxEP+WX80zX7B4rpXs=
Subject key identifier:   95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584448ACACA3B47EE03734E87600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Dec 2023 01:45:15 +0000
Certificate not after:    Wed 25 Mar 2026 00:45:15 +0000
Subordinate resources:    IP: 67.58.192.0/19
                          IP: 67.213.96.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:48:ac:ac:a3:b4:7e:e0:37:34:e8:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 21 01:45:15 2023 GMT
            Not After : Mar 25 00:45:15 2026 GMT
        Subject: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:f7:37:f2:fc:c9:e3:37:cc:4c:45:68:cd:
                    36:56:00:f1:7f:c8:37:e0:68:0a:58:cc:74:f4:0a:
                    4b:23:72:7d:f0:01:34:3e:85:09:88:a0:fe:2b:6b:
                    82:8a:ac:56:dd:04:a2:cb:2a:12:fd:fa:7a:f0:15:
                    7c:43:75:e5:fc:5d:df:11:5b:c8:1b:c1:4b:c5:4c:
                    d3:d0:8d:da:94:e0:65:e5:69:04:e5:38:da:59:4f:
                    06:3e:13:ee:1d:78:e5:3d:2f:2c:06:33:30:a2:97:
                    65:50:40:14:17:84:64:d2:8d:87:6d:7b:40:49:1b:
                    c5:a1:55:c5:63:dc:ad:bc:3e:c0:28:8d:d7:1c:66:
                    ec:c6:64:dd:a4:d5:78:21:f1:93:7f:9b:f9:27:34:
                    2d:da:43:c0:ed:f6:e8:4c:d7:47:c5:3e:b4:38:46:
                    4c:46:d5:d2:42:59:c9:51:f5:cc:e8:13:c9:a5:5f:
                    c4:72:0d:42:9d:05:71:21:c2:8f:20:0c:1f:52:96:
                    81:44:1a:86:7d:18:05:b4:fb:07:fe:85:f5:93:9b:
                    da:55:42:60:12:92:cb:0a:ac:8b:93:27:eb:cb:c9:
                    59:d4:87:a7:3e:79:a3:95:d8:fc:08:39:65:e9:e7:
                    2a:e6:2c:76:bc:f4:2e:f1:9a:fe:31:3d:56:55:ea:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.192.0/19
                  67.213.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:ea:7b:bd:cb:ab:92:cb:c1:07:22:9c:62:73:4d:78:ea:
         a8:82:7f:c9:e3:85:60:9e:6f:70:8b:a6:a9:92:50:18:8c:24:
         77:a1:f9:5d:56:34:17:ba:dc:38:55:4e:2c:35:6f:53:12:85:
         d0:63:5d:c4:c3:2d:b7:15:fc:b0:f1:38:8f:0d:d2:a9:ba:d4:
         0e:e2:32:27:8b:9f:37:27:70:27:5b:c7:2b:d8:37:e6:00:d3:
         ac:fa:47:45:13:2f:8f:4a:fd:c0:6d:b0:ef:39:4f:e3:2b:4f:
         e3:65:8b:72:7d:05:04:bd:a7:aa:ff:49:78:62:a0:87:da:73:
         07:5b:44:30:01:cd:7c:60:67:99:5c:8c:62:bd:e5:7a:a7:03:
         d5:c1:b0:0e:a7:8a:13:3b:c4:41:20:ab:08:14:18:63:96:3f:
         2a:cd:9d:b2:9f:91:e9:d6:6c:81:53:e6:eb:3b:9c:ea:67:00:
         2f:f0:e4:3b:e1:69:74:63:15:c2:02:dd:26:18:55:22:52:9c:
         b2:aa:5e:8c:87:54:49:af:01:50:80:60:84:18:d7:a6:26:df:
         59:6f:9b:e6:5b:27:bf:38:45:eb:2e:18:2e:f2:78:04:6e:e0:
         44:6e:b3:b7:01:80:b8:b4:3f:fa:88:4a:ab:96:f6:c1:eb:0d:
         a6:64:00:09
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWERIrKyjtH7gNzTodgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMTIyMTAxNDUxNVoXDTI2MDMyNTAwNDUxNVowLzEtMCsGA1UEAxMk
YmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVhYTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUv3N/L8yeM3zExFaM02VgDxf8g34GgKWMx0
9ApLI3J98AE0PoUJiKD+K2uCiqxW3QSiyyoS/fp68BV8Q3Xl/F3fEVvIG8FLxUzT
0I3alOBl5WkE5TjaWU8GPhPuHXjlPS8sBjMwopdlUEAUF4Rk0o2HbXtASRvFoVXF
Y9ytvD7AKI3XHGbsxmTdpNV4IfGTf5v5JzQt2kPA7fboTNdHxT60OEZMRtXSQlnJ
UfXM6BPJpV/Ecg1CnQVxIcKPIAwfUpaBRBqGfRgFtPsH/oX1k5vaVUJgEpLLCqyL
kyfry8lZ1IenPnmjldj8CDll6ecq5ix2vPQu8Zr+MT1WVepbRwIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFJVbUz1OqqPp4OdF/fzmSFknSy0SMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i
Y2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2JjYTQ4YWQwLWY2MTMtNGM2Ni1i
MDdhLTY0NzNkOGE1YWEyNi9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhh
NWFhMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAVDOsADBARD1WAwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAk6Xqe73Lq5LL
wQcinGJzTXjqqIJ/yeOFYJ5vcIumqZJQGIwkd6H5XVY0F7rcOFVOLDVvUxKF0GNd
xMMttxX8sPE4jw3SqbrUDuIyJ4ufNydwJ1vHK9g35gDTrPpHRRMvj0r9wG2w7zlP
4ytP42WLcn0FBL2nqv9JeGKgh9pzB1tEMAHNfGBnmVyMYr3leqcD1cGwDqeKEzvE
QSCrCBQYY5Y/Ks2dsp+R6dZsgVPm6zuc6mcAL/DkO+FpdGMVwgLdJhhVIlKcsqpe
jIdUSa8BUIBghBjXpibfWW+b5lsnvzhF6y4YLvJ4BG7gRG6ztwGAuLQ/+ohKq5b2
wesNpmQACQ==
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:25 2024 by rpki-client on console-fra.rpki-client.org