Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
File:                     cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer (raw, json)
Hash identifier:          zbL35pogN32skN+g2HlmArA8ugSLdQwbZdwt+mpFJwc=
Subject key identifier:   26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842F3F78175E427052FF983A980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Aug 2023 00:45:23 +0000
Certificate not after:    Sun 23 Nov 2025 01:45:23 +0000
Subordinate resources:    AS: 6982
                          AS: 55293
                          IP: 45.4.172.0/22
                          IP: 64.4.160.0/22
                          IP: 66.198.240.0/20
                          IP: 67.209.112.0/20
                          IP: 68.66.192.0 -- 68.66.210.255
                          IP: 68.66.212.0 -- 68.66.255.255
                          IP: 69.48.136.0/22
                          IP: 69.48.142.0/23
                          IP: 69.48.150.0 -- 69.48.157.255
                          IP: 69.48.162.0 -- 69.48.191.255
                          IP: 70.32.16.0/20
                          IP: 75.98.160.0/20
                          IP: 103.72.76.0/22
                          IP: 103.204.128.0/22
                          IP: 104.218.8.0/21
                          IP: 104.255.192.0/21
                          IP: 106.0.62.0/23
                          IP: 128.201.4.0/22
                          IP: 162.212.128.0 -- 162.212.133.255
                          IP: 162.212.135.0/24
                          IP: 162.249.0.0/21
                          IP: 162.254.248.0/21
                          IP: 170.0.4.0/22
                          IP: 170.81.124.0/22
                          IP: 181.224.128.0/19
                          IP: 190.92.128.0/19
                          IP: 190.92.176.0/20
                          IP: 192.190.94.0/24
                          IP: 198.100.44.0/22
                          IP: 199.195.116.0/23
                          IP: 199.195.119.0/24
                          IP: 200.69.20.0 -- 200.69.27.255
                          IP: 209.124.64.0 -- 209.124.88.255
                          IP: 209.124.90.0 -- 209.124.95.255
                          IP: 216.119.128.0/20
                          IP: 216.137.176.0/20
                          IP: 2607:f788::/32
                          IP: 2607:fb30::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:f7:81:75:e4:27:05:2f:f9:83:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 21 00:45:23 2023 GMT
            Not After : Nov 23 01:45:23 2025 GMT
        Subject: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:6f:22:50:ec:b5:98:c9:78:55:38:54:46:
                    ec:ea:29:ad:fe:f9:87:5b:29:1f:7f:2f:6f:0d:8f:
                    43:3a:d7:39:74:4a:cb:7f:a8:d9:c7:c2:bb:cd:e7:
                    c5:51:58:20:16:cd:69:8d:80:05:08:69:95:58:2c:
                    eb:52:6f:f2:3f:76:8e:6e:fe:ad:b8:f1:c1:0d:dd:
                    2b:67:30:1e:8a:d6:fa:2e:94:ce:4b:33:87:aa:da:
                    fe:b3:0c:ea:07:3a:ac:04:d7:ba:0e:a2:a1:85:f0:
                    11:78:71:ff:b1:00:57:69:4f:b2:1c:0a:ce:96:bc:
                    3e:c2:63:ad:21:16:ee:c4:dc:4b:e3:bc:77:ed:7c:
                    ec:d5:c8:fd:cd:03:87:f8:d6:d6:8e:61:4b:11:71:
                    79:b7:ed:78:2d:30:86:96:05:7d:98:86:6d:e0:f1:
                    e9:94:31:38:c2:b6:e3:fd:71:56:7c:83:f3:e4:4b:
                    44:09:a8:a6:41:57:68:89:31:1b:18:b3:b7:4c:6a:
                    b8:7f:3c:96:c2:e0:1f:19:08:fb:06:ca:ef:d4:b5:
                    5a:5d:75:4f:5b:2b:cb:c0:7f:5b:d7:05:b1:30:92:
                    09:93:97:bb:51:f6:18:89:e2:e9:17:0f:43:69:90:
                    72:f5:50:de:c2:7f:be:cf:99:e4:79:32:19:0e:ca:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22
                  64.4.160.0/22
                  66.198.240.0/20
                  67.209.112.0/20
                  68.66.192.0-68.66.210.255
                  68.66.212.0-68.66.255.255
                  69.48.136.0/22
                  69.48.142.0/23
                  69.48.150.0-69.48.157.255
                  69.48.162.0-69.48.191.255
                  70.32.16.0/20
                  75.98.160.0/20
                  103.72.76.0/22
                  103.204.128.0/22
                  104.218.8.0/21
                  104.255.192.0/21
                  106.0.62.0/23
                  128.201.4.0/22
                  162.212.128.0-162.212.133.255
                  162.212.135.0/24
                  162.249.0.0/21
                  162.254.248.0/21
                  170.0.4.0/22
                  170.81.124.0/22
                  181.224.128.0/19
                  190.92.128.0/19
                  190.92.176.0/20
                  192.190.94.0/24
                  198.100.44.0/22
                  199.195.116.0/23
                  199.195.119.0/24
                  200.69.20.0-200.69.27.255
                  209.124.64.0-209.124.88.255
                  209.124.90.0-209.124.95.255
                  216.119.128.0/20
                  216.137.176.0/20
                IPv6:
                  2607:f788::/32
                  2607:fb30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6982
                  55293

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:dc:e1:35:b5:eb:a9:b0:ec:1c:a7:ba:64:74:18:9e:ec:
         0b:1c:7e:88:12:7d:58:cc:5e:1f:0c:7e:ec:4c:a7:72:b0:b8:
         7c:37:c5:6a:3e:20:63:fd:56:fb:9f:77:cf:e6:54:14:c8:9e:
         9b:d5:58:57:e2:d1:6a:1a:bd:6d:a9:4d:9a:ef:22:13:16:6a:
         b5:b4:60:d8:94:f0:b5:49:26:ee:9c:90:83:2f:43:3f:a7:4b:
         86:a4:19:15:af:99:6e:c1:75:8d:9c:46:be:ca:10:ef:d4:6e:
         10:ad:b1:33:77:d2:19:f0:6e:eb:ef:f0:68:32:25:f1:2a:04:
         1a:d0:ba:c9:b6:56:79:3f:25:97:ee:ac:0c:89:f1:16:73:44:
         aa:b8:d3:b6:10:d8:21:72:c6:f4:50:23:50:d3:9e:67:b4:f2:
         62:65:bc:a9:3c:1c:9a:e4:d6:50:e3:57:11:7c:eb:88:1c:1e:
         1f:3e:07:2a:2d:b6:7a:ff:56:cf:5c:90:4d:5f:1b:54:0d:4a:
         62:5f:38:a9:3f:bd:66:e1:ae:6e:e0:b3:85:47:18:96:04:d6:
         a2:af:fe:52:cb:7a:d7:46:ea:34:5e:d1:fc:62:56:0a:bd:52:
         dd:bc:94:ca:33:60:9f:24:4a:22:97:d4:b5:15:af:ec:84:92:
         26:03:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:02:20 2024 by rpki-client on console-ams.rpki-client.org