Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
File:                     cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer (raw, json)
Hash identifier:          aeory1xsRxogogQQh6PNQdaaAtZOTzySthUvgRQUm6w=
Subject key identifier:   26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847F84809CFFBECCCD3DB4CA400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 23 Nov 2024 01:45:34 +0000
Certificate not after:    Fri 26 Feb 2027 01:45:34 +0000
Subordinate resources:    AS: 6982
                          AS: 55293
                          IP: 45.4.172.0/22
                          IP: 64.4.160.0/22
                          IP: 66.198.240.0/20
                          IP: 67.209.112.0/20
                          IP: 68.66.192.0 -- 68.66.210.255
                          IP: 68.66.212.0 -- 68.66.255.255
                          IP: 69.48.136.0/22
                          IP: 69.48.142.0/23
                          IP: 69.48.150.0 -- 69.48.157.255
                          IP: 69.48.162.0 -- 69.48.191.255
                          IP: 70.32.16.0/20
                          IP: 75.98.160.0/20
                          IP: 103.72.76.0/22
                          IP: 103.204.128.0/22
                          IP: 104.218.8.0/21
                          IP: 104.255.192.0/21
                          IP: 106.0.62.0/23
                          IP: 128.201.4.0/22
                          IP: 162.212.128.0 -- 162.212.133.255
                          IP: 162.212.135.0/24
                          IP: 162.249.0.0/21
                          IP: 162.254.248.0/21
                          IP: 170.0.4.0/22
                          IP: 170.81.124.0/22
                          IP: 181.224.128.0/19
                          IP: 190.92.128.0/19
                          IP: 190.92.176.0/20
                          IP: 192.190.94.0/24
                          IP: 198.100.44.0/22
                          IP: 199.195.116.0/23
                          IP: 199.195.119.0/24
                          IP: 200.69.20.0 -- 200.69.27.255
                          IP: 209.124.64.0 -- 209.124.88.255
                          IP: 209.124.90.0 -- 209.124.95.255
                          IP: 216.119.128.0/20
                          IP: 216.137.176.0/20
                          IP: 2607:f788::/32
                          IP: 2607:fb30::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:48:09:cf:fb:ec:cc:d3:db:4c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 23 01:45:34 2024 GMT
            Not After : Feb 26 01:45:34 2027 GMT
        Subject: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:6f:22:50:ec:b5:98:c9:78:55:38:54:46:
                    ec:ea:29:ad:fe:f9:87:5b:29:1f:7f:2f:6f:0d:8f:
                    43:3a:d7:39:74:4a:cb:7f:a8:d9:c7:c2:bb:cd:e7:
                    c5:51:58:20:16:cd:69:8d:80:05:08:69:95:58:2c:
                    eb:52:6f:f2:3f:76:8e:6e:fe:ad:b8:f1:c1:0d:dd:
                    2b:67:30:1e:8a:d6:fa:2e:94:ce:4b:33:87:aa:da:
                    fe:b3:0c:ea:07:3a:ac:04:d7:ba:0e:a2:a1:85:f0:
                    11:78:71:ff:b1:00:57:69:4f:b2:1c:0a:ce:96:bc:
                    3e:c2:63:ad:21:16:ee:c4:dc:4b:e3:bc:77:ed:7c:
                    ec:d5:c8:fd:cd:03:87:f8:d6:d6:8e:61:4b:11:71:
                    79:b7:ed:78:2d:30:86:96:05:7d:98:86:6d:e0:f1:
                    e9:94:31:38:c2:b6:e3:fd:71:56:7c:83:f3:e4:4b:
                    44:09:a8:a6:41:57:68:89:31:1b:18:b3:b7:4c:6a:
                    b8:7f:3c:96:c2:e0:1f:19:08:fb:06:ca:ef:d4:b5:
                    5a:5d:75:4f:5b:2b:cb:c0:7f:5b:d7:05:b1:30:92:
                    09:93:97:bb:51:f6:18:89:e2:e9:17:0f:43:69:90:
                    72:f5:50:de:c2:7f:be:cf:99:e4:79:32:19:0e:ca:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.172.0/22
                  64.4.160.0/22
                  66.198.240.0/20
                  67.209.112.0/20
                  68.66.192.0-68.66.210.255
                  68.66.212.0-68.66.255.255
                  69.48.136.0/22
                  69.48.142.0/23
                  69.48.150.0-69.48.157.255
                  69.48.162.0-69.48.191.255
                  70.32.16.0/20
                  75.98.160.0/20
                  103.72.76.0/22
                  103.204.128.0/22
                  104.218.8.0/21
                  104.255.192.0/21
                  106.0.62.0/23
                  128.201.4.0/22
                  162.212.128.0-162.212.133.255
                  162.212.135.0/24
                  162.249.0.0/21
                  162.254.248.0/21
                  170.0.4.0/22
                  170.81.124.0/22
                  181.224.128.0/19
                  190.92.128.0/19
                  190.92.176.0/20
                  192.190.94.0/24
                  198.100.44.0/22
                  199.195.116.0/23
                  199.195.119.0/24
                  200.69.20.0-200.69.27.255
                  209.124.64.0-209.124.88.255
                  209.124.90.0-209.124.95.255
                  216.119.128.0/20
                  216.137.176.0/20
                IPv6:
                  2607:f788::/32
                  2607:fb30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6982
                  55293

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:74:9f:96:06:b0:90:b7:b8:35:8c:94:83:20:24:0f:b2:
         3a:2b:e4:09:f2:36:17:ea:73:6c:6c:9b:29:78:76:09:d2:f1:
         98:5f:e5:1e:24:b5:8d:d2:c1:b8:10:14:77:e2:9c:0b:2f:ff:
         8c:1a:3d:b9:03:68:ff:7b:a7:ba:dc:d6:31:5b:f3:16:33:1f:
         23:1d:81:0a:67:af:ed:94:bc:d5:30:85:f2:80:c2:30:af:c3:
         58:42:30:18:7d:61:c7:a3:bd:3e:78:41:c0:19:3e:71:53:94:
         3c:f6:73:ef:59:7c:dd:2e:b0:e1:2a:d1:5a:48:a9:dc:bc:be:
         95:02:0a:18:bf:88:f6:28:ee:c2:71:4e:53:09:6f:ee:c1:50:
         49:fa:9e:6c:3a:42:a5:83:53:63:85:9f:61:e2:7c:84:74:26:
         bc:00:be:48:a1:58:b5:7f:17:62:24:b0:fe:26:b7:8f:1a:82:
         5c:74:ee:a9:c9:17:09:1d:e9:8c:ea:7b:fe:8c:20:93:4f:c4:
         19:a0:e1:a3:f3:ed:b5:8c:ca:ac:75:b9:bd:87:8b:93:1d:cb:
         e4:6c:d6:ed:72:58:ae:46:f1:00:5e:76:28:49:35:5a:ea:ed:
         e3:81:1e:02:db:8a:37:04:2c:5a:89:b4:7f:2f:26:82:9d:e1:
         71:14:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:24 2025 by rpki-client