Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
File:                     dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer (raw, json)
Hash identifier:          ZMxhmva9mxdTKVeantK85NQxOk6n42iFMbSm25luDKc=
Subject key identifier:   E7:B0:28:96:EA:ED:2C:89:84:F7:FA:D9:4C:BE:53:F4:75:B2:68:74
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584249ABBAFB9A7A1C3DCF774F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jun 2023 00:45:17 +0000
Certificate not after:    Tue 23 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 54243
                          AS: 396097
                          IP: 23.152.128.0/23
                          IP: 64.186.8.0/23
                          IP: 64.190.226.0/23
                          IP: 94.140.19.0/24
                          IP: 141.193.140.0/24
                          IP: 147.92.88.0/22
                          IP: 147.160.62.0/23
                          IP: 147.185.46.0/23
                          IP: 147.185.60.0/22
                          IP: 148.59.58.0/23
                          IP: 172.98.216.0/22
                          IP: 198.135.176.0/23
                          IP: 199.201.161.0/24
                          IP: 208.82.96.0/21
                          IP: 208.95.232.0/21
                          IP: 209.237.156.0/22
                          IP: 2602:fb8f::/40
                          IP: 2604:21c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:49:ab:ba:fb:9a:7a:1c:3d:cf:77:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 21 00:45:17 2023 GMT
            Not After : Sep 23 00:45:17 2025 GMT
        Subject: CN=dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:be:06:55:f7:e2:b2:e6:af:4a:b2:b8:f7:
                    0d:d5:b2:71:f4:de:ca:23:8d:83:06:39:99:8c:47:
                    0f:07:c3:1b:f1:0f:25:c5:05:60:29:7f:4b:91:08:
                    4b:24:02:d0:27:5b:3a:2e:5c:81:6e:64:69:d8:fc:
                    3a:a1:59:c0:69:15:0a:48:d8:e6:1d:e3:78:32:13:
                    2c:09:ba:eb:98:84:46:02:80:cd:0f:ad:30:22:2b:
                    56:27:e6:f1:da:66:67:6b:da:12:f2:fc:a3:e6:2a:
                    11:4e:88:46:d8:44:bc:00:60:3c:59:fc:97:6d:f0:
                    78:af:db:82:60:02:28:2d:cb:9f:d7:a2:cd:65:f2:
                    a9:26:ab:09:8a:fe:4a:c8:7c:b0:ea:73:da:4f:6f:
                    dc:72:5e:df:95:c4:20:d2:0d:e9:1e:8d:ae:4d:74:
                    0e:ed:46:27:cb:86:53:72:35:69:bd:f0:b8:cd:17:
                    cb:2e:9b:93:e9:06:71:94:1e:11:f5:7d:d3:ea:36:
                    3b:f0:e6:c3:79:df:ed:10:5a:f0:54:0e:53:2d:e3:
                    57:41:86:c8:6a:3b:34:12:15:68:26:20:5e:90:07:
                    50:45:20:0f:c5:00:4b:10:1e:f4:59:63:ee:53:d6:
                    a1:03:14:69:5c:9a:a8:81:e4:3d:c6:70:e0:05:3a:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B0:28:96:EA:ED:2C:89:84:F7:FA:D9:4C:BE:53:F4:75:B2:68:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.128.0/23
                  64.186.8.0/23
                  64.190.226.0/23
                  94.140.19.0/24
                  141.193.140.0/24
                  147.92.88.0/22
                  147.160.62.0/23
                  147.185.46.0/23
                  147.185.60.0/22
                  148.59.58.0/23
                  172.98.216.0/22
                  198.135.176.0/23
                  199.201.161.0/24
                  208.82.96.0/21
                  208.95.232.0/21
                  209.237.156.0/22
                IPv6:
                  2602:fb8f::/40
                  2604:21c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54243
                  396097

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c6:7c:62:dc:c6:b7:33:f3:3c:61:b7:4f:bc:5e:50:f6:ad:
         36:b2:e5:8e:1d:d6:71:9c:99:ee:7c:af:b3:13:43:b4:fc:14:
         61:ed:b6:f8:53:13:4f:13:09:c1:54:66:10:09:97:6b:c1:6b:
         97:d8:e6:62:69:4d:0c:36:f9:ad:8a:90:e5:2b:2d:88:ef:29:
         9e:ed:f6:43:30:0f:fc:37:4b:ee:3f:f5:94:c7:ab:6c:f8:19:
         cf:0f:0f:e5:05:32:eb:07:1a:93:d4:f6:81:5c:b9:76:8d:4c:
         5a:3b:d2:1d:60:d8:c7:19:ed:86:76:b7:a4:66:2b:cc:82:be:
         70:d6:8c:db:51:b6:27:6b:31:b9:7d:39:86:57:1b:3b:88:98:
         f8:cf:4a:81:8e:3d:d2:6a:ac:19:83:08:f2:7f:79:39:53:37:
         27:e2:32:94:94:06:da:44:a8:6b:5e:20:21:3d:17:de:c5:9c:
         2c:10:d7:16:59:0c:f2:5a:22:44:4c:d6:9c:d3:1c:20:37:7f:
         36:c8:3e:41:20:a9:7d:de:6d:78:47:21:fe:41:9e:b1:e1:de:
         f0:f0:b4:ba:0f:1a:24:b2:d0:bd:95:5e:95:e5:b1:8d:4a:fc:
         f0:df:eb:51:b2:d1:a3:0c:ba:ba:9c:31:30:69:e9:91:0b:36:
         49:35:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:57:24 2024 by rpki-client on console-ams.rpki-client.org