Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer
File:                     fb691a940315f6b597289468edf71aa0125e76755a78563c86.cer (raw, json)
Hash identifier:          QPVI9n2NA1Ojsd4L29y3dhBS1e3AXL9Szlsc/AZEGpM=
Subject key identifier:   DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
Authority key identifier: E7:B0:28:96:EA:ED:2C:89:84:F7:FA:D9:4C:BE:53:F4:75:B2:68:74
Certificate issuer:       /CN=dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c
Certificate serial:       010D0C9F432858475159A94AC65903E2D767D300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
Manifest:                 rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
caRepository:             rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/
Notify URL:               https://rpki.sailx.co/rrdp/notification.xml
Certificate not before:   Tue 24 Sep 2024 06:41:05 +0000
Certificate not after:    Mon 28 Dec 2026 07:41:05 +0000
Subordinate resources:    AS: 54243
                          AS: 396097
                          IP: 23.152.128.0/23
                          IP: 64.186.8.0/23
                          IP: 64.190.226.0/23
                          IP: 94.140.19.0/24
                          IP: 141.193.140.0/24
                          IP: 147.92.88.0/22
                          IP: 147.160.62.0/23
                          IP: 147.185.46.0/23
                          IP: 147.185.60.0/22
                          IP: 148.59.58.0/23
                          IP: 172.98.216.0/22
                          IP: 198.135.176.0/23
                          IP: 199.201.161.0/24
                          IP: 208.82.96.0/21
                          IP: 208.95.232.0/21
                          IP: 209.237.156.0/22
                          IP: 2602:fb8f::/40
                          IP: 2604:21c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:51:59:a9:4a:c6:59:03:e2:d7:67:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c
        Validity
            Not Before: Sep 24 06:41:05 2024 GMT
            Not After : Dec 28 07:41:05 2026 GMT
        Subject: CN=fb691a940315f6b597289468edf71aa0125e76755a78563c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:a5:67:5b:2f:30:ae:a6:76:d7:06:f2:e1:
                    53:3d:9b:a8:d2:ae:48:a2:86:c3:ff:63:ae:5f:f5:
                    4b:fc:21:ec:2a:7f:c2:86:c3:7c:49:ea:cb:0b:67:
                    d1:4e:68:34:d6:d8:f2:61:47:93:ba:1a:9b:4a:b3:
                    03:4a:70:d3:df:b7:7b:00:02:77:64:c1:a0:ad:9a:
                    4b:bf:b1:36:bb:a7:53:a4:05:6c:57:35:9b:1b:80:
                    72:90:f5:87:21:cf:6d:86:ed:c0:c8:18:0b:c1:3e:
                    f6:32:69:1f:f1:d8:cb:6c:9c:36:88:14:82:a0:31:
                    98:27:ca:20:22:3c:e5:f3:f6:f0:26:53:8e:ec:67:
                    7a:56:f1:d7:b4:81:01:4e:11:b8:a4:2a:32:97:29:
                    e6:e8:5b:60:f1:ea:64:78:a2:81:3a:6d:6e:50:09:
                    cf:d4:3b:ee:ab:8b:f0:49:2f:06:bb:d3:b1:21:68:
                    14:6d:12:ab:c0:88:78:cc:b4:c7:85:f8:70:cc:5e:
                    80:13:83:7c:1c:44:8f:b5:f5:bb:5f:db:5f:e8:85:
                    0b:e5:dc:07:66:3a:7d:91:e8:e2:84:09:a0:a9:d8:
                    25:95:e9:ef:1b:ee:74:83:82:43:6b:87:fd:e2:f1:
                    a2:04:4d:e5:de:93:ca:c9:f3:cb:79:ba:0b:ac:73:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C5:50:97:68:EA:58:7E:63:8D:20:68:00:32:E0:FF:12:2B:D2:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0
                RPKI Manifest - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/0/DFC5509768EA587E638D20680032E0FF122BD25A.mft
                RPKI Notify - URI:https://rpki.sailx.co/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:B0:28:96:EA:ED:2C:89:84:F7:FA:D9:4C:BE:53:F4:75:B2:68:74

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dbc4bf5a-1d06-4a3f-9706-a18fa2d8670c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.128.0/23
                  64.186.8.0/23
                  64.190.226.0/23
                  94.140.19.0/24
                  141.193.140.0/24
                  147.92.88.0/22
                  147.160.62.0/23
                  147.185.46.0/23
                  147.185.60.0/22
                  148.59.58.0/23
                  172.98.216.0/22
                  198.135.176.0/23
                  199.201.161.0/24
                  208.82.96.0/21
                  208.95.232.0/21
                  209.237.156.0/22
                IPv6:
                  2602:fb8f::/40
                  2604:21c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54243
                  396097

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:be:dc:b8:1a:7d:1a:a1:5a:2c:4a:af:6a:bb:7a:a2:81:f8:
         bb:2d:57:c5:20:4d:b2:10:11:ef:42:87:04:d8:23:2e:c6:22:
         85:a9:8e:49:7f:8b:f7:a5:5e:10:b4:84:3b:42:26:47:5e:43:
         e8:b0:6d:75:f4:e9:00:9f:72:83:75:e8:3d:9e:ea:38:f3:16:
         f2:6f:50:3c:06:28:d2:e4:66:6c:79:e5:f5:df:de:38:9c:01:
         47:d4:88:29:fb:7d:15:b8:09:f0:0d:2c:3a:85:53:7d:ae:ba:
         23:58:d1:39:30:ac:8a:00:1d:b4:4e:28:6d:3a:08:da:d5:f3:
         71:fb:cb:13:0b:13:ee:8b:63:58:22:69:91:16:a9:3b:66:dc:
         b5:70:b1:54:de:af:3e:d9:ab:ea:c6:e6:21:e0:cf:9b:22:3c:
         9b:d9:d0:cf:62:2c:d2:74:b4:03:24:66:b6:c4:21:90:6d:02:
         2f:45:f8:7b:6b:0a:3f:7d:35:88:7f:65:5b:c7:3b:f9:1a:99:
         d2:a0:f5:06:96:ed:69:32:58:d7:d9:f2:dc:27:8f:ee:6c:80:
         ac:f2:e4:0d:71:2e:ab:81:89:02:19:62:bc:97:04:da:e9:d3:
         ac:b1:fc:53:86:d7:51:85:ab:7f:3a:11:e0:63:8c:cc:46:93:
         33:27:a8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org