Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759.cer
File:                     de0cc6bd-e920-421b-822f-9be354b0d759.cer (download)
Hash identifier:          YKn/0j/LmNP85OyxkFEwadcwAjBePs6u40B44rR9ZSI=
Subject key identifier:   D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583ACA7C8EA7DBD35B4CE822BA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Sat 02 Aug 2031 13:54:01 +0000
Subordinate resources:
    1: AS: 399888
    2: IP: 45.45.224.0/22
    3: IP: 2602:fc52::/36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:ca:7c:8e:a7:db:d3:5b:4c:e8:22:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  2 13:54:01 2021 GMT
            Not After : Aug  2 13:54:01 2031 GMT
        Subject: CN=de0cc6bd-e920-421b-822f-9be354b0d759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:e7:43:15:57:d2:37:45:77:66:95:99:31:
                    dc:f8:21:64:06:df:51:b5:f2:c1:a9:bf:f3:bb:d1:
                    fd:5a:7b:9f:45:05:9e:d2:69:b5:6b:ed:1b:94:59:
                    26:f1:5d:13:f0:21:64:db:09:67:fd:23:44:09:43:
                    ea:1c:a3:f4:db:7c:ad:22:a4:45:39:65:ce:ef:e1:
                    26:05:b2:7b:86:42:fd:7b:01:a6:29:64:b0:70:96:
                    e1:1f:a4:71:2d:64:33:62:fc:a9:85:2a:cf:da:1b:
                    bd:25:ee:cf:67:ca:9f:cc:96:86:0c:c8:a7:82:13:
                    58:6a:cd:7c:8f:ed:93:16:8e:ec:cf:d6:96:58:df:
                    8f:45:21:c3:34:4d:df:85:47:a2:0c:53:1c:cf:c9:
                    83:32:3f:0b:03:4a:53:02:fb:1d:02:93:70:77:f4:
                    f0:b9:41:44:48:2b:f5:d8:07:f4:c3:b3:b3:23:77:
                    6d:00:22:f4:26:6f:fb:ec:05:0b:bc:0a:9f:9d:b5:
                    14:84:ee:06:b3:d7:dc:c3:f8:1e:7a:71:b2:df:cb:
                    f3:5a:16:0f:cb:9c:e4:31:ee:69:f6:25:82:77:78:
                    e6:ce:07:5f:9b:a2:15:ec:39:21:54:cc:67:55:ab:
                    ae:f2:c3:37:02:02:58:ac:a1:40:ab:c3:68:5f:38:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D0:DF:05:FA:E9:DB:8A:37:52:73:6A:48:66:74:53:C6:68:10:70:58
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de0cc6bd-e920-421b-822f-9be354b0d759/de0cc6bd-e920-421b-822f-9be354b0d759.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier: 
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.224.0/22
                IPv6:
                  2602:fc52::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399888

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5d:d7:e7:9a:27:36:ff:5e:7b:00:d9:ec:15:e8:b1:47:2a:
         74:c5:42:d8:d5:03:78:e6:ba:e0:b4:16:a0:39:b0:51:18:82:
         55:91:3c:9d:5d:12:2c:08:eb:94:88:f7:14:dc:f8:a7:a3:01:
         b8:48:e5:38:c5:e3:7a:67:ae:ff:3b:a4:bb:20:28:d8:9e:31:
         09:5a:b7:9b:26:5f:8d:6a:ac:fd:af:19:b0:56:11:2a:35:c8:
         90:4b:15:26:fd:84:50:ef:f0:43:4a:85:09:2c:87:b9:e5:d5:
         f4:68:4f:cb:99:70:be:48:3f:63:7f:99:be:0d:e2:ce:5b:17:
         25:f1:05:4c:0e:03:b5:c7:9e:73:b4:7c:d2:3b:1f:3e:12:b8:
         0d:2b:b3:74:72:35:93:45:16:45:ef:7c:54:f0:a2:eb:5e:99:
         62:0a:27:42:e4:d1:1b:f5:b2:b6:6b:83:9f:a8:86:69:7c:88:
         03:7f:4d:f7:cd:2c:08:5c:98:c9:ea:8a:3c:3d:17:ca:dd:0e:
         4a:3e:db:49:54:a1:71:4f:02:5b:96:95:60:c7:4a:ce:2d:83:
         79:75:65:b6:31:32:d2:38:9f:3d:d1:96:7b:f8:16:e3:dc:0e:
         9c:8f:84:44:08:3d:de:83:40:f9:a1:c4:a3:fe:a2:63:32:37:
         77:d2:7e:1d
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWDrKfI6n29NbTOgiugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIxMDgwMjEzNTQwMVoXDTMxMDgwMjEzNTQwMVowLzEtMCsGA1UEAxMk
ZGUwY2M2YmQtZTkyMC00MjFiLTgyMmYtOWJlMzU0YjBkNzU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiXnQxVX0jdFd2aVmTHc+CFkBt9RtfLBqb/z
u9H9WnufRQWe0mm1a+0blFkm8V0T8CFk2wln/SNECUPqHKP023ytIqRFOWXO7+Em
BbJ7hkL9ewGmKWSwcJbhH6RxLWQzYvyphSrP2hu9Je7PZ8qfzJaGDMinghNYas18
j+2TFo7sz9aWWN+PRSHDNE3fhUeiDFMcz8mDMj8LA0pTAvsdApNwd/TwuUFESCv1
2Af0w7OzI3dtACL0Jm/77AULvAqfnbUUhO4Gs9fcw/geenGy38vzWhYPy5zkMe5p
9iWCd3jmzgdfm6IV7DkhVMxnVauu8sM3AgJYrKFAq8NoXzj5IQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFNDfBfrp24o3UnNqSGZ0U8ZoEHBYMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k
ZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRiMGQ3NTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RlMGNjNmJkLWU5MjAtNDIxYi04
MjJmLTliZTM1NGIwZDc1OS9kZTBjYzZiZC1lOTIwLTQyMWItODIyZi05YmUzNTRi
MGQ3NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAItLeAwDgQCAAIwCAMGBCYC/FIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYaEDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMXdfnmic2/157ANnsFeixRyp0
xULY1QN45rrgtBagObBRGIJVkTydXRIsCOuUiPcU3PinowG4SOU4xeN6Z67/O6S7
ICjYnjEJWrebJl+Naqz9rxmwVhEqNciQSxUm/YRQ7/BDSoUJLIe55dX0aE/LmXC+
SD9jf5m+DeLOWxcl8QVMDgO1x55ztHzSOx8+ErgNK7N0cjWTRRZF73xU8KLrXpli
CidC5NEb9bK2a4OfqIZpfIgDf033zSwIXJjJ6oo8PRfK3Q5KPttJVKFxTwJblpVg
x0rOLYN5dWW2MTLSOJ890ZZ7+Bbj3A6cj4RECD3eg0D5ocSj/qJjMjd30n4d
-----END CERTIFICATE-----
Generated at Sat Feb 4 02:18:53 2023 by rpki-client.