Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer
File:                     df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer (raw, json)
Hash identifier:          KYOqOpp49iboiLWzMu5F3DBixUlUSSQsrbr71A5q5aA=
Subject key identifier:   FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858427656ABC06E84E57300796580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Jul 2023 00:45:16 +0000
Certificate not after:    Thu 09 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 25649
                          IP: 74.112.192.0/21
                          IP: 104.153.204.0/22
                          IP: 129.220.224.0/19
                          IP: 142.147.84.0/22
                          IP: 143.55.84.0/22
                          IP: 143.55.152.0/23
                          IP: 161.38.42.0/23
                          IP: 162.33.240.0/20
                          IP: 172.110.240.0/22
                          IP: 192.34.208.0/22
                          IP: 198.207.148.0/22
                          IP: 199.187.232.0/22
                          IP: 208.74.8.0/22
                          IP: 208.86.44.0/22
                          IP: 2607:fa38::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:76:56:ab:c0:6e:84:e5:73:00:79:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  7 00:45:16 2023 GMT
            Not After : Oct  9 00:45:16 2025 GMT
        Subject: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:cc:41:45:a6:1b:b7:27:8d:1e:67:b5:92:
                    46:1e:82:be:62:43:3c:8e:5c:85:cd:28:21:22:de:
                    de:82:a8:e0:e0:de:0c:3f:f9:75:11:de:e5:08:f9:
                    7b:2f:2f:52:53:5b:61:1e:e4:1d:5c:10:8a:3d:53:
                    a5:96:43:03:6f:bd:63:97:f7:1f:5e:87:af:66:4b:
                    77:76:85:98:3b:80:c0:a7:88:23:4b:4c:da:4d:1f:
                    e8:c0:ec:f8:d3:03:a1:bb:cb:70:bd:0a:cd:94:a0:
                    7c:34:31:d7:12:89:ce:c4:fa:2d:36:da:37:40:5e:
                    e3:ee:d5:12:41:70:51:eb:b4:60:5d:c0:a2:ac:ff:
                    e5:74:f0:1f:fb:24:80:7e:13:59:8f:a1:c3:98:b6:
                    74:ac:37:2b:bc:5d:56:b1:9a:31:ff:f8:92:31:87:
                    ac:67:c1:08:3b:e7:67:c1:59:ab:f8:68:7d:4d:db:
                    d5:91:80:60:83:90:f7:98:09:ae:e1:d5:11:91:d8:
                    4f:90:a5:42:90:cc:aa:76:ff:2f:4b:4f:35:66:6f:
                    5e:5e:fe:06:08:0c:3b:e5:fd:8c:06:d8:b4:07:31:
                    4d:0a:7b:e2:11:67:64:02:8b:29:79:ad:06:6e:8e:
                    da:c1:62:0b:87:0c:b3:cf:ab:3e:07:0a:a2:34:0f:
                    34:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.192.0/21
                  104.153.204.0/22
                  129.220.224.0/19
                  142.147.84.0/22
                  143.55.84.0/22
                  143.55.152.0/23
                  161.38.42.0/23
                  162.33.240.0/20
                  172.110.240.0/22
                  192.34.208.0/22
                  198.207.148.0/22
                  199.187.232.0/22
                  208.74.8.0/22
                  208.86.44.0/22
                IPv6:
                  2607:fa38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25649

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:a9:fb:86:2c:4a:35:34:4d:8e:21:bf:71:59:3b:30:68:
         fd:b4:68:0b:3c:88:af:29:6c:41:a8:03:1f:c6:78:ce:2c:43:
         d4:8a:f6:22:83:fb:65:13:61:6e:24:ff:79:43:39:53:dd:59:
         cb:10:93:88:76:2e:34:2e:f1:4b:5b:55:f3:85:f9:44:81:2a:
         b4:53:3d:79:7e:29:f5:dc:bd:c9:4a:e9:ac:de:41:ff:42:29:
         ba:8c:53:03:fb:60:c5:25:da:96:b4:ef:5a:86:3e:eb:72:e7:
         1d:b0:22:e1:3e:1f:c4:a9:d6:f3:07:df:03:08:b2:e3:36:43:
         ca:8c:3e:0f:e5:48:f4:ce:b7:3c:35:68:19:5b:11:bd:3e:53:
         5d:ef:c9:fb:2b:1a:0f:1f:88:fc:5e:26:00:7f:c9:32:53:bc:
         30:d4:3b:1d:9b:7c:75:79:8e:63:41:01:20:60:5b:7f:ee:77:
         3b:c4:42:28:7d:1d:6c:d7:89:23:98:85:88:dd:08:0f:9a:01:
         d3:d8:2b:2f:09:26:a3:cc:af:35:7d:83:71:43:e1:f0:15:70:
         4c:7b:80:2b:73:9c:d1:8e:80:dc:33:af:e7:2f:36:6b:25:25:
         21:6b:40:fb:cc:89:98:93:7c:09:79:ae:db:1f:87:78:da:48:
         7f:12:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:54:56 2024 by rpki-client on console-fra.rpki-client.org