Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
File:                     fc9e4738-7902-435b-802c-f37dc4b25f95.cer (raw, json)
Hash identifier:          704s1nCp7sjQWaF6P+PmG0q6VJiuGb8EFPSRJ98OcuA=
Subject key identifier:   34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285843F739BF3979FDB0D4C4191C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 21:33:13 +0000
Certificate not after:    Thu 26 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 260
                          AS: 4436
                          AS: 5669
                          AS: 8190
                          AS: 17111
                          AS: 18566
                          AS: 19018
                          AS: 19080
                          AS: 22199
                          AS: 23504
                          AS: 30371
                          AS: 40517
                          IP: 63.141.192.0/19
                          IP: 64.81.0.0/16
                          IP: 64.105.0.0/16
                          IP: 64.191.2.0/24
                          IP: 65.175.0.0/18
                          IP: 66.7.128.0/18
                          IP: 66.17.64.0/20
                          IP: 66.17.128.0/17
                          IP: 66.54.128.0/17
                          IP: 66.92.0.0/15
                          IP: 66.134.0.0/16
                          IP: 66.166.0.0/15
                          IP: 66.171.224.0/20
                          IP: 66.227.0.0/17
                          IP: 66.253.0.0/17
                          IP: 67.100.0.0/14
                          IP: 67.200.0.0/17
                          IP: 67.220.128.0/19
                          IP: 68.164.0.0/14
                          IP: 69.3.0.0/16
                          IP: 69.12.0.0/24
                          IP: 69.12.10.0/24
                          IP: 69.12.24.0/24
                          IP: 69.12.37.0/24
                          IP: 69.12.39.0 -- 69.12.40.255
                          IP: 69.12.54.0/24
                          IP: 69.12.105.0/24
                          IP: 69.17.0.0/17
                          IP: 69.22.128.0/18
                          IP: 69.31.0.0 -- 69.31.143.255
                          IP: 69.167.64.0/18
                          IP: 72.1.128.0/18
                          IP: 72.244.0.0/15
                          IP: 72.249.192.0/20
                          IP: 74.0.0.0 -- 74.3.127.255
                          IP: 74.82.96.0/19
                          IP: 74.199.128.0/17
                          IP: 74.211.128.0/17
                          IP: 76.74.0.0/17
                          IP: 98.124.128.0/18
                          IP: 104.153.224.0/22
                          IP: 104.254.120.0/22
                          IP: 162.210.152.0/22
                          IP: 162.221.208.0/22
                          IP: 162.244.156.0/22
                          IP: 192.83.254.0/23
                          IP: 198.47.96.0/19
                          IP: 198.144.96.0/19
                          IP: 204.93.32.0/19
                          IP: 207.162.192.0/20
                          IP: 208.81.84.0/22
                          IP: 208.84.48.0/21
                          IP: 208.97.192.0/18
                          IP: 208.116.128.0/17
                          IP: 209.120.128.0/17
                          IP: 209.213.192.0/19
                          IP: 216.27.128.0/18
                          IP: 216.231.32.0/19
                          IP: 216.254.0.0/17
                          IP: 2001:590::/32
                          IP: 2604:3640::/32
                          IP: 2605:4380::/32
                          IP: 2605:d480::/32
                          IP: 2607:7f00::/32
                          IP: 2607:f468::/32
                          IP: 2607:f588::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f7:39:bf:39:79:fd:b0:d4:c4:19:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 21 21:33:13 2023 GMT
            Not After : Jun 26 19:06:39 2025 GMT
        Subject: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c7:b1:c2:3e:d0:b5:fc:45:c4:fa:e5:a4:9f:
                    7e:a9:81:4f:aa:50:4c:8b:a1:49:36:2e:dd:1e:ad:
                    0d:76:29:21:a8:00:48:3d:e3:9c:db:f0:5c:04:aa:
                    87:03:1a:d3:0c:84:dd:d4:b8:a6:20:97:30:d7:6f:
                    2a:7a:5f:5d:29:1a:70:ce:53:2d:e1:8b:32:b5:a8:
                    5e:38:9a:61:35:ca:a2:c2:8e:6d:d1:a6:b2:72:81:
                    1f:c2:b4:54:06:51:37:c5:48:cb:f0:03:b4:10:f3:
                    aa:d8:92:a4:bd:b9:f0:08:a9:21:33:cf:41:00:de:
                    27:cb:a7:3c:33:76:2e:08:29:cf:d0:aa:9f:04:15:
                    8e:b3:e8:23:ba:84:5f:d8:77:a7:35:f0:51:6b:2f:
                    6f:62:43:7d:bb:81:fa:7f:ea:a6:8e:00:df:23:c3:
                    d3:6d:c1:eb:c1:33:ab:48:c8:0a:4a:26:6c:87:1f:
                    c9:cb:4a:29:11:fb:88:59:ec:f4:5c:4a:3c:a6:13:
                    5b:b7:d2:32:32:18:73:9b:9f:11:74:67:b0:95:f3:
                    7d:6d:f1:bb:fc:c1:c2:5a:cf:97:03:6c:7e:c9:c1:
                    f3:e0:bf:db:16:41:d7:2d:3d:16:4b:b7:bf:16:67:
                    b8:a9:3c:ea:fc:74:4b:56:24:f2:4b:ff:f5:b1:d9:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.192.0/19
                  64.81.0.0/16
                  64.105.0.0/16
                  64.191.2.0/24
                  65.175.0.0/18
                  66.7.128.0/18
                  66.17.64.0/20
                  66.17.128.0/17
                  66.54.128.0/17
                  66.92.0.0/15
                  66.134.0.0/16
                  66.166.0.0/15
                  66.171.224.0/20
                  66.227.0.0/17
                  66.253.0.0/17
                  67.100.0.0/14
                  67.200.0.0/17
                  67.220.128.0/19
                  68.164.0.0/14
                  69.3.0.0/16
                  69.12.0.0/24
                  69.12.10.0/24
                  69.12.24.0/24
                  69.12.37.0/24
                  69.12.39.0-69.12.40.255
                  69.12.54.0/24
                  69.12.105.0/24
                  69.17.0.0/17
                  69.22.128.0/18
                  69.31.0.0-69.31.143.255
                  69.167.64.0/18
                  72.1.128.0/18
                  72.244.0.0/15
                  72.249.192.0/20
                  74.0.0.0-74.3.127.255
                  74.82.96.0/19
                  74.199.128.0/17
                  74.211.128.0/17
                  76.74.0.0/17
                  98.124.128.0/18
                  104.153.224.0/22
                  104.254.120.0/22
                  162.210.152.0/22
                  162.221.208.0/22
                  162.244.156.0/22
                  192.83.254.0/23
                  198.47.96.0/19
                  198.144.96.0/19
                  204.93.32.0/19
                  207.162.192.0/20
                  208.81.84.0/22
                  208.84.48.0/21
                  208.97.192.0/18
                  208.116.128.0/17
                  209.120.128.0/17
                  209.213.192.0/19
                  216.27.128.0/18
                  216.231.32.0/19
                  216.254.0.0/17
                IPv6:
                  2001:590::/32
                  2604:3640::/32
                  2605:4380::/32
                  2605:d480::/32
                  2607:7f00::/32
                  2607:f468::/32
                  2607:f588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  260
                  4436
                  5669
                  8190
                  17111
                  18566
                  19018
                  19080
                  22199
                  23504
                  30371
                  40517

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:1a:b4:38:b7:d9:c6:77:96:16:a5:fc:f9:84:cf:da:b7:
         44:43:b0:34:1e:64:8c:60:fd:9d:cd:0b:1f:98:2f:58:ae:9a:
         94:62:78:84:c0:d6:51:9e:c2:62:c2:c6:52:72:53:04:3b:94:
         28:a8:b9:d5:aa:3d:36:ca:37:5f:8a:ea:ce:26:23:65:27:9d:
         89:06:a7:ef:b3:18:25:14:57:67:6b:91:3f:35:69:b1:71:06:
         10:10:f3:b9:cf:f7:f0:fd:ec:2f:8f:15:26:31:2d:21:e7:44:
         0b:88:9d:d7:be:5c:27:5f:df:b8:15:67:18:17:3e:34:27:fc:
         6d:9a:74:2b:6e:6e:e4:03:b4:30:db:90:36:68:52:ea:0f:b6:
         f3:d2:a4:37:79:c4:1d:8a:60:77:bb:45:0f:20:54:b7:af:76:
         37:cc:1d:97:ac:d6:b2:82:84:64:20:29:46:3a:84:25:ea:f7:
         c4:3c:2c:ae:53:46:9b:29:01:c1:f5:0e:ef:9d:ae:82:ad:59:
         0f:70:a3:b0:b5:87:13:49:68:76:4f:30:58:e7:0b:cc:6d:ce:
         5b:ea:3e:3e:b6:b0:fb:1d:1f:ef:dc:3b:17:b3:81:40:0d:e4:
         e6:6c:8a:4c:bd:ae:77:f0:1d:53:34:a5:62:29:09:36:70:e6:
         4c:08:85:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:23 2024 by rpki-client on console-fra.rpki-client.org