Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
File:                     fea95c9f-c5c1-4a36-a73f-df548116ba56.cer (raw, json)
Hash identifier:          Y+d170HoGYI0tOtqJRDlA0UxM+0HeEa8xH+OpchFMiE=
Subject key identifier:   EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483A2EA3E13A9E1473A79CE0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Dec 2024 16:17:45 +0000
Certificate not after:    Sun 21 Mar 2027 15:17:45 +0000
Subordinate resources:    AS: 806
                          AS: 810 -- 811
                          AS: 828
                          AS: 2651 -- 2682
                          AS: 12277
                          AS: 13966
                          AS: 21640
                          AS: 25689
                          IP: 64.87.128.0/17
                          IP: 131.235.0.0/16
                          IP: 132.156.0.0/16
                          IP: 142.42.0.0/16
                          IP: 142.78.0.0/16
                          IP: 142.97.0.0 -- 142.98.255.255
                          IP: 142.135.0.0/16
                          IP: 142.226.0.0/16
                          IP: 158.128.0.0/16
                          IP: 160.106.0.0/16
                          IP: 167.34.0.0 -- 167.55.255.255
                          IP: 192.67.45.0/24
                          IP: 192.75.17.0/24
                          IP: 192.75.99.0/24
                          IP: 192.139.6.0 -- 192.139.8.255
                          IP: 192.139.194.0/23
                          IP: 192.139.201.0 -- 192.139.204.255
                          IP: 192.139.209.0 -- 192.139.212.255
                          IP: 192.197.67.0 -- 192.197.70.255
                          IP: 192.197.76.0/24
                          IP: 192.197.83.0 -- 192.197.86.255
                          IP: 192.197.114.0/23
                          IP: 198.103.0.0/16
                          IP: 199.212.16.0 -- 199.212.21.255
                          IP: 199.212.47.0/24
                          IP: 205.189.8.0/22
                          IP: 205.192.0.0/14
                          IP: 205.211.132.0/22
                          IP: 206.130.255.0/24
                          IP: 2001:504:25::/48
                          IP: 2001:1920::/32
                          IP: 2604:8400::/32
                          IP: 2605:7400::/32
                          IP: 2620:fd::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:2e:a3:e1:3a:9e:14:73:a7:9c:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 16 16:17:45 2024 GMT
            Not After : Mar 21 15:17:45 2027 GMT
        Subject: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:c7:83:38:94:95:e3:50:aa:3b:1e:40:ad:
                    78:8b:11:9a:31:c9:c4:52:74:71:0a:d2:bb:2d:a7:
                    b3:f8:a1:13:08:3f:35:79:b9:6b:1c:4e:ba:5c:cd:
                    2f:3d:4a:55:8f:73:0e:28:41:41:13:6c:c6:58:ba:
                    ba:c8:48:37:a6:e0:8e:23:d8:d9:df:5c:f5:0e:b2:
                    1c:53:f0:21:d3:6e:58:5e:5e:c0:b5:c2:b8:ed:fc:
                    d0:e3:19:5d:78:70:41:71:6b:55:76:81:03:10:be:
                    0b:05:3e:17:e6:b2:0b:f9:48:c4:8e:08:30:ba:47:
                    d3:b5:f4:f7:5c:f2:2d:44:bd:64:b7:77:80:cb:7a:
                    bb:40:48:13:28:5f:27:ea:0c:3c:19:9b:7e:8e:aa:
                    a0:6f:ae:db:11:30:6d:44:78:41:a3:eb:83:34:96:
                    24:06:ed:bc:cb:91:cd:40:6b:99:d7:6b:a2:b4:8f:
                    44:93:0e:f7:6d:98:20:ae:90:fd:28:10:4a:d0:9f:
                    cd:af:68:84:1d:aa:75:68:a1:fa:47:cc:f5:51:5b:
                    24:f4:b4:f6:f6:3b:03:c8:25:d5:bc:b0:d8:7d:8f:
                    1f:3e:e5:d5:45:28:71:c6:d3:fe:c7:32:a9:85:4a:
                    54:87:a1:c7:39:1d:f4:c7:e0:25:03:91:b0:05:76:
                    a3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.87.128.0/17
                  131.235.0.0/16
                  132.156.0.0/16
                  142.42.0.0/16
                  142.78.0.0/16
                  142.97.0.0-142.98.255.255
                  142.135.0.0/16
                  142.226.0.0/16
                  158.128.0.0/16
                  160.106.0.0/16
                  167.34.0.0-167.55.255.255
                  192.67.45.0/24
                  192.75.17.0/24
                  192.75.99.0/24
                  192.139.6.0-192.139.8.255
                  192.139.194.0/23
                  192.139.201.0-192.139.204.255
                  192.139.209.0-192.139.212.255
                  192.197.67.0-192.197.70.255
                  192.197.76.0/24
                  192.197.83.0-192.197.86.255
                  192.197.114.0/23
                  198.103.0.0/16
                  199.212.16.0-199.212.21.255
                  199.212.47.0/24
                  205.189.8.0/22
                  205.192.0.0/14
                  205.211.132.0/22
                  206.130.255.0/24
                IPv6:
                  2001:504:25::/48
                  2001:1920::/32
                  2604:8400::/32
                  2605:7400::/32
                  2620:fd::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  806
                  810-811
                  828
                  2651-2682
                  12277
                  13966
                  21640
                  25689

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:01:3a:5d:8e:7f:ce:65:a3:3b:28:83:0c:c7:ff:e8:90:
         6e:76:75:89:7c:62:d1:0c:e0:d6:27:15:54:a4:cc:02:2b:18:
         a5:64:73:9a:bd:e0:74:69:08:41:ba:03:12:84:47:ef:ff:b8:
         ca:e6:5c:3f:f1:44:2a:93:b3:9d:a2:6f:12:b3:07:b7:4f:d4:
         03:5c:8d:55:0c:27:ee:c7:9b:09:a8:ba:91:9a:ab:03:91:f9:
         cf:43:01:be:7b:e6:64:cb:0c:df:cb:22:b1:10:11:51:08:cc:
         1f:c8:f0:89:2d:d3:17:5c:7a:ca:a7:87:99:ea:43:74:90:86:
         47:2c:60:68:4d:cf:e9:e6:42:75:4d:70:95:2f:48:ab:44:c1:
         a1:1a:90:40:b9:d3:41:43:91:e4:eb:71:f2:eb:37:22:14:32:
         35:93:f1:cd:3c:de:6a:14:8a:47:46:6f:06:5e:e6:74:c9:21:
         68:82:a6:0f:ff:da:bc:d2:c9:53:3c:cb:45:d8:0d:34:21:b2:
         27:5d:6e:08:b4:1a:ba:67:a5:4a:af:df:c0:14:3d:19:eb:2d:
         e5:a9:7f:dc:21:31:f9:ec:18:62:3f:05:03:0c:6e:6c:e2:37:
         f4:0e:98:01:e7:ca:fe:d4:9e:4c:d8:52:8e:4c:02:78:78:a3:
         79:de:b6:df
-----BEGIN CERTIFICATE-----
MIIIQTCCBymgAwIBAgIUAQ0Mn0MoWEg6LqPhOp4Uc6ec4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI0MTIxNjE2MTc0NVoXDTI3MDMyMTE1MTc0NVowLzEtMCsGA1UEAxMk
ZmVhOTVjOWYtYzVjMS00YTM2LWE3M2YtZGY1NDgxMTZiYTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7HgziUleNQqjseQK14ixGaMcnEUnRxCtK7
Laez+KETCD81eblrHE66XM0vPUpVj3MOKEFBE2zGWLq6yEg3puCOI9jZ31z1DrIc
U/Ah025YXl7AtcK47fzQ4xldeHBBcWtVdoEDEL4LBT4X5rIL+UjEjggwukfTtfT3
XPItRL1kt3eAy3q7QEgTKF8n6gw8GZt+jqqgb67bETBtRHhBo+uDNJYkBu28y5HN
QGuZ12uitI9Ekw73bZggrpD9KBBK0J/Nr2iEHap1aKH6R8z1UVsk9LT29jsDyCXV
vLDYfY8fPuXVRShxxtP+xzKphUpUh6HHOR30x+AlA5GwBXajdwIDAQABo4IFUzCC
BU8wHQYDVR0OBBYEFOyCVslR0ojoff35h5SXXHV6y2YnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m
ZWE5NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0ODExNmJhNTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZlYTk1YzlmLWM1YzEtNGEzNi1h
NzNmLWRmNTQ4MTE2YmE1Ni9mZWE5NWM5Zi1jNWMxLTRhMzYtYTczZi1kZjU0ODEx
NmJhNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwggEuBggrBgEF
BQcBBwEB/wSCAR0wggEZMIHnBAIAATCB4AMEB0BXgAMDAIPrAwMAhJwDAwCOKgMD
AI5OMAoDAwCOYQMDAI5iAwMAjocDAwCO4gMDAJ6AAwMAoGowCgMDAaciAwMDpzAD
BADAQy0DBADASxEDBADAS2MwDAMEAcCLBgMEAMCLCAMEAcCLwjAMAwQAwIvJAwQA
wIvMMAwDBADAi9EDBADAi9QwDAMEAMDFQwMEAMDFRgMEAMDFTDAMAwQAwMVTAwQA
wMVWAwQBwMVyAwMAxmcwDAMEBMfUEAMEAcfUFAMEAMfULwMEAs29CAMDAs3AAwQC
zdOEAwQAzoL/MC0EAgACMCcDBwAgAQUEACUDBQAgARkgAwUAJgSEAAMFACYFdAAD
BwAmIAD9AAAwQQYIKwYBBQUHAQgBAf8EMjAwoC4wLAICAyYwCAICAyoCAgMrAgID
PDAIAgIKWwICCnoCAi/1AgI2jgICVIgCAmRZMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADOeATpdjn/OZaM7
KIMMx//okG52dYl8YtEM4NYnFVSkzAIrGKVkc5q94HRpCEG6AxKER+//uMrmXD/x
RCqTs52ibxKzB7dP1ANcjVUMJ+7HmwmoupGaqwOR+c9DAb575mTLDN/LIrEQEVEI
zB/I8Ikt0xdcesqnh5nqQ3SQhkcsYGhNz+nmQnVNcJUvSKtEwaEakEC500FDkeTr
cfLrNyIUMjWT8c083moUikdGbwZe5nTJIWiCpg//2rzSyVM8y0XYDTQhsiddbgi0
GrpnpUqv38AUPRnrLeWpf9whMfnsGGI/BQMMbmziN/QOmAHnyv7UnkzYUo5MAnh4
o3nett8=
-----END CERTIFICATE-----
Generated at Fri Dec 27 07:47:08 2024 by rpki-client on console-ams.rpki-client.org