Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904.cer
File:                     4cf61af5-37b2-4fa5-a702-19a29bc38904.cer (raw, json)
Hash identifier:          dsK7dLb4PtkWMhXXFy0OOwmZa4r2xebPmK6VQQOOQUo=
Subject key identifier:   C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285847C8D26745873D5AA06BFC5380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 06 Nov 2024 01:45:33 +0000
Certificate not after:    Tue 09 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 6188
                          AS: 11555
                          AS: 19066
                          AS: 21679
                          AS: 22558
                          AS: 32244
                          AS: 36444
                          AS: 40819
                          AS: 53824
                          IP: 50.28.0.0/17
                          IP: 50.56.148.0/22
                          IP: 50.57.240.0/20
                          IP: 64.91.224.0/19
                          IP: 67.20.48.0/20
                          IP: 67.43.0.0/20
                          IP: 67.225.128.0/17
                          IP: 67.227.128.0/17
                          IP: 68.66.211.0/24
                          IP: 69.16.192.0/18
                          IP: 69.160.48.0/20
                          IP: 69.167.128.0/18
                          IP: 72.44.80.0/20
                          IP: 72.52.128.0/17
                          IP: 96.30.0.0/18
                          IP: 98.129.229.0/24
                          IP: 104.207.224.0/19
                          IP: 159.135.0.0/18
                          IP: 162.212.134.0/24
                          IP: 162.252.104.0/22
                          IP: 173.199.128.0/18
                          IP: 173.249.144.0/20
                          IP: 184.106.55.0/24
                          IP: 192.64.52.0/22
                          IP: 192.126.88.0/22
                          IP: 192.138.16.0/21
                          IP: 192.190.220.0/22
                          IP: 192.240.160.0/19
                          IP: 199.48.252.0/22
                          IP: 199.189.224.0/22
                          IP: 199.195.118.0/24
                          IP: 199.201.88.0/22
                          IP: 205.174.24.0/22
                          IP: 206.198.224.0/21
                          IP: 207.32.176.0/20
                          IP: 207.246.240.0/20
                          IP: 208.69.120.0/21
                          IP: 208.75.148.0/22
                          IP: 208.79.232.0/21
                          IP: 208.86.152.0/21
                          IP: 208.86.248.0/21
                          IP: 209.59.128.0/18
                          IP: 209.87.144.0/20
                          IP: 209.124.89.0/24
                          IP: 209.126.16.0/20
                          IP: 209.188.80.0/20
                          IP: 2604:d700::/32
                          IP: 2607:f7c0::/32
                          IP: 2607:fad0::/32
                          IP: 2607:fd60::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d2:67:45:87:3d:5a:a0:6b:fc:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov  6 01:45:33 2024 GMT
            Not After : Feb  9 01:45:33 2027 GMT
        Subject: CN=4cf61af5-37b2-4fa5-a702-19a29bc38904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:7b:27:d0:91:92:c9:dc:c0:3b:4c:45:c4:
                    6a:71:d5:b0:c6:26:d0:b2:b4:93:62:e9:d5:52:02:
                    9e:f0:89:ba:4d:25:a6:fb:a9:60:43:f7:71:aa:57:
                    a8:c8:92:d0:79:ba:8b:a5:31:c4:a5:89:d8:94:0b:
                    aa:04:b5:e2:93:c6:91:d7:38:e6:cc:82:9e:6b:b1:
                    64:c0:ee:9a:f4:83:c9:df:5f:14:81:1c:7b:4a:7a:
                    2c:a9:5a:22:29:7d:a4:57:c8:35:9e:b0:3e:5d:ad:
                    c9:09:c6:2a:7b:0c:bf:ec:2a:be:e0:30:13:11:b2:
                    df:39:7b:0d:ce:24:86:0c:58:1e:bd:bc:06:5c:78:
                    bb:51:10:84:12:fa:56:0d:3c:0f:ad:82:e5:b8:71:
                    9e:7b:d3:9d:b7:4a:67:07:4d:22:e1:ec:4f:96:6a:
                    29:e3:30:9c:b7:77:26:64:0a:0e:5d:e2:3d:e2:1a:
                    be:f7:bd:5e:d2:3d:78:4b:8a:c4:c6:fc:38:0e:37:
                    60:80:1b:45:28:59:d4:a6:b8:c6:eb:1f:a2:8d:c4:
                    b9:9c:52:68:a3:63:50:b3:5f:14:3a:a5:f5:38:08:
                    c1:a1:49:85:d7:2a:e7:12:15:4e:3b:5a:25:a0:c4:
                    f0:21:ca:92:ee:1f:12:f9:b9:3b:ab:30:78:e9:32:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:93:DB:5A:3C:9C:45:CE:29:9C:C9:08:2C:DD:60:34:01:4C:58:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4cf61af5-37b2-4fa5-a702-19a29bc38904/4cf61af5-37b2-4fa5-a702-19a29bc38904.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.28.0.0/17
                  50.56.148.0/22
                  50.57.240.0/20
                  64.91.224.0/19
                  67.20.48.0/20
                  67.43.0.0/20
                  67.225.128.0/17
                  67.227.128.0/17
                  68.66.211.0/24
                  69.16.192.0/18
                  69.160.48.0/20
                  69.167.128.0/18
                  72.44.80.0/20
                  72.52.128.0/17
                  96.30.0.0/18
                  98.129.229.0/24
                  104.207.224.0/19
                  159.135.0.0/18
                  162.212.134.0/24
                  162.252.104.0/22
                  173.199.128.0/18
                  173.249.144.0/20
                  184.106.55.0/24
                  192.64.52.0/22
                  192.126.88.0/22
                  192.138.16.0/21
                  192.190.220.0/22
                  192.240.160.0/19
                  199.48.252.0/22
                  199.189.224.0/22
                  199.195.118.0/24
                  199.201.88.0/22
                  205.174.24.0/22
                  206.198.224.0/21
                  207.32.176.0/20
                  207.246.240.0/20
                  208.69.120.0/21
                  208.75.148.0/22
                  208.79.232.0/21
                  208.86.152.0/21
                  208.86.248.0/21
                  209.59.128.0/18
                  209.87.144.0/20
                  209.124.89.0/24
                  209.126.16.0/20
                  209.188.80.0/20
                IPv6:
                  2604:d700::/32
                  2607:f7c0::/32
                  2607:fad0::/32
                  2607:fd60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6188
                  11555
                  19066
                  21679
                  22558
                  32244
                  36444
                  40819
                  53824

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:dc:f3:df:ad:ed:4c:1b:95:e3:4f:5d:22:50:5f:f0:a0:
         14:17:e4:0c:f7:ae:bf:ac:e4:b7:fe:86:b1:a4:37:67:79:89:
         1f:18:a0:b4:73:63:84:7e:20:30:d0:9c:c9:12:c5:6c:45:91:
         c0:06:b5:a9:4a:48:91:cc:28:44:ea:8a:9a:03:72:65:1b:7f:
         31:2a:33:d9:6e:92:cf:40:cd:82:49:60:7d:ac:8e:bd:66:4d:
         48:8c:8f:dd:e3:f8:97:7f:b5:3b:30:4f:96:04:f9:f2:f0:2c:
         95:e7:6b:f5:64:c8:e4:0b:b7:52:71:46:9c:4b:aa:19:84:35:
         d5:9b:fb:7b:9b:e2:07:26:94:cc:c2:3d:e0:a3:c9:22:6a:6a:
         ad:41:24:6a:46:5b:1e:d0:90:7f:78:eb:43:af:98:2e:ac:ae:
         6a:43:a2:f7:2f:dd:9d:5c:ae:82:96:0e:ea:37:b7:c0:6c:4d:
         1f:ed:f4:94:25:30:b4:4d:16:76:d6:3d:64:49:2a:ff:19:36:
         2d:80:7c:3b:31:41:22:2b:14:d6:15:f3:9b:ac:e0:84:1a:0d:
         7b:2a:17:59:5f:c0:ef:2c:26:55:3b:7b:11:11:2f:b7:c8:99:
         0e:1e:4b:fe:88:9f:2d:5f:b9:8c:36:b8:ed:92:ee:61:f6:30:
         6f:f9:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:39:32 2024 by rpki-client on console-fra.rpki-client.org