Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
File:                     05279918-f5b1-43f7-9748-95aa0c6469f3.cer (raw, json)
Hash identifier:          Aa7Msora/RYijaFfyZgr9PHhoWd11dp3KRguxke1bL8=
Subject key identifier:   72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843A6A33717D96D7497C5C87C20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 26 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 812
                          AS: 14008
                          AS: 14366
                          AS: 29988
                          AS: 36676
                          AS: 40383
                          IP: 24.38.144.0/20
                          IP: 24.102.0.0/18
                          IP: 24.114.0.0/17
                          IP: 24.137.48.0/20
                          IP: 24.213.64.0/19
                          IP: 24.215.0.0/18
                          IP: 24.235.96.0/19
                          IP: 24.239.0.0/20
                          IP: 24.244.112.0/20
                          IP: 65.97.192.0/18
                          IP: 67.224.80.0/20
                          IP: 71.19.0.0/17
                          IP: 72.12.128.0/18
                          IP: 72.136.0.0/13
                          IP: 97.108.0.0/14
                          IP: 99.208.0.0 -- 99.255.255.255
                          IP: 108.160.240.0/20
                          IP: 108.174.16.0/20
                          IP: 142.0.144.0/20
                          IP: 162.252.252.0/22
                          IP: 173.32.0.0/14
                          IP: 173.209.128.0/19
                          IP: 173.239.128.0/18
                          IP: 174.112.0.0/13
                          IP: 192.65.232.0/21
                          IP: 192.75.13.0/24
                          IP: 199.83.136.0/22
                          IP: 199.189.236.0/22
                          IP: 208.74.208.0/21
                          IP: 208.97.64.0/18
                          IP: 208.124.128.0/17
                          IP: 216.14.128.0/20
                          IP: 216.172.32.0/20
                          IP: 2001:506:20::/48
                          IP: 2604:4c00::/32
                          IP: 2604:5280::/32
                          IP: 2605:1300::/32
                          IP: 2607:f798::/32
                          IP: 2607:f890::/32
                          IP: 2607:fea8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a6:a3:37:17:d9:6d:74:97:c5:c8:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 24 00:45:15 2023 GMT
            Not After : Jan 26 01:45:15 2026 GMT
        Subject: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:47:c0:7b:3a:c9:26:de:68:ce:62:37:0f:
                    45:e7:7a:01:ce:79:01:2f:b2:90:4b:20:17:a0:70:
                    0a:8e:7e:6b:dc:84:03:11:09:82:f7:5d:27:d2:fb:
                    f8:a3:6a:06:0b:3c:bb:1d:4c:dc:7d:05:38:a6:4b:
                    5a:a2:8b:8a:ed:86:a4:88:02:50:ce:c5:3a:f1:a2:
                    68:b6:86:83:67:89:93:42:3c:36:6a:87:07:67:a2:
                    cb:13:1f:23:73:72:d6:e3:8e:d8:f6:13:43:0d:51:
                    b3:e7:4d:fb:0a:1f:24:dc:8e:b9:8d:66:f7:98:9e:
                    8e:74:96:59:6d:bb:53:d2:5d:f5:28:9b:5b:43:0c:
                    68:45:5f:fb:82:62:59:88:79:bf:74:59:b2:5e:d5:
                    fa:3c:91:7a:62:dd:e5:ce:c8:19:ce:a2:d0:f1:48:
                    68:fd:f4:2e:9b:40:29:14:57:d4:f1:54:56:41:d6:
                    15:7c:3d:7d:62:42:ca:c1:14:0f:7b:99:0d:2a:4e:
                    ef:3f:03:02:3f:44:d1:3b:0c:6e:12:28:0d:69:47:
                    5c:25:ba:22:60:45:46:ca:64:4a:76:0f:4a:86:0b:
                    db:cd:ce:3f:2a:40:22:3a:29:9b:78:23:70:32:90:
                    15:e7:1a:0b:d9:a5:2c:ca:3f:4e:a7:d4:27:cc:12:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.144.0/20
                  24.102.0.0/18
                  24.114.0.0/17
                  24.137.48.0/20
                  24.213.64.0/19
                  24.215.0.0/18
                  24.235.96.0/19
                  24.239.0.0/20
                  24.244.112.0/20
                  65.97.192.0/18
                  67.224.80.0/20
                  71.19.0.0/17
                  72.12.128.0/18
                  72.136.0.0/13
                  97.108.0.0/14
                  99.208.0.0-99.255.255.255
                  108.160.240.0/20
                  108.174.16.0/20
                  142.0.144.0/20
                  162.252.252.0/22
                  173.32.0.0/14
                  173.209.128.0/19
                  173.239.128.0/18
                  174.112.0.0/13
                  192.65.232.0/21
                  192.75.13.0/24
                  199.83.136.0/22
                  199.189.236.0/22
                  208.74.208.0/21
                  208.97.64.0/18
                  208.124.128.0/17
                  216.14.128.0/20
                  216.172.32.0/20
                IPv6:
                  2001:506:20::/48
                  2604:4c00::/32
                  2604:5280::/32
                  2605:1300::/32
                  2607:f798::/32
                  2607:f890::/32
                  2607:fea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  812
                  14008
                  14366
                  29988
                  36676
                  40383

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c8:19:54:5b:49:45:d5:45:e7:6d:23:0b:be:5b:2b:2b:bf:
         1e:b4:73:a6:8e:2b:2c:74:9d:c4:a6:f3:86:d4:03:1e:b8:a8:
         5c:b3:66:9e:08:e6:1e:00:52:be:c9:5c:77:aa:74:e2:55:ac:
         04:e1:11:e6:0e:1a:c0:74:a1:44:02:d4:48:88:f6:7d:31:79:
         b2:58:04:d0:be:b0:7c:60:1d:1a:92:1d:4a:e6:14:33:ff:5b:
         8b:9f:c0:cc:ef:51:b0:7a:9f:c2:f9:2a:94:1a:3c:9d:95:83:
         2b:4d:70:da:8a:1d:31:b9:9a:96:43:2e:2f:93:0b:53:d5:54:
         31:01:2c:76:c2:8e:06:e9:82:92:90:54:0b:2c:b8:c8:47:f7:
         74:94:45:58:4e:d3:c7:98:37:f3:91:01:c4:5d:12:7f:0e:ab:
         e3:c7:67:22:23:ac:e0:0f:cd:69:cf:a0:26:35:2b:c9:50:42:
         fe:f8:59:b7:47:1a:6b:a0:ad:d7:49:b5:d3:ec:a4:b2:45:18:
         3b:50:82:d3:aa:42:b2:a6:00:6f:8c:87:d5:4b:47:59:71:c2:
         04:ca:bd:6b:3e:99:e1:fb:52:23:92:c7:4e:35:e7:d4:4f:84:
         a8:70:68:48:1e:36:ef:da:f3:2c:93:64:29:56:99:c9:98:3f:
         cf:07:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:47:58 2024 by rpki-client on console-ams.rpki-client.org