Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
File:                     05279918-f5b1-43f7-9748-95aa0c6469f3.cer (raw, json)
Hash identifier:          XSw1kGmqORmqFXhO44t+YH5tj5hWSQkMwd63iIvmChg=
Subject key identifier:   72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285848AAF3CE945C8385FE3D561540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Jan 2025 01:45:32 +0000
Certificate not after:    Sat 01 May 2027 00:45:32 +0000
Subordinate resources:    AS: 812
                          AS: 14008
                          AS: 14366
                          AS: 29988
                          AS: 36676
                          AS: 40383
                          IP: 24.38.144.0/20
                          IP: 24.102.0.0/18
                          IP: 24.114.0.0/17
                          IP: 24.137.48.0/20
                          IP: 24.213.64.0/19
                          IP: 24.215.0.0/18
                          IP: 24.235.96.0/19
                          IP: 24.239.0.0/20
                          IP: 24.244.112.0/20
                          IP: 65.97.192.0/18
                          IP: 67.224.80.0/20
                          IP: 71.19.0.0/17
                          IP: 72.12.128.0/18
                          IP: 72.136.0.0/13
                          IP: 97.108.0.0/14
                          IP: 99.208.0.0 -- 99.255.255.255
                          IP: 108.160.240.0/20
                          IP: 108.174.16.0/20
                          IP: 142.0.144.0/20
                          IP: 162.252.252.0/22
                          IP: 173.32.0.0/14
                          IP: 173.209.128.0/19
                          IP: 173.239.128.0/18
                          IP: 174.112.0.0/13
                          IP: 192.65.232.0/21
                          IP: 192.75.13.0/24
                          IP: 199.83.136.0/22
                          IP: 199.189.236.0/22
                          IP: 208.74.208.0/21
                          IP: 208.97.64.0/18
                          IP: 208.124.128.0/17
                          IP: 216.14.128.0/20
                          IP: 216.172.32.0/20
                          IP: 2001:506:20::/48
                          IP: 2604:4c00::/32
                          IP: 2604:5280::/32
                          IP: 2605:1300::/32
                          IP: 2607:f798::/32
                          IP: 2607:f890::/32
                          IP: 2607:fea8::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:f3:ce:94:5c:83:85:fe:3d:56:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 26 01:45:32 2025 GMT
            Not After : May  1 00:45:32 2027 GMT
        Subject: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:47:c0:7b:3a:c9:26:de:68:ce:62:37:0f:
                    45:e7:7a:01:ce:79:01:2f:b2:90:4b:20:17:a0:70:
                    0a:8e:7e:6b:dc:84:03:11:09:82:f7:5d:27:d2:fb:
                    f8:a3:6a:06:0b:3c:bb:1d:4c:dc:7d:05:38:a6:4b:
                    5a:a2:8b:8a:ed:86:a4:88:02:50:ce:c5:3a:f1:a2:
                    68:b6:86:83:67:89:93:42:3c:36:6a:87:07:67:a2:
                    cb:13:1f:23:73:72:d6:e3:8e:d8:f6:13:43:0d:51:
                    b3:e7:4d:fb:0a:1f:24:dc:8e:b9:8d:66:f7:98:9e:
                    8e:74:96:59:6d:bb:53:d2:5d:f5:28:9b:5b:43:0c:
                    68:45:5f:fb:82:62:59:88:79:bf:74:59:b2:5e:d5:
                    fa:3c:91:7a:62:dd:e5:ce:c8:19:ce:a2:d0:f1:48:
                    68:fd:f4:2e:9b:40:29:14:57:d4:f1:54:56:41:d6:
                    15:7c:3d:7d:62:42:ca:c1:14:0f:7b:99:0d:2a:4e:
                    ef:3f:03:02:3f:44:d1:3b:0c:6e:12:28:0d:69:47:
                    5c:25:ba:22:60:45:46:ca:64:4a:76:0f:4a:86:0b:
                    db:cd:ce:3f:2a:40:22:3a:29:9b:78:23:70:32:90:
                    15:e7:1a:0b:d9:a5:2c:ca:3f:4e:a7:d4:27:cc:12:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.144.0/20
                  24.102.0.0/18
                  24.114.0.0/17
                  24.137.48.0/20
                  24.213.64.0/19
                  24.215.0.0/18
                  24.235.96.0/19
                  24.239.0.0/20
                  24.244.112.0/20
                  65.97.192.0/18
                  67.224.80.0/20
                  71.19.0.0/17
                  72.12.128.0/18
                  72.136.0.0/13
                  97.108.0.0/14
                  99.208.0.0-99.255.255.255
                  108.160.240.0/20
                  108.174.16.0/20
                  142.0.144.0/20
                  162.252.252.0/22
                  173.32.0.0/14
                  173.209.128.0/19
                  173.239.128.0/18
                  174.112.0.0/13
                  192.65.232.0/21
                  192.75.13.0/24
                  199.83.136.0/22
                  199.189.236.0/22
                  208.74.208.0/21
                  208.97.64.0/18
                  208.124.128.0/17
                  216.14.128.0/20
                  216.172.32.0/20
                IPv6:
                  2001:506:20::/48
                  2604:4c00::/32
                  2604:5280::/32
                  2605:1300::/32
                  2607:f798::/32
                  2607:f890::/32
                  2607:fea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  812
                  14008
                  14366
                  29988
                  36676
                  40383

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:8a:1e:f0:70:a3:80:53:69:91:dc:05:dc:8a:8f:4f:b3:
         82:eb:32:aa:41:6f:ea:a3:53:27:62:3d:75:24:68:cb:02:ea:
         d6:a6:c6:27:db:1c:6a:94:9b:8f:f1:15:c4:55:96:2b:88:bb:
         94:20:8e:b4:1e:50:40:06:79:cb:68:72:c0:e0:fc:a2:81:91:
         67:1c:b4:c9:a0:e2:08:bd:4c:39:dd:0d:32:59:04:8d:6b:d2:
         46:f3:b2:84:8e:bd:f0:14:c6:da:6c:21:3d:06:2b:f8:c7:40:
         e4:d8:87:ee:55:dc:65:5b:0b:4f:48:76:56:ab:22:73:93:8a:
         50:e0:bd:25:62:a2:ad:9a:bd:87:ad:99:a1:a4:d9:a0:75:2e:
         03:d7:fa:bf:9f:d6:1d:d8:8d:75:16:4f:0c:09:98:68:63:27:
         35:57:7f:82:5a:a2:d8:91:c8:02:0d:f7:61:ce:07:b9:13:c8:
         cf:19:01:e0:c3:89:fa:46:ea:ac:50:be:4e:79:b9:27:15:7d:
         c9:65:7b:c3:63:ac:b0:39:66:29:ae:cf:15:d1:ed:91:c5:33:
         97:6f:04:ec:e2:d6:61:96:0e:78:11:90:f8:93:ab:9a:13:47:
         63:c2:2b:56:18:75:88:27:2c:e2:34:25:1d:a3:b3:01:84:17:
         49:00:36:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 19:23:47 2025 by rpki-client