Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
File:                     0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer (raw, json)
Hash identifier:          xZJs1NtUmPtaaufOsBMp6gjDzTxNUERDMsmNx/uQyf4=
Subject key identifier:   42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285847133E1C6F9344C00AA6F98560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 00:45:27 +0000
Certificate not after:    Sun 06 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 6250
                          AS: 14793
                          IP: 67.58.64.0/19
                          IP: 67.218.160.0/19
                          IP: 74.51.96.0/19
                          IP: 76.164.160.0/19
                          IP: 137.118.0.0/15
                          IP: 173.242.192.0/20
                          IP: 216.228.80.0/20
                          IP: 2001:408::/32
                          IP: 2620:69:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:3e:1c:6f:93:44:c0:0a:a6:f9:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep  2 00:45:27 2024 GMT
            Not After : Dec  6 01:45:27 2026 GMT
        Subject: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:ef:29:84:e9:db:04:b1:c1:fe:db:34:a0:
                    c6:a7:2f:c1:2f:aa:6d:ed:6b:e3:c6:46:5d:15:3f:
                    1b:46:69:45:88:d1:e3:2c:ca:bb:28:a2:8e:f6:43:
                    73:63:72:91:eb:39:68:6f:be:96:84:a5:d6:f1:77:
                    f6:36:5b:17:1d:f2:c6:4d:37:0a:c7:a9:81:dd:30:
                    fe:75:bd:0f:00:3f:57:9f:8b:63:36:e3:b9:59:1b:
                    d7:33:b5:ac:00:56:f2:3e:7e:91:9a:02:94:f1:53:
                    7b:e9:47:89:a0:83:d0:27:f3:91:7f:f4:c1:7a:dd:
                    ea:4c:69:5d:9a:25:f2:88:39:54:67:6b:ac:56:89:
                    97:67:cc:a9:61:cb:ef:52:d4:ca:16:69:38:f3:9e:
                    0c:88:4a:c3:4e:7d:5d:7e:26:84:61:7f:9d:5a:a6:
                    bf:d7:29:5d:3f:9a:25:7b:79:09:85:14:88:54:35:
                    91:18:5e:03:58:51:c2:18:0a:0f:d4:fe:be:f3:b2:
                    57:1d:8d:ac:0f:08:bb:ea:ae:46:00:63:b6:98:3e:
                    2a:23:1b:be:48:2f:17:f4:49:ce:19:de:0e:60:ef:
                    d7:db:8e:81:93:7f:47:cd:f5:3c:54:d6:7d:b6:3a:
                    af:9c:da:5f:ed:0e:dc:1d:58:23:68:fe:78:93:af:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.64.0/19
                  67.218.160.0/19
                  74.51.96.0/19
                  76.164.160.0/19
                  137.118.0.0/15
                  173.242.192.0/20
                  216.228.80.0/20
                IPv6:
                  2001:408::/32
                  2620:69:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6250
                  14793

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:ae:a4:4e:2a:9c:fa:0a:ce:85:04:87:bb:5b:00:62:85:
         0f:86:52:45:d9:be:61:20:a7:6f:96:d5:f8:1c:b0:b9:10:42:
         a6:6a:b3:d0:36:b1:a8:5f:b0:dc:9e:4b:8b:36:e4:25:43:00:
         00:5f:70:b9:4d:75:39:70:b2:3a:c4:fe:86:12:b3:16:25:b7:
         82:67:8a:96:8d:34:bf:33:11:55:25:eb:d7:54:d9:d9:00:15:
         91:f1:31:a2:b6:74:e6:ec:49:29:89:c9:d8:a5:af:ee:08:29:
         bc:d5:10:2a:a5:d0:41:ba:e5:dd:c3:0f:a6:b9:57:b9:5e:b2:
         b7:b7:56:74:5a:29:a1:fe:a8:d3:d5:61:d3:db:bb:49:06:e5:
         8e:b1:43:ab:3e:d0:b2:93:01:bf:10:09:4d:a1:13:01:30:b0:
         ed:85:5f:40:1f:7c:c1:7f:43:53:77:09:39:74:fd:c3:16:51:
         55:4b:7c:83:2e:2d:54:9c:3b:4e:3b:05:05:f6:b5:d7:1e:b1:
         83:44:e3:61:1a:27:c4:fe:3e:aa:7a:7c:d2:7e:b3:4e:a4:36:
         c1:e0:9e:aa:1b:8e:93:a2:c2:f7:8f:a7:3b:52:87:d0:50:a4:
         ea:27:fd:ce:a5:5f:49:5f:ea:ad:1d:7e:25:f2:3d:78:52:43:
         0a:f0:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:54 2024 by rpki-client on console-fra.rpki-client.org