Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
File:                     0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer (raw, json)
Hash identifier:          Us5juS1HokfYd76m88idJ0PTjSsVjmHomszIys5UuHA=
Subject key identifier:   42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858420F0B5A33710EBCEC74E448C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 00:45:16 +0000
Certificate not after:    Tue 02 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 6250
                          AS: 14793
                          IP: 67.58.64.0/19
                          IP: 67.218.160.0/19
                          IP: 74.51.96.0/19
                          IP: 76.164.160.0/19
                          IP: 137.118.0.0/15
                          IP: 173.242.192.0/20
                          IP: 216.228.80.0/20
                          IP: 2001:408::/32
                          IP: 2620:69:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:0b:5a:33:71:0e:bc:ec:74:e4:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 31 00:45:16 2023 GMT
            Not After : Sep  2 00:45:16 2025 GMT
        Subject: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:ef:29:84:e9:db:04:b1:c1:fe:db:34:a0:
                    c6:a7:2f:c1:2f:aa:6d:ed:6b:e3:c6:46:5d:15:3f:
                    1b:46:69:45:88:d1:e3:2c:ca:bb:28:a2:8e:f6:43:
                    73:63:72:91:eb:39:68:6f:be:96:84:a5:d6:f1:77:
                    f6:36:5b:17:1d:f2:c6:4d:37:0a:c7:a9:81:dd:30:
                    fe:75:bd:0f:00:3f:57:9f:8b:63:36:e3:b9:59:1b:
                    d7:33:b5:ac:00:56:f2:3e:7e:91:9a:02:94:f1:53:
                    7b:e9:47:89:a0:83:d0:27:f3:91:7f:f4:c1:7a:dd:
                    ea:4c:69:5d:9a:25:f2:88:39:54:67:6b:ac:56:89:
                    97:67:cc:a9:61:cb:ef:52:d4:ca:16:69:38:f3:9e:
                    0c:88:4a:c3:4e:7d:5d:7e:26:84:61:7f:9d:5a:a6:
                    bf:d7:29:5d:3f:9a:25:7b:79:09:85:14:88:54:35:
                    91:18:5e:03:58:51:c2:18:0a:0f:d4:fe:be:f3:b2:
                    57:1d:8d:ac:0f:08:bb:ea:ae:46:00:63:b6:98:3e:
                    2a:23:1b:be:48:2f:17:f4:49:ce:19:de:0e:60:ef:
                    d7:db:8e:81:93:7f:47:cd:f5:3c:54:d6:7d:b6:3a:
                    af:9c:da:5f:ed:0e:dc:1d:58:23:68:fe:78:93:af:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.64.0/19
                  67.218.160.0/19
                  74.51.96.0/19
                  76.164.160.0/19
                  137.118.0.0/15
                  173.242.192.0/20
                  216.228.80.0/20
                IPv6:
                  2001:408::/32
                  2620:69:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6250
                  14793

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:6c:a6:cb:bd:48:cc:3d:4e:af:0e:e5:1e:24:10:e5:f1:
         de:cc:3c:a0:76:aa:b2:d6:0a:57:19:b0:74:fc:33:38:44:f4:
         6d:b1:33:c5:6b:3c:6e:be:19:e5:e1:7d:e4:3e:26:64:3e:16:
         55:d1:0e:b7:1a:78:c9:71:47:07:3f:80:28:1c:cc:58:f1:7f:
         a1:6a:e3:74:65:4a:58:d5:bb:69:17:1d:65:38:6a:f3:d8:3a:
         d1:d1:5b:20:f3:68:36:45:20:72:bf:76:7c:9b:5b:fa:05:d8:
         64:88:5d:53:03:d4:c8:4c:3a:12:66:7b:5f:f8:05:62:e0:c9:
         08:bc:2f:a4:3f:80:cf:5f:13:e3:da:e5:de:f4:23:b6:17:ce:
         a5:ed:99:89:05:e9:cf:13:7e:b3:9f:aa:96:85:09:ab:34:0a:
         99:df:14:62:72:5f:43:09:3d:e7:c6:d7:10:be:65:e9:50:64:
         73:55:1d:78:4a:af:79:17:69:2d:c4:ca:98:0f:d9:cc:4e:f5:
         4d:58:70:f8:d2:b1:21:26:56:99:aa:23:43:84:da:f6:3e:cb:
         48:8b:f4:d0:61:46:97:64:25:ae:12:f9:c5:d0:c3:b0:d5:51:
         f1:a5:d7:f3:0b:02:e3:d9:c5:cd:72:7d:66:e6:cc:38:51:03:
         84:4f:0a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:49:54 2024 by rpki-client on console-fra.rpki-client.org