Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
File:                     0e527a59-f1c7-4664-a1be-8a0911a07432.cer (raw, json)
Hash identifier:          rb+IKauW9L2RWUhjfAWnKkGajHzkZdysrVKmDKe7HgA=
Subject key identifier:   6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858482CBB1923B49257C382401D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 11 Dec 2024 20:39:26 +0000
Certificate not after:    Mon 08 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 40864
                          IP: 23.159.240.0/24
                          IP: 96.125.192.0/20
                          IP: 104.245.64.0 -- 104.245.66.255
                          IP: 2606:1b80::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:bb:19:23:b4:92:57:c3:82:40:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec 11 20:39:26 2024 GMT
            Not After : Jun  8 00:45:20 2026 GMT
        Subject: CN=0e527a59-f1c7-4664-a1be-8a0911a07432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:f3:f1:84:04:4b:d8:a2:a2:72:09:47:df:
                    66:82:0a:61:b8:a7:6f:bb:50:63:0e:cf:a8:a3:db:
                    90:51:49:80:d3:3f:9e:4a:a0:cc:e9:86:ab:78:7e:
                    5b:ab:c0:01:5a:c2:a8:f8:e1:df:f4:9f:15:6e:18:
                    01:c2:02:cd:28:02:9f:b3:bd:a5:4c:03:43:d8:a1:
                    c2:ef:0d:ff:ae:16:bc:d7:f9:93:ca:d6:eb:e9:89:
                    6e:2e:6f:b2:ea:6f:92:43:80:04:43:af:b3:c1:0c:
                    3d:df:bb:78:2b:10:84:27:d3:87:e9:5c:91:2f:0a:
                    c7:15:88:6f:12:ed:6f:c5:7c:b1:2d:f4:dc:bc:5a:
                    69:a0:60:8d:34:75:30:05:10:ce:92:c4:c4:7f:27:
                    5a:cf:40:9f:6c:fd:d1:4f:b4:4f:a6:d4:48:31:ad:
                    06:50:8a:0c:47:07:7e:ae:2f:0b:55:a2:81:7e:6b:
                    55:6a:48:df:a9:60:67:61:80:73:af:fc:ce:3c:00:
                    f2:0d:00:9b:ad:11:9f:9b:56:0b:84:7b:cb:c0:5b:
                    18:34:65:7c:3f:44:41:70:f8:f4:4b:a1:41:0f:55:
                    5d:30:c0:84:e2:ad:41:a1:61:44:49:4e:22:f1:93:
                    61:4c:26:05:11:27:cd:0a:79:61:27:21:5e:1a:3f:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.240.0/24
                  96.125.192.0/20
                  104.245.64.0-104.245.66.255
                IPv6:
                  2606:1b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40864

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:de:53:7c:9d:3b:28:b4:92:c1:7e:83:76:0c:8a:77:3a:d5:
         8f:0e:23:57:1d:35:ff:0b:1e:d5:6f:44:7d:19:d3:99:87:28:
         43:14:55:dc:ad:ce:f1:a3:82:38:9e:7a:8d:32:dd:64:f3:53:
         82:8b:d7:34:f9:7a:fc:29:26:e2:52:f2:54:16:02:45:a5:5a:
         78:e3:87:ba:85:24:70:20:4f:33:34:8d:48:45:ce:4d:b0:62:
         a7:ca:46:14:c4:5f:0b:8b:9c:fd:b1:88:48:fb:d6:25:ed:71:
         a1:c8:1a:32:cb:cc:b6:7f:e2:23:d5:42:63:b3:eb:93:6f:14:
         00:5e:0d:a2:6f:60:ac:6d:66:02:79:42:19:cc:3e:b0:26:f2:
         6e:53:21:1f:1f:78:81:65:c8:c5:c0:59:6a:7a:ba:00:59:5b:
         54:3e:62:ad:99:5a:2f:c3:39:15:ea:2a:ea:f9:63:5c:cc:cd:
         d2:89:dc:97:01:c5:d9:ef:ba:10:22:f2:57:10:8c:f6:47:81:
         a3:bd:ec:bb:c5:a8:58:6b:b6:72:be:ee:eb:2c:fe:bd:fd:d4:
         29:75:65:45:9a:bc:10:1d:d8:b7:53:96:05:7f:30:70:de:ba:
         2e:ed:91:71:3b:96:0f:1e:62:19:95:da:4f:1f:d2:99:d2:22:
         0d:35:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 11:59:52 2025 by rpki-client