Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
File:                     16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer (raw, json)
Hash identifier:          oyUJRBASChUmXPObx47t/dJWkxIaMwpd/yOfFJIwBg0=
Subject key identifier:   4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584692D2955D1C246FB8AD3FB310
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jul 2024 00:45:19 +0000
Certificate not after:    Wed 21 Oct 2026 00:45:19 +0000
Subordinate resources:    AS: 17185
                          AS: 26896
                          AS: 29724
                          AS: 33302
                          AS: 46949
                          IP: 64.111.16.0/20
                          IP: 74.115.168.0/21
                          IP: 76.8.48.0/20
                          IP: 96.47.0.0/20
                          IP: 173.195.144.0/20
                          IP: 199.16.48.0/21
                          IP: 208.72.236.0/22
                          IP: 208.82.128.0/22
                          IP: 208.88.48.0/21
                          IP: 2604:bf00::/32
                          IP: 2607:2800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:92:d2:95:5d:1c:24:6f:b8:ad:3f:b3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul 18 00:45:19 2024 GMT
            Not After : Oct 21 00:45:19 2026 GMT
        Subject: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:c1:10:90:1b:b0:ce:a3:d7:93:2a:1b:63:
                    1b:f5:3c:fb:93:14:90:6d:57:9d:1a:45:87:76:bf:
                    b4:1e:b0:25:f8:d3:a3:82:87:b0:ad:0a:18:76:68:
                    ae:92:e8:0d:a4:73:8d:d3:54:df:4d:07:58:6a:fe:
                    4d:e5:2a:08:4c:e6:10:4a:ed:fb:b4:be:93:8c:57:
                    57:25:0a:e4:5c:c4:06:4c:f1:51:a3:32:f7:63:e8:
                    00:f1:57:3d:b7:38:dd:85:a9:48:92:77:de:d6:86:
                    de:5a:68:ea:30:6e:a5:66:5b:97:67:1f:07:05:23:
                    8d:69:bb:c8:df:95:6f:3d:b8:5c:88:9d:00:2c:80:
                    11:f8:5b:c6:51:8c:9f:bb:c2:45:75:57:a0:df:13:
                    63:2f:de:b2:ff:a0:c5:52:4b:9c:6c:bc:4a:21:13:
                    2b:c6:51:05:90:5d:ac:b8:12:bb:ea:70:c1:3e:9f:
                    4b:66:1f:de:16:0d:71:3a:07:15:de:d1:e9:2c:62:
                    db:27:51:53:80:7f:fe:4b:5d:53:c6:b7:69:fd:45:
                    31:ce:b7:16:99:88:98:84:9a:64:ce:33:58:8d:c3:
                    07:a3:5b:77:97:d8:d4:48:4b:8d:68:1a:b7:e0:e5:
                    4b:10:86:bc:90:01:2b:a7:da:d6:8f:f6:dd:35:39:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.16.0/20
                  74.115.168.0/21
                  76.8.48.0/20
                  96.47.0.0/20
                  173.195.144.0/20
                  199.16.48.0/21
                  208.72.236.0/22
                  208.82.128.0/22
                  208.88.48.0/21
                IPv6:
                  2604:bf00::/32
                  2607:2800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17185
                  26896
                  29724
                  33302
                  46949

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:de:8e:d8:e2:2c:2a:d9:b2:74:43:91:73:69:a8:43:52:c1:
         55:d6:96:0a:46:96:4b:88:bb:85:06:ce:b0:31:bf:fd:0f:5c:
         0d:a6:55:95:04:71:40:60:10:0b:57:8d:ba:3e:15:11:93:b0:
         ff:a7:6f:b5:61:d2:60:e6:66:17:39:3e:bf:4d:f8:17:2a:18:
         35:58:95:3a:47:14:e4:10:91:82:74:c7:2f:c4:ed:c1:17:e8:
         d1:6d:da:27:ef:35:4e:db:72:29:ab:de:11:18:8b:9d:72:0e:
         26:5d:a3:d8:16:14:8d:5d:53:46:fa:7b:d4:a3:c5:4b:4e:fa:
         ba:61:ac:4d:43:55:9a:47:ec:3b:14:7f:18:c8:40:cb:d5:14:
         69:22:b4:ff:6d:6b:c4:29:a3:71:96:37:38:69:55:80:65:8d:
         29:16:e2:3a:02:f3:35:ef:3a:3d:17:1e:f4:28:22:0d:d8:b6:
         c0:dc:3c:83:db:9f:41:9f:0d:7c:55:b0:23:a6:79:10:ac:e0:
         f8:db:44:29:9c:89:13:07:1e:8e:8f:72:04:32:24:1a:99:de:
         92:0a:bc:75:85:5f:b7:2a:f9:cc:a2:71:6c:b1:04:ed:a6:4e:
         c6:97:67:73:0e:f0:d8:9e:73:9b:78:1a:94:bb:2b:af:33:f9:
         3d:96:c8:d1
-----BEGIN CERTIFICATE-----
MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWEaS0pVdHCRvuK0/sxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDcxODAwNDUxOVoXDTI2MTAyMTAwNDUxOVowLzEtMCsGA1UEAxMk
MTZlOGNhMGItMGY1ZS00MDY3LWFjZDctMmJiYjQwMDhlZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvBEJAbsM6j15MqG2Mb9Tz7kxSQbVedGkWH
dr+0HrAl+NOjgoewrQoYdmiukugNpHON01TfTQdYav5N5SoITOYQSu37tL6TjFdX
JQrkXMQGTPFRozL3Y+gA8Vc9tzjdhalIknfe1obeWmjqMG6lZluXZx8HBSONabvI
35VvPbhciJ0ALIAR+FvGUYyfu8JFdVeg3xNjL96y/6DFUkucbLxKIRMrxlEFkF2s
uBK76nDBPp9LZh/eFg1xOgcV3tHpLGLbJ1FTgH/+S11Txrdp/UUxzrcWmYiYhJpk
zjNYjcMHo1t3l9jUSEuNaBq34OVLEIa8kAErp9rWj/bdNTnvQwIDAQABo4IEcjCC
BG4wHQYDVR0OBBYEFE+pM+3cQZxj+m8JuRMf5X+OQYgaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x
NmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAwOGVkMWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzE2ZThjYTBiLTBmNWUtNDA2Ny1h
Y2Q3LTJiYmI0MDA4ZWQxYy8xNmU4Y2EwYi0wZjVlLTQwNjctYWNkNy0yYmJiNDAw
OGVkMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwZQYIKwYBBQUH
AQcBAf8EVjBUMDwEAgABMDYDBARAbxADBANKc6gDBARMCDADBARgLwADBAStw5AD
BAPHEDADBALQSOwDBALQUoADBAPQWDAwFAQCAAIwDgMFACYEvwADBQAmBygAMCsG
CCsGAQUFBwEIAQH/BBwwGqAYMBYCAkMhAgJpEAICdBwCAwCCFgIDALdlMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBACPejtjiLCrZsnRDkXNpqENSwVXWlgpGlkuIu4UGzrAxv/0PXA2mVZUEcUBg
EAtXjbo+FRGTsP+nb7Vh0mDmZhc5Pr9N+BcqGDVYlTpHFOQQkYJ0xy/E7cEX6NFt
2ifvNU7bcimr3hEYi51yDiZdo9gWFI1dU0b6e9SjxUtO+rphrE1DVZpH7DsUfxjI
QMvVFGkitP9ta8Qpo3GWNzhpVYBljSkW4joC8zXvOj0XHvQoIg3YtsDcPIPbn0Gf
DXxVsCOmeRCs4PjbRCmciRMHHo6PcgQyJBqZ3pIKvHWFX7cq+cyicWyxBO2mTsaX
Z3MO8Niec5t4GpS7K68z+T2WyNE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:36:16 2024 by rpki-client on console-fra.rpki-client.org