Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer
File:                     16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.cer (raw, json)
Hash identifier:          IAh/N1fLZeqJI6KitZ0n9lRIUEILDg4Vq9NGPq/jw6A=
Subject key identifier:   4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E483517D7E4AABEDD90B8B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 17 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 17185
                          AS: 26896
                          AS: 29724
                          AS: 33302
                          AS: 46949
                          IP: 64.111.16.0/20
                          IP: 74.115.168.0/21
                          IP: 76.8.48.0/20
                          IP: 96.47.0.0/20
                          IP: 173.195.144.0/20
                          IP: 199.16.48.0/21
                          IP: 208.72.236.0/22
                          IP: 208.82.128.0/22
                          IP: 208.88.48.0/21
                          IP: 2604:bf00::/32
                          IP: 2607:2800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:7d:7e:4a:ab:ed:d9:0b:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 17 19:06:39 2025 GMT
        Subject: CN=16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:c1:10:90:1b:b0:ce:a3:d7:93:2a:1b:63:
                    1b:f5:3c:fb:93:14:90:6d:57:9d:1a:45:87:76:bf:
                    b4:1e:b0:25:f8:d3:a3:82:87:b0:ad:0a:18:76:68:
                    ae:92:e8:0d:a4:73:8d:d3:54:df:4d:07:58:6a:fe:
                    4d:e5:2a:08:4c:e6:10:4a:ed:fb:b4:be:93:8c:57:
                    57:25:0a:e4:5c:c4:06:4c:f1:51:a3:32:f7:63:e8:
                    00:f1:57:3d:b7:38:dd:85:a9:48:92:77:de:d6:86:
                    de:5a:68:ea:30:6e:a5:66:5b:97:67:1f:07:05:23:
                    8d:69:bb:c8:df:95:6f:3d:b8:5c:88:9d:00:2c:80:
                    11:f8:5b:c6:51:8c:9f:bb:c2:45:75:57:a0:df:13:
                    63:2f:de:b2:ff:a0:c5:52:4b:9c:6c:bc:4a:21:13:
                    2b:c6:51:05:90:5d:ac:b8:12:bb:ea:70:c1:3e:9f:
                    4b:66:1f:de:16:0d:71:3a:07:15:de:d1:e9:2c:62:
                    db:27:51:53:80:7f:fe:4b:5d:53:c6:b7:69:fd:45:
                    31:ce:b7:16:99:88:98:84:9a:64:ce:33:58:8d:c3:
                    07:a3:5b:77:97:d8:d4:48:4b:8d:68:1a:b7:e0:e5:
                    4b:10:86:bc:90:01:2b:a7:da:d6:8f:f6:dd:35:39:
                    ef:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:33:ED:DC:41:9C:63:FA:6F:09:B9:13:1F:E5:7F:8E:41:88:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c/16e8ca0b-0f5e-4067-acd7-2bbb4008ed1c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.111.16.0/20
                  74.115.168.0/21
                  76.8.48.0/20
                  96.47.0.0/20
                  173.195.144.0/20
                  199.16.48.0/21
                  208.72.236.0/22
                  208.82.128.0/22
                  208.88.48.0/21
                IPv6:
                  2604:bf00::/32
                  2607:2800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17185
                  26896
                  29724
                  33302
                  46949

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:30:97:34:4a:25:c0:44:12:0f:10:fa:37:55:65:c9:e7:
         84:85:86:c8:e6:3a:55:b6:c4:27:5d:9c:6d:4b:22:0e:ee:fe:
         cc:b9:b4:f9:fa:76:d5:81:10:38:1e:b3:31:d1:c9:83:3e:a6:
         59:f4:c7:2e:0f:28:3f:51:74:b4:a7:49:4c:35:ba:d5:ef:35:
         6c:22:ee:72:82:64:08:e5:af:f2:5d:24:9c:92:f2:34:39:2e:
         01:e7:20:98:33:e0:ad:9f:e0:b4:24:8d:ad:78:96:cc:4a:c9:
         bf:17:b9:7e:8e:c4:fe:0a:ce:76:84:83:75:c8:a6:68:4e:57:
         23:4e:2d:97:e9:fb:ec:60:cc:f3:d1:bf:c0:13:52:e4:83:b2:
         68:ab:d8:ea:53:ae:fa:f3:2e:c7:13:ba:df:04:3c:d4:58:c7:
         dc:f5:e2:94:f2:84:2f:84:12:ec:d0:44:d9:1e:a0:cc:27:40:
         27:7e:4c:5a:f4:5c:e8:f1:27:c1:2a:3f:23:d4:4e:e2:ac:45:
         48:2e:33:50:c3:c4:d3:44:de:ba:c4:ef:25:81:fe:00:dd:e0:
         b3:3c:02:db:fb:14:ed:6a:b1:f2:3f:c3:dc:3b:da:b2:c4:74:
         4b:2a:a8:f3:2f:a4:80:4a:e0:72:57:30:87:69:d9:94:07:ef:
         d9:1f:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 06:40:06 2024 by rpki-client on console-fra.rpki-client.org