Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
File:                     18800324-5150-4981-a144-bdb80e6bcb7c.cer (raw, json)
Hash identifier:          VV5u0z/zj868+neWOKE+jqbVufxs6fUFZkFcgCJJGfo=
Subject key identifier:   11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E483521656183838B983AD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 21 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 18779
                          AS: 54500
                          IP: 23.27.0.0/16
                          IP: 23.230.0.0/16
                          IP: 45.38.0.0/15
                          IP: 50.117.0.0/17
                          IP: 50.118.128.0/17
                          IP: 68.68.96.0/20
                          IP: 69.46.64.0/19
                          IP: 72.13.80.0/20
                          IP: 104.164.0.0/15
                          IP: 104.252.0.0/15
                          IP: 107.164.0.0/15
                          IP: 107.186.0.0/15
                          IP: 136.0.0.0/16
                          IP: 142.111.0.0/16
                          IP: 142.252.0.0/16
                          IP: 166.88.0.0/16
                          IP: 172.120.0.0/15
                          IP: 172.252.0.0/16
                          IP: 173.245.64.0/19
                          IP: 192.177.0.0/16
                          IP: 205.164.0.0/18
                          IP: 209.73.128.0/19
                          IP: 216.172.128.0/19
                          IP: 2607:f358::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 May 2023 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:16:56:18:38:38:b9:83:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 21 19:06:39 2025 GMT
        Subject: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:a5:d9:c8:e1:3c:f8:5f:11:b6:89:c5:49:
                    c8:a0:42:b9:47:00:fb:7a:5b:f4:f0:7e:38:32:5a:
                    9c:68:d1:6c:ff:bd:32:9a:c1:8f:75:24:ef:1e:75:
                    c2:06:6b:69:9a:23:7f:d3:9c:80:a5:9a:13:bb:9a:
                    ee:c4:78:05:cd:75:88:2b:a8:5e:49:8e:6b:fa:03:
                    54:90:03:74:4f:18:5c:c6:c1:df:d3:dd:58:a3:71:
                    5b:1c:10:13:90:e2:b8:df:50:2d:dc:56:42:83:ef:
                    d9:1f:ce:a3:66:6b:01:12:34:bf:0e:eb:91:50:5e:
                    31:8b:a7:68:f6:ae:7f:bb:13:0f:f3:b9:a3:87:00:
                    ff:00:cc:8c:2d:03:00:02:f6:fd:82:5c:1f:c4:b0:
                    c0:64:70:4b:bb:55:f8:fa:d1:d3:08:c1:54:a8:9a:
                    bd:1e:52:6b:33:ed:5e:d3:41:fe:c3:5a:13:ef:21:
                    99:04:32:08:58:8d:93:bc:97:ed:ae:76:a6:a8:f0:
                    9f:de:37:66:72:07:4b:8b:58:29:b8:b8:a5:2b:43:
                    93:e3:82:05:43:b0:15:1f:da:71:ca:ea:36:3b:e6:
                    72:47:a9:da:a3:83:2e:bf:fa:8f:ad:5c:43:47:9e:
                    63:39:7f:9e:18:bb:64:7b:d3:e9:f2:9a:59:33:9c:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier: 
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.0.0/16
                  23.230.0.0/16
                  45.38.0.0/15
                  50.117.0.0/17
                  50.118.128.0/17
                  68.68.96.0/20
                  69.46.64.0/19
                  72.13.80.0/20
                  104.164.0.0/15
                  104.252.0.0/15
                  107.164.0.0/15
                  107.186.0.0/15
                  136.0.0.0/16
                  142.111.0.0/16
                  142.252.0.0/16
                  166.88.0.0/16
                  172.120.0.0/15
                  172.252.0.0/16
                  173.245.64.0/19
                  192.177.0.0/16
                  205.164.0.0/18
                  209.73.128.0/19
                  216.172.128.0/19
                IPv6:
                  2607:f358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18779
                  54500

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9d:01:8e:7b:ea:fa:df:c4:2e:39:1d:04:f3:89:f6:68:69:
         c3:7d:b0:21:5e:f9:f5:04:94:58:ba:6d:f3:c6:c0:36:ec:62:
         ae:d6:05:ae:c9:6c:de:74:c4:0e:c1:80:f5:49:18:fe:00:a8:
         fc:df:41:0c:c4:a0:b3:23:26:b1:f7:6f:f5:a6:70:b1:2c:aa:
         40:74:59:b0:77:db:5f:0d:e3:3d:51:98:55:a2:87:06:7b:9d:
         c6:f5:35:a7:fc:b5:cf:c6:db:94:a6:39:fe:39:be:88:77:34:
         64:78:e3:e1:94:ca:2b:18:b7:1d:29:32:d8:b7:62:ca:25:58:
         1f:3f:37:5d:5c:59:b9:a0:25:47:81:a2:2b:e9:a3:27:8b:ac:
         2d:a4:c3:66:e7:5d:dc:73:c5:fa:2b:31:53:a1:65:8a:ab:7f:
         80:80:4d:19:2a:44:a9:32:73:ee:85:43:ff:2e:1c:fb:7b:89:
         20:3d:06:1a:d7:9c:17:05:3c:56:a1:e0:5f:30:92:52:3b:1c:
         3a:7c:10:e6:18:87:82:6c:92:17:bc:37:20:e5:65:b3:82:62:
         b8:f2:7a:2b:4b:c6:22:36:15:2a:a2:68:d6:c1:80:b1:73:99:
         c9:51:12:1a:ba:d8:21:b8:d1:aa:6f:9b:03:3a:28:22:9d:b4:
         e1:56:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 15 19:43:02 2023 by rpki-client on console-ams.rpki-client.org