Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
File:                     1b03e342-d588-4239-8704-6688d01760d9.cer (raw, json)
Hash identifier:          Lpr+iDhWuEFwCG5aPl3fMsAcIfWQXRt4E/a93C8IGo0=
Subject key identifier:   13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845674AE449A90FEBED4AE02AE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 17:45:14 +0000
Certificate not after:    Wed 02 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 397031
                          IP: 23.150.160.0 -- 23.150.164.255
                          IP: 162.248.100.0/22
                          IP: 204.235.248.0/22
                          IP: 216.146.0.0/22
                          IP: 2602:fda1::/36
                          IP: 2620:57:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:4a:e4:49:a9:0f:eb:ed:4a:e0:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr  1 17:45:14 2024 GMT
            Not After : Jul  2 19:06:39 2025 GMT
        Subject: CN=1b03e342-d588-4239-8704-6688d01760d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:7f:d6:b9:2c:f9:ea:3e:95:dc:b2:92:74:
                    c7:55:e7:60:69:64:35:58:ec:f9:31:a5:83:04:1b:
                    a5:2d:bc:87:b5:47:ea:d6:81:4d:42:8f:95:24:58:
                    b5:93:c7:e4:8b:4f:07:fa:df:6f:eb:ff:b4:01:d6:
                    2c:e6:8a:2a:d5:21:97:92:6b:3e:ec:b6:d2:47:39:
                    da:23:89:8a:79:f8:96:d1:91:65:6a:83:24:6d:ce:
                    da:0b:99:04:31:70:2f:7e:d9:9d:02:6b:12:91:6b:
                    7a:6f:e4:46:a5:ea:e0:31:1a:49:ea:05:fa:06:12:
                    0d:b2:54:1e:c0:18:d7:be:33:9e:e7:ba:a9:24:f1:
                    7d:90:35:f7:e0:23:70:b6:60:c9:c7:69:fd:6e:92:
                    d9:2b:41:b7:54:a4:2d:21:fa:6d:11:e4:35:ec:43:
                    e5:66:e0:7e:64:09:78:ec:d7:13:37:cf:9d:05:17:
                    bc:af:01:30:26:7a:71:1a:e9:7e:29:da:fe:35:2d:
                    a6:95:b5:af:de:8d:d8:d7:32:41:b2:1b:72:0f:55:
                    f6:6f:a1:85:40:aa:6e:4d:68:e4:d4:4f:2f:1d:e9:
                    e7:f8:ed:13:5c:04:d9:a3:d6:d6:0a:57:d5:cf:a0:
                    e4:8d:47:c3:f8:3e:8f:eb:e8:da:c4:8a:2c:24:b4:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.160.0-23.150.164.255
                  162.248.100.0/22
                  204.235.248.0/22
                  216.146.0.0/22
                IPv6:
                  2602:fda1::/36
                  2620:57:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397031

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:45:8f:51:ef:e7:37:63:01:ce:5e:a6:49:b4:3f:01:aa:8b:
         11:de:8d:4f:0f:2c:ec:a1:bf:f4:f6:3f:5b:6a:c0:a6:e8:aa:
         24:a7:ad:9c:dc:11:75:ac:01:96:7c:c0:1f:28:d8:7f:d2:c4:
         1c:fd:91:0a:33:19:62:58:45:f0:14:36:52:ba:50:8b:80:61:
         db:7e:f3:90:9c:bb:97:32:2f:dd:fd:52:d5:d7:f0:0a:84:6e:
         50:6f:ed:24:cf:41:2d:a1:ca:7a:e3:85:a6:60:69:0c:6e:05:
         a3:ba:75:23:40:1a:7a:da:1d:3a:9e:be:ce:75:7e:f7:28:84:
         d1:c4:71:b7:e4:9d:b2:d9:5f:dd:f0:34:0a:c5:8d:a5:50:91:
         bb:99:c2:ed:b2:39:53:25:a7:10:07:4e:f4:a4:d0:4e:e3:b3:
         9f:e3:e5:99:21:58:b2:2c:f9:e1:47:5d:d0:ad:e6:c4:7a:91:
         fc:a0:cb:b4:aa:d4:c5:8d:df:df:05:ac:42:4f:36:31:28:48:
         d4:6f:09:5c:6b:23:81:6d:13:6d:ca:ed:21:1d:2d:44:a2:30:
         8d:41:3e:8c:47:96:86:d9:61:e7:37:47:88:95:eb:44:c5:0a:
         2f:13:6b:ef:58:f3:f7:c6:9a:a0:82:7f:c0:f7:1f:b4:cc:b7:
         aa:95:4d:13
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEVnSuRJqQ/r7UrgKuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDQwMTE3NDUxNFoXDTI1MDcwMjE5MDYzOVowLzEtMCsGA1UEAxMk
MWIwM2UzNDItZDU4OC00MjM5LTg3MDQtNjY4OGQwMTc2MGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrJ/1rks+eo+ldyyknTHVedgaWQ1WOz5MaWD
BBulLbyHtUfq1oFNQo+VJFi1k8fki08H+t9v6/+0AdYs5ooq1SGXkms+7LbSRzna
I4mKefiW0ZFlaoMkbc7aC5kEMXAvftmdAmsSkWt6b+RGpergMRpJ6gX6BhINslQe
wBjXvjOe57qpJPF9kDX34CNwtmDJx2n9bpLZK0G3VKQtIfptEeQ17EPlZuB+ZAl4
7NcTN8+dBRe8rwEwJnpxGul+Kdr+NS2mlbWv3o3Y1zJBshtyD1X2b6GFQKpuTWjk
1E8vHenn+O0TXATZo9bWClfVz6DkjUfD+D6P6+jaxIosJLTOfwIDAQABo4IETjCC
BEowHQYDVR0OBBYEFBNweUOhqVICSjQGs9L6jO2P4pEkMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x
YjAzZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4ZDAxNzYwZDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzFiMDNlMzQyLWQ1ODgtNDIzOS04
NzA0LTY2ODhkMDE3NjBkOS8xYjAzZTM0Mi1kNTg4LTQyMzktODcwNC02Njg4ZDAx
NzYwZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwUgYIKwYBBQUH
AQcBAf8EQzBBMCYEAgABMCAwDAMEBReWoAMEABeWpAMEAqL4ZAMEAszr+AMEAtiS
ADAXBAIAAjARAwYEJgL9oQADBwAmIABX4AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDBg7nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAFVFj1Hv5zdjAc5epkm0PwGqixHejU8PLOyhv/T2P1tq
wKboqiSnrZzcEXWsAZZ8wB8o2H/SxBz9kQozGWJYRfAUNlK6UIuAYdt+85Ccu5cy
L939UtXX8AqEblBv7STPQS2hynrjhaZgaQxuBaO6dSNAGnraHTqevs51fvcohNHE
cbfknbLZX93wNArFjaVQkbuZwu2yOVMlpxAHTvSk0E7js5/j5ZkhWLIs+eFHXdCt
5sR6kfygy7Sq1MWN398FrEJPNjEoSNRvCVxrI4FtE23K7SEdLUSiMI1BPoxHlobZ
Yec3R4iV60TFCi8Ta+9Y8/fGmqCCf8D3H7TMt6qVTRM=
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:13:52 2024 by rpki-client on console-ams.rpki-client.org