Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1ee2a925-0f48-4575-9609-7511b4223fa2.cer
File:                     1ee2a925-0f48-4575-9609-7511b4223fa2.cer (raw, json)
Hash identifier:          snXaCZwoZKu8vGL7NnijTTAnZ7pm8wmjTFP4tgDqWi4=
Subject key identifier:   EF:F0:15:A6:B5:E1:DE:1B:30:97:01:92:03:36:08:22:AE:87:0F:B6
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858426DF69F62F90DD0887B325F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1ee2a925-0f48-4575-9609-7511b4223fa2/1ee2a925-0f48-4575-9609-7511b4223fa2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1ee2a925-0f48-4575-9609-7511b4223fa2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Jul 2023 00:45:17 +0000
Certificate not after:    Mon 06 Oct 2025 00:45:17 +0000
Subordinate resources:    AS: 11827
                          AS: 33427
                          AS: 393564
                          AS: 394345
                          AS: 395633
                          AS: 395962
                          IP: 69.166.32.0/19
                          IP: 134.121.0.0/16
                          IP: 192.31.216.0/24
                          IP: 192.94.21.0 -- 192.94.22.255
                          IP: 192.138.182.0/24
                          IP: 198.17.13.0/24
                          IP: 2605:a8c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:6d:f6:9f:62:f9:0d:d0:88:7b:32:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jul  4 00:45:17 2023 GMT
            Not After : Oct  6 00:45:17 2025 GMT
        Subject: CN=1ee2a925-0f48-4575-9609-7511b4223fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:5d:ab:e0:cd:fa:dd:6a:44:53:62:db:25:
                    ca:78:bc:b9:18:c1:b0:d4:ec:d6:9e:fd:ea:ac:b2:
                    0b:5e:e0:b4:cf:b2:4b:2d:15:e4:d9:57:6f:a5:ed:
                    a0:7d:cc:5a:4b:f9:18:b0:83:42:38:af:63:96:ce:
                    54:60:b1:d7:c7:31:b1:24:b7:6d:51:08:93:36:7e:
                    0c:a8:dd:66:2a:3e:fd:af:9f:e9:01:f1:36:1e:fa:
                    36:5e:b6:a3:84:cb:94:e2:4f:77:dc:54:fb:bd:70:
                    7f:d1:38:05:ee:1e:1f:c7:b8:ca:54:9d:c5:d0:82:
                    b6:aa:33:22:89:24:21:58:0f:98:9e:e3:7e:e2:2f:
                    05:c8:ec:2f:cc:d5:d6:ec:c3:54:a6:13:4a:3a:6b:
                    76:ca:6f:36:26:81:45:88:41:47:62:0d:9d:05:8d:
                    67:94:9a:97:c6:c3:24:0c:75:15:6e:25:11:50:ff:
                    d0:bd:be:04:20:92:f2:1b:5d:23:55:ae:5f:34:de:
                    8f:37:a2:9c:d5:62:f1:35:97:ac:15:b6:03:33:a8:
                    a9:fb:e4:7f:b0:ab:37:9e:9a:90:b3:10:bc:26:fd:
                    58:a1:57:53:16:d1:69:a8:62:a3:84:e1:8e:d7:b4:
                    df:10:0a:52:39:86:c2:c5:ae:18:1f:54:72:fb:6e:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:15:A6:B5:E1:DE:1B:30:97:01:92:03:36:08:22:AE:87:0F:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1ee2a925-0f48-4575-9609-7511b4223fa2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1ee2a925-0f48-4575-9609-7511b4223fa2/1ee2a925-0f48-4575-9609-7511b4223fa2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.32.0/19
                  134.121.0.0/16
                  192.31.216.0/24
                  192.94.21.0-192.94.22.255
                  192.138.182.0/24
                  198.17.13.0/24
                IPv6:
                  2605:a8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11827
                  33427
                  393564
                  394345
                  395633
                  395962

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:57:41:55:56:41:3d:61:e6:66:ba:f6:49:4f:fb:66:c6:
         6a:dd:5c:1d:1b:3b:d4:cc:a3:3a:e6:6f:e4:1f:32:d3:5c:5f:
         b5:88:9d:13:27:b5:f8:8d:c5:46:cd:ef:04:d3:df:48:8c:de:
         59:9e:39:b3:4c:88:e3:da:5a:4f:07:0a:15:e2:e8:ce:30:f6:
         39:07:c9:41:15:e3:32:e7:92:91:49:54:f0:21:de:1b:57:4d:
         13:85:59:27:f2:ca:94:bf:71:70:cf:1e:94:1d:84:2b:8b:ed:
         03:9f:b5:b3:d8:bd:6b:ee:2e:e1:92:58:f3:20:b9:25:9e:7d:
         51:8f:72:ef:38:96:fe:bf:6e:75:76:dc:f0:6b:65:96:fb:ed:
         73:cc:bb:0f:46:57:3c:9d:11:97:d7:8c:85:ce:1d:32:18:23:
         e6:55:47:b6:09:44:12:cb:41:7d:9a:a1:a3:6d:ac:cc:dd:16:
         b7:cc:b0:42:40:94:9d:15:a6:4a:87:f7:bf:d1:99:4e:ce:d4:
         7a:a8:0b:4b:ac:7d:6a:21:cd:dc:34:1d:ad:4c:ef:6c:de:d4:
         9a:79:38:15:f2:2a:6a:ed:ed:be:3d:d1:e1:03:91:14:46:13:
         a8:0f:ac:94:f5:ab:5b:34:89:6d:7e:71:45:2c:82:b1:66:6a:
         a7:36:08:29
-----BEGIN CERTIFICATE-----
MIIHVTCCBj2gAwIBAgIUAQ0Mn0MoWEJt9p9i+Q3QiHsyX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDcwNDAwNDUxN1oXDTI1MTAwNjAwNDUxN1owLzEtMCsGA1UEAxMk
MWVlMmE5MjUtMGY0OC00NTc1LTk2MDktNzUxMWI0MjIzZmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHRdq+DN+t1qRFNi2yXKeLy5GMGw1OzWnv3q
rLILXuC0z7JLLRXk2Vdvpe2gfcxaS/kYsINCOK9jls5UYLHXxzGxJLdtUQiTNn4M
qN1mKj79r5/pAfE2Hvo2XrajhMuU4k933FT7vXB/0TgF7h4fx7jKVJ3F0IK2qjMi
iSQhWA+YnuN+4i8FyOwvzNXW7MNUphNKOmt2ym82JoFFiEFHYg2dBY1nlJqXxsMk
DHUVbiURUP/Qvb4EIJLyG10jVa5fNN6PN6Kc1WLxNZesFbYDM6ip++R/sKs3npqQ
sxC8Jv1YoVdTFtFpqGKjhOGO17TfEApSOYbCxa4YH1Ry+24FCwIDAQABo4IEZzCC
BGMwHQYDVR0OBBYEFO/wFaa14d4bMJcBkgM2CCKuhw+2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x
ZWUyYTkyNS0wZjQ4LTQ1NzUtOTYwOS03NTExYjQyMjNmYTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzFlZTJhOTI1LTBmNDgtNDU3NS05
NjA5LTc1MTFiNDIyM2ZhMi8xZWUyYTkyNS0wZjQ4LTQ1NzUtOTYwOS03NTExYjQy
MjNmYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwUwYIKwYBBQUH
AQcBAf8ERDBCMDEEAgABMCsDBAVFpiADAwCGeQMEAMAf2DAMAwQAwF4VAwQAwF4W
AwQAwIq2AwQAxhENMA0EAgACMAcDBQAmBajAMDIGCCsGAQUFBwEIAQH/BCMwIaAf
MB0CAi4zAgMAgpMCAwYBXAIDBgRpAgMGCXECAwYKujBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy0FdBVVZB
PWHmZrr2SU/7ZsZq3VwdGzvUzKM65m/kHzLTXF+1iJ0TJ7X4jcVGze8E099IjN5Z
njmzTIjj2lpPBwoV4ujOMPY5B8lBFeMy55KRSVTwId4bV00ThVkn8sqUv3Fwzx6U
HYQri+0Dn7Wz2L1r7i7hkljzILklnn1Rj3LvOJb+v251dtzwa2WW++1zzLsPRlc8
nRGX14yFzh0yGCPmVUe2CUQSy0F9mqGjbazM3Ra3zLBCQJSdFaZKh/e/0ZlOztR6
qAtLrH1qIc3cNB2tTO9s3tSaeTgV8ipq7e2+PdHhA5EURhOoD6yU9atbNIltfnFF
LIKxZmqnNggp
-----END CERTIFICATE-----
Generated at Thu Mar 28 08:17:47 2024 by rpki-client on console-ams.rpki-client.org