Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
File:                     286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer (raw, json)
Hash identifier:          NeJZVrNfp2nn+lAYVaUgg8VVlxNrb/CVX3/aKwVfq/w=
Subject key identifier:   63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584206AB4E040BC6190ECAD796F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 May 2023 00:45:16 +0000
Certificate not after:    Sat 30 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 6421
                          AS: 6453
                          IP: 63.243.128.0/17
                          IP: 64.7.112.0/20
                          IP: 64.86.0.0/16
                          IP: 66.110.0.0/17
                          IP: 66.198.0.0 -- 66.198.191.255
                          IP: 199.202.32.0/19
                          IP: 206.82.128.0/20
                          IP: 207.45.192.0/19
                          IP: 209.58.0.0/17
                          IP: 216.6.0.0/17
                          IP: 2001:5a0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:06:ab:4e:04:0b:c6:19:0e:ca:d7:96:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 28 00:45:16 2023 GMT
            Not After : Aug 30 00:45:16 2025 GMT
        Subject: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:c5:1e:db:20:d7:77:e3:16:a0:69:cf:9a:
                    f6:e0:36:6e:5f:9a:1c:d2:99:ec:25:ad:1f:5e:f5:
                    aa:a3:47:43:08:2e:81:d0:a0:55:91:72:9a:16:86:
                    cf:33:19:3a:4b:6a:a7:4c:77:2d:8f:d1:d1:80:23:
                    a8:f8:24:0b:7e:b2:81:ed:77:68:bf:6d:f6:cb:59:
                    2b:92:bc:59:4e:8d:5d:8a:91:81:bb:0c:e1:f1:fd:
                    4e:7f:0b:b2:e2:f6:11:67:09:b3:df:b7:bb:0f:64:
                    99:d1:3c:27:8d:46:d8:51:d5:1a:e4:a1:c8:ab:b9:
                    01:c2:18:e8:a7:c4:d8:ea:f3:7b:4c:c2:6a:6a:44:
                    d9:f3:47:0e:49:76:89:d0:64:e9:f3:32:9d:c2:60:
                    5a:02:12:8a:f9:94:3d:35:ed:0b:9b:e7:dd:fa:c8:
                    45:c2:6a:d7:db:ac:3b:c1:ae:87:ce:2e:e7:dd:95:
                    e2:70:69:55:f0:83:98:c4:29:0d:d0:2e:72:73:7b:
                    f9:f0:ab:98:c5:30:96:4f:f8:7f:53:9b:b8:67:c4:
                    a8:d6:25:32:19:3b:62:37:f6:71:d3:55:c2:93:0c:
                    5d:21:54:13:37:f4:de:5e:13:e1:93:e4:5b:a8:cd:
                    2f:22:25:f1:9a:5c:81:74:1c:6d:b2:37:37:7b:c5:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.243.128.0/17
                  64.7.112.0/20
                  64.86.0.0/16
                  66.110.0.0/17
                  66.198.0.0-66.198.191.255
                  199.202.32.0/19
                  206.82.128.0/20
                  207.45.192.0/19
                  209.58.0.0/17
                  216.6.0.0/17
                IPv6:
                  2001:5a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6421
                  6453

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:24:a3:14:4f:e5:06:05:0d:53:d2:5d:27:66:69:b6:f9:
         bb:17:f5:36:e6:47:11:48:b9:13:a4:82:06:3f:15:be:51:44:
         3a:19:86:48:f9:f4:ef:ba:39:12:da:da:4d:c9:2d:92:77:bf:
         bb:a6:75:54:78:d9:a9:22:70:35:2c:79:63:ae:8e:9c:51:77:
         e2:24:e9:d8:b9:5d:96:e0:af:01:44:3f:f5:0b:be:e7:c3:24:
         fc:6d:44:38:6f:1a:5f:06:f7:a1:7c:71:c7:7d:8b:4d:84:e1:
         7f:31:19:0a:e4:02:21:f7:d6:48:1a:f9:07:e6:be:05:08:02:
         ca:9a:cc:40:94:dc:3a:fc:e4:38:36:02:69:92:5b:d5:8a:0a:
         83:65:14:36:ac:ee:1f:74:df:38:dc:e6:ea:f9:ff:3b:01:b5:
         97:50:bb:4f:ac:6d:80:cc:10:19:98:9d:c8:c7:16:ca:fa:3e:
         8f:3f:01:a6:60:dc:78:05:47:a2:df:6b:54:d3:24:ca:e2:49:
         e0:49:8f:09:d7:02:19:0c:1f:5e:b9:65:61:5b:06:12:50:4a:
         5e:66:a7:c8:a4:87:21:57:e9:35:8d:ec:16:4f:b2:28:ea:a8:
         20:7b:ae:1d:d2:23:3a:0b:a5:c2:35:4d:18:7d:3e:8b:de:dd:
         4c:c3:aa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:43:31 2024 by rpki-client on console-fra.rpki-client.org