Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
File:                     33097e36-cef3-418b-a895-cacb797d1eeb.cer (raw, json)
Hash identifier:          ZYAzOMbMoZn51bY5miqUoEiENjDgMD5+3exsCmlvRCM=
Subject key identifier:   F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843A3D886718601C08684BED880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Oct 2023 00:45:14 +0000
Certificate not after:    Sun 25 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 10958
                          IP: 147.161.4.0/22
                          IP: 162.216.108.0/22
                          IP: 162.216.208.0/21
                          IP: 198.62.181.0/24
                          IP: 208.68.56.0/22
                          IP: 208.80.144.0/21
                          IP: 208.91.176.0/21
                          IP: 2606:7a80::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a3:d8:86:71:86:01:c0:86:84:be:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 23 00:45:14 2023 GMT
            Not After : Jan 25 01:45:14 2026 GMT
        Subject: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:1d:02:6b:f3:48:6d:71:21:41:6b:77:80:
                    04:e0:22:2b:53:cf:f7:20:f2:30:df:6f:25:c3:6f:
                    26:fb:2a:9f:db:7f:33:f5:89:a9:30:6b:e7:a0:d1:
                    aa:b1:cc:43:a6:91:05:e4:e2:08:a9:25:e6:92:23:
                    8c:67:53:f7:3b:34:8d:da:17:ef:7b:ec:c1:e6:cb:
                    5d:96:2e:7c:12:4c:02:57:0c:88:d0:b8:fa:0e:b0:
                    5c:d2:e2:e0:14:13:1c:9a:ec:c3:0f:f5:bb:53:46:
                    86:c3:a8:ce:91:d5:3e:9e:c4:50:e9:d6:e2:3b:53:
                    72:67:93:ac:24:c0:32:ab:9d:5e:97:ff:52:b5:92:
                    71:ee:5e:aa:93:4b:c0:2d:a6:ca:62:10:af:07:99:
                    d7:be:cc:65:a1:d5:74:11:d4:48:cf:bc:50:09:ca:
                    5e:1c:8b:df:52:35:78:f0:d1:0c:5c:2e:39:a9:5d:
                    5a:df:a4:aa:28:6b:cc:40:3d:e1:ea:71:08:c7:fe:
                    a7:84:c6:65:55:08:05:8d:44:a9:b4:0a:9c:fc:b0:
                    3b:af:8e:d6:86:90:54:a1:71:bb:fd:7d:a2:2f:ca:
                    58:70:d4:47:e1:86:2d:7b:cb:cf:f1:39:b2:72:cf:
                    31:f1:00:db:be:be:fd:96:3c:87:40:d0:ae:7d:69:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.161.4.0/22
                  162.216.108.0/22
                  162.216.208.0/21
                  198.62.181.0/24
                  208.68.56.0/22
                  208.80.144.0/21
                  208.91.176.0/21
                IPv6:
                  2606:7a80::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10958

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:9e:07:2c:ff:a5:b2:79:08:2b:1f:49:86:4b:67:e3:94:
         c1:2f:9a:7c:75:ba:c2:78:2d:55:35:55:f2:14:48:f8:ab:cd:
         18:eb:c2:7a:a2:a4:ec:3e:79:b2:79:8e:b2:ba:dd:e7:72:02:
         d7:9e:7a:3c:d6:1d:ed:1e:e7:a9:08:91:03:2d:86:e7:bc:d3:
         e3:36:9e:ee:10:41:ba:2d:b2:33:bb:f5:8a:45:12:78:31:7b:
         6d:eb:b4:73:b9:2e:9c:37:15:93:7d:67:ea:b3:2c:8e:b6:40:
         94:9e:68:69:1f:74:14:c0:d9:0c:53:4a:03:ac:31:59:d1:36:
         05:de:2a:51:8f:4e:ca:01:07:8c:0c:88:69:08:2e:01:88:ca:
         91:9c:f3:b1:ba:66:eb:e6:f9:dc:c0:ab:a6:ea:3b:b0:e6:65:
         2e:b5:5a:a2:13:54:e0:78:b8:67:2f:43:57:1f:72:ae:1a:b7:
         74:8b:38:77:fa:b8:a4:e2:fe:7b:78:77:74:12:b5:98:61:0b:
         4c:4a:12:be:5d:10:32:e2:3b:f0:a7:eb:aa:5a:d5:b4:37:3a:
         cf:6f:29:b1:e9:f7:02:cd:90:27:bb:de:30:c3:78:eb:e1:e7:
         a5:74:cd:dd:86:35:51:09:81:8d:23:f5:33:47:80:70:fe:51:
         0c:86:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:29:02 2024 by rpki-client on console-fra.rpki-client.org