Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer
File:                     445d9dfe-8c66-4b5b-bc81-6ebebd514945.cer (raw, json)
Hash identifier:          +NDPdFZvMBP7fngiOYWWq2BAyk1W9v9uyK2EGZkjUBo=
Subject key identifier:   A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584543D0823C6D35526BA60C8F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Mar 2024 00:45:21 +0000
Certificate not after:    Tue 23 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 15317
                          IP: 162.221.224.0/22
                          IP: 162.252.20.0/22
                          IP: 173.214.240.0/20
                          IP: 192.133.136.0/21
                          IP: 199.182.160.0/21
                          IP: 216.172.48.0/20
                          IP: 2605:5b00::/28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:d0:82:3c:6d:35:52:6b:a6:0c:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 20 00:45:21 2024 GMT
            Not After : Jun 23 00:45:21 2026 GMT
        Subject: CN=445d9dfe-8c66-4b5b-bc81-6ebebd514945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:0b:ef:ec:5d:57:d3:7b:c0:c5:4e:ac:d7:
                    0d:5e:62:f8:af:d8:2e:ee:58:f8:26:73:07:54:ea:
                    6a:29:f2:a4:f2:8d:8a:c2:f0:c7:19:ee:30:70:13:
                    82:b6:a4:79:d6:a3:c3:e9:c7:1d:d7:61:17:d5:c1:
                    1a:e8:08:df:db:c0:34:b9:6a:4d:ee:0e:b2:4d:4d:
                    06:b3:4d:92:30:44:1a:12:22:a8:f3:d7:dc:73:e5:
                    fa:50:12:34:00:f3:e5:28:b5:bb:68:87:7d:b6:13:
                    94:60:d0:86:dc:95:4b:81:cb:11:83:e1:2f:92:9d:
                    9c:36:b6:dc:07:58:67:d0:31:f1:3d:e7:18:16:f7:
                    d7:f3:a0:1d:4c:f2:0a:71:20:69:7a:49:95:3a:75:
                    b0:70:ae:b3:46:93:61:17:a1:77:e8:99:1a:cd:f7:
                    2c:10:ba:35:85:41:b0:56:98:8c:4f:50:5a:d1:bf:
                    6a:8c:8e:e1:2b:9d:48:e6:9e:ef:87:0a:b8:8e:31:
                    0a:57:51:90:2c:2e:6d:20:e2:3d:ba:e8:19:0e:1c:
                    a1:96:eb:52:ae:1f:fb:96:f5:b3:d7:49:a4:36:0f:
                    91:c4:2d:b7:c2:a9:1c:f3:a1:53:cd:e4:b2:5b:4e:
                    c6:6e:f5:9f:1d:43:d7:06:e3:af:6b:c1:db:33:4b:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:B0:F8:01:52:04:F5:65:D7:EC:99:3F:C9:98:58:BC:85:C2:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/445d9dfe-8c66-4b5b-bc81-6ebebd514945/445d9dfe-8c66-4b5b-bc81-6ebebd514945.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.224.0/22
                  162.252.20.0/22
                  173.214.240.0/20
                  192.133.136.0/21
                  199.182.160.0/21
                  216.172.48.0/20
                IPv6:
                  2605:5b00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15317

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:40:bd:62:6a:f2:1f:70:1e:ac:26:4d:f6:66:bc:d4:80:3e:
         fc:9d:ce:dd:95:27:7e:c7:84:6f:2e:03:db:4b:66:42:ae:0c:
         46:e9:a0:75:ac:2f:30:93:e8:cd:4c:5e:79:3d:02:27:82:0c:
         1f:f0:58:ef:2d:f8:bb:7d:82:ec:64:41:fc:43:04:2e:e3:7a:
         7e:24:bc:b5:89:86:d4:a9:8a:a0:ad:8e:bf:42:f2:5c:6f:f3:
         ce:37:38:e9:f4:e9:5b:68:9d:13:49:65:5e:80:75:d6:d6:d7:
         34:ea:da:77:e3:6a:38:c2:eb:d7:7f:d8:7c:97:b7:ff:ad:73:
         b4:49:ac:8f:35:3b:8a:b5:a7:5d:25:7b:92:3d:ac:fb:7f:ad:
         6c:c5:49:70:b0:2a:d6:c3:66:e4:4c:11:90:22:9f:ef:99:98:
         ab:f8:fc:56:f8:c0:83:d6:75:68:c9:9f:01:08:5d:5e:00:3a:
         e4:11:f2:95:8c:17:5c:0b:41:ee:a6:bd:bc:8b:e9:d7:f8:2f:
         55:76:8f:67:9e:f5:ae:09:c7:bd:81:f6:ca:45:f6:c0:d7:dd:
         f6:da:56:f6:df:e2:cc:bf:e1:cb:ee:51:2b:15:b6:6d:65:7f:
         e7:82:32:7e:60:e4:71:50:d2:4b:b2:12:c1:78:a2:c0:28:af:
         ea:5b:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:49:55 2024 by rpki-client on console-ams.rpki-client.org