Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
File:                     455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer (raw, json)
Hash identifier:          MlqxgI5ifGyfoXruzn21jZ3G7qpd94G1f6XcrL8C2nU=
Subject key identifier:   D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858456A6304662A9088B032BEAF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Apr 2024 20:21:16 +0000
Certificate not after:    Fri 31 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 399471
                          AS: 400377
                          IP: 107.182.128.0/22
                          IP: 130.51.112.0/22
                          IP: 163.123.140.0/22
                          IP: 208.67.104.0/22
                          IP: 209.182.100.0/22
                          IP: 2606:3f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6a:63:04:66:2a:90:88:b0:32:be:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr  2 20:21:16 2024 GMT
            Not After : Oct 31 00:45:16 2025 GMT
        Subject: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:e6:47:11:a9:b5:f9:ef:c0:1d:4d:6c:0d:
                    3d:68:b0:b3:20:ac:f1:9b:0e:22:8f:3a:7f:04:e8:
                    68:c6:6f:fc:8c:52:8e:92:ad:62:03:84:70:b5:c7:
                    87:62:b2:f1:b3:0f:3d:39:98:95:83:0f:21:3e:1a:
                    a9:49:93:bb:e4:06:24:06:59:32:e0:f9:23:f2:c5:
                    83:bf:a0:27:b2:90:77:33:da:ff:ce:68:fc:d3:32:
                    6a:13:8a:21:cb:41:ae:e5:b3:ff:7c:1e:c3:ce:b4:
                    12:4b:bf:75:8c:b1:d1:34:6d:8d:4c:e9:b3:fd:3e:
                    b4:3c:2d:23:f0:50:00:25:17:a6:5e:66:68:56:10:
                    35:cc:29:20:25:c6:cc:48:e1:d8:15:9b:bb:f4:94:
                    e8:f9:8e:c6:ed:3a:0f:8a:5d:9b:62:fe:1d:99:8b:
                    48:4a:81:5e:1b:02:32:bf:0a:d3:fe:08:a6:d8:97:
                    cb:fe:fd:42:8e:51:0f:0a:e9:18:59:25:30:60:93:
                    36:4d:87:00:4e:27:39:ea:83:e8:28:12:51:cf:4f:
                    c3:72:5f:ab:3a:f0:bf:7a:3e:e5:e4:ef:72:2f:1f:
                    c0:88:7f:f3:29:7d:30:5f:a2:bc:8e:61:68:80:05:
                    d0:39:69:1c:3e:d2:82:39:fd:e4:a3:39:e9:0d:dd:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.128.0/22
                  130.51.112.0/22
                  163.123.140.0/22
                  208.67.104.0/22
                  209.182.100.0/22
                IPv6:
                  2606:3f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399471
                  400377

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:66:72:15:fb:cb:75:0d:1a:2e:5c:10:94:9d:c2:32:08:
         89:cd:8d:f2:fc:ba:d7:4c:83:9e:7a:db:2d:34:28:6d:8d:c0:
         f3:3c:e1:25:4b:b3:29:e9:0f:54:cb:88:81:19:62:d3:cd:1a:
         16:61:c7:6d:03:59:a8:e9:e8:70:63:bc:20:cf:00:31:65:3d:
         9c:d3:72:48:fd:ea:80:3d:26:ec:17:ea:1b:8b:49:b8:39:40:
         b0:76:cd:7c:cc:3f:53:b9:f5:d2:77:81:ec:28:b4:2a:bd:8f:
         d3:5a:6d:99:43:a5:1e:ff:bd:42:31:c7:e6:d9:20:8c:03:d7:
         31:03:5c:91:17:2f:da:4d:0e:ce:4f:cb:6a:f6:81:7a:a3:41:
         51:ad:d8:f3:11:47:b0:60:4a:ba:fb:3c:c9:00:9e:88:ac:2e:
         a0:59:87:d6:17:b9:fd:f0:87:26:e4:74:54:64:2a:90:9a:1f:
         be:76:a0:83:bd:3b:19:27:c9:1d:cb:34:2a:98:d7:45:29:ab:
         57:d5:1c:e3:d2:e9:db:9c:2a:7c:9d:f2:19:1b:4a:22:4e:ac:
         c7:d5:28:7d:b7:83:81:80:dc:ec:99:02:97:33:cd:e3:fd:89:
         0b:28:ad:af:76:f5:58:f7:30:3f:f2:a2:bf:9c:30:55:d8:97:
         a2:0c:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:21:00 2024 by rpki-client on console-fra.rpki-client.org