Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56431836-dc90-4bf4-8995-04f78c899154.cer
File:                     56431836-dc90-4bf4-8995-04f78c899154.cer (raw, json)
Hash identifier:          xOkxazVfAi7wxmrzwJw4ZcaHEUaruFB8xPGg+XufS88=
Subject key identifier:   3B:E1:59:3D:60:D9:DB:C7:F3:D3:60:32:25:BA:43:FA:F0:DD:72:C4
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844834D137AD16D76E362C7D100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56431836-dc90-4bf4-8995-04f78c899154/56431836-dc90-4bf4-8995-04f78c899154.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56431836-dc90-4bf4-8995-04f78c899154/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Jan 2024 01:45:20 +0000
Certificate not after:    Wed 15 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 10661
                          IP: 74.119.224.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:83:4d:13:7a:d1:6d:76:e3:62:c7:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 11 01:45:20 2024 GMT
            Not After : Apr 15 00:45:20 2026 GMT
        Subject: CN=56431836-dc90-4bf4-8995-04f78c899154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:15:71:7b:2f:da:86:73:f4:ee:d3:ec:41:
                    7c:35:57:d6:06:b9:fa:a2:90:14:44:ee:5f:18:a7:
                    c9:19:68:3a:be:99:0d:ae:36:06:8d:a2:a7:ad:17:
                    6c:58:6e:97:ec:07:a5:cb:d9:5d:88:c2:8f:06:dd:
                    bc:87:47:b2:20:48:e9:b0:78:c9:2e:79:df:25:ec:
                    84:b2:80:23:29:dc:72:e2:83:98:86:01:a4:9b:59:
                    23:ba:bd:3d:a0:49:f4:e3:e1:86:78:e3:42:5c:2d:
                    0a:e4:68:e7:f7:63:ed:f2:ab:d7:f1:82:c0:a8:da:
                    a9:0a:a2:62:f9:f3:f8:d7:08:6c:99:1f:53:24:0a:
                    6d:62:ab:89:42:d0:aa:f8:8a:16:9c:c7:00:76:35:
                    74:61:31:c5:53:7e:a8:a9:fd:82:53:66:88:33:2f:
                    1d:37:bc:cb:36:2c:3e:f2:29:2d:81:4e:bf:57:0d:
                    77:48:13:97:60:2e:1c:b5:bb:e7:3e:75:9b:06:96:
                    45:4d:bb:20:c6:ec:ed:9f:d4:38:03:04:7b:9c:0f:
                    7a:4c:7a:25:71:7e:49:82:8d:74:ba:f5:03:ab:f9:
                    18:7f:48:6b:32:ee:6b:5e:a5:74:63:22:98:8c:37:
                    3c:f8:3b:e1:a4:6b:55:75:88:07:a1:9a:04:12:ab:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:59:3D:60:D9:DB:C7:F3:D3:60:32:25:BA:43:FA:F0:DD:72:C4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56431836-dc90-4bf4-8995-04f78c899154/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56431836-dc90-4bf4-8995-04f78c899154/56431836-dc90-4bf4-8995-04f78c899154.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.224.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10661

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:00:3d:aa:bd:cb:19:10:21:3e:91:ec:c8:77:2d:8a:83:91:
         b9:d6:83:87:83:cc:9c:b3:fa:da:4a:fe:1f:d1:98:88:d3:0a:
         eb:2f:c1:de:95:d8:07:89:a3:87:ab:be:ef:ed:46:ad:5b:95:
         6c:17:b3:db:e9:0c:b5:04:20:eb:1d:96:c1:00:1d:02:51:45:
         34:57:fe:ab:a1:06:5a:55:8e:12:68:43:aa:dd:b4:15:a3:82:
         ee:d3:6a:f4:88:c0:dc:e4:03:bc:1a:a1:12:65:46:55:ce:7a:
         9d:36:f7:4e:83:fb:79:8a:32:b5:e3:27:dc:97:a0:af:5c:da:
         b9:16:d9:cf:95:a1:10:ae:98:bb:40:0b:47:4c:8f:7a:e3:37:
         90:6d:d8:e8:7a:f8:ac:73:15:10:8e:5d:bc:5f:01:da:7a:8a:
         20:7f:84:05:a2:85:5d:f9:2a:19:12:b0:ea:6a:96:27:19:53:
         a0:f4:c4:22:d5:c2:a8:a1:16:e2:36:b5:96:c7:7b:be:46:ab:
         1f:e0:c6:1d:f8:86:f2:eb:8f:5c:b6:3e:bc:51:4a:3a:07:f3:
         eb:42:35:8f:d6:27:09:ab:8c:40:3f:8e:63:68:a2:3a:ec:80:
         23:ba:64:40:9b:d9:d9:38:d6:fd:5b:48:c0:52:51:a2:b3:8e:
         bb:22:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----