Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca.cer
File:                     736df059-86cb-4a7f-b49e-44e0134dfbca.cer (raw, json)
Hash identifier:          Smi9I1XpwB8nzXSXeUZsQ8Oz+4dOD6lqTND2pYMpMXY=
Subject key identifier:   59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858459FF112BCE1C6F0B6084AC300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Apr 2024 00:45:20 +0000
Certificate not after:    Sun 26 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 23260
                          IP: 66.9.32.0/21
                          IP: 72.14.112.0/22
                          IP: 161.199.184.0/22
                          IP: 162.216.216.0/22
                          IP: 192.80.176.0/21
                          IP: 208.118.144.0/20
                          IP: 209.25.148.0/22
                          IP: 216.173.144.0/20
                          IP: 216.247.248.0/22
                          IP: 2604:8d40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9f:f1:12:bc:e1:c6:f0:b6:08:4a:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr 22 00:45:20 2024 GMT
            Not After : Jul 26 00:45:20 2026 GMT
        Subject: CN=736df059-86cb-4a7f-b49e-44e0134dfbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:c7:f2:16:10:2e:5d:9a:d8:1a:e4:0c:b5:
                    c5:56:69:30:73:c0:38:e7:60:a8:b1:95:11:7d:07:
                    59:0e:34:f8:af:75:22:27:48:f9:2f:17:3d:48:61:
                    7d:70:e4:46:d3:35:36:56:11:23:c6:70:5e:ab:25:
                    47:70:78:df:8f:da:37:96:f7:21:64:92:73:25:25:
                    9a:bd:e4:90:02:1b:2b:50:fd:76:3b:fe:5f:4b:c1:
                    87:86:3e:a2:74:f8:11:2f:82:0d:78:c5:bc:74:2f:
                    b0:a0:3d:2b:cc:b2:75:71:68:47:b9:61:a7:2c:05:
                    f6:01:19:d5:3e:de:5b:84:3d:9e:31:23:b1:a0:c3:
                    90:e1:72:07:4e:d4:97:a4:8c:e7:cf:69:66:b0:54:
                    1a:a0:13:df:1d:32:97:5c:eb:50:0c:62:62:02:cc:
                    f3:27:91:8b:9e:c7:88:1e:f1:e9:ce:b9:ff:b2:a2:
                    7b:83:6c:d3:42:7a:28:00:b7:91:20:da:57:c1:0a:
                    3a:92:66:18:5c:60:a6:04:16:41:d8:fb:2f:f3:bc:
                    42:32:4d:51:af:41:1b:df:3f:4d:b5:a4:6c:4a:b2:
                    48:36:a5:90:4e:55:f1:33:13:6e:b1:a2:97:16:79:
                    03:c3:ea:b6:df:db:d7:b8:af:1f:c7:af:7c:f6:e1:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:F0:E7:94:84:3E:ED:71:41:6D:A2:1D:5D:FA:BF:A7:6B:18:93
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/736df059-86cb-4a7f-b49e-44e0134dfbca/736df059-86cb-4a7f-b49e-44e0134dfbca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.32.0/21
                  72.14.112.0/22
                  161.199.184.0/22
                  162.216.216.0/22
                  192.80.176.0/21
                  208.118.144.0/20
                  209.25.148.0/22
                  216.173.144.0/20
                  216.247.248.0/22
                IPv6:
                  2604:8d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23260

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:8d:d6:6a:c8:c1:73:4d:ea:ba:c7:a8:b6:76:77:6f:cb:d0:
         d2:06:9c:c8:62:cf:a4:87:7d:5a:72:cb:38:68:fe:9f:3a:85:
         77:ec:b6:e3:a6:38:08:39:c1:52:d7:6f:3d:14:3a:95:a9:b1:
         c6:d1:d9:4f:e2:29:71:49:c8:70:ef:36:d8:1f:73:fb:7c:07:
         b0:ef:de:a1:e7:fe:69:b5:60:4f:68:ba:da:be:f1:d2:73:04:
         04:f8:40:43:cd:1f:f9:20:fa:19:75:3c:42:20:0f:95:14:4d:
         e3:ba:98:db:4f:9c:cb:6c:2f:44:8e:90:6e:86:7d:72:92:49:
         0d:2b:a0:4a:5b:d6:9d:1a:7d:2c:89:e8:4f:41:63:50:17:33:
         48:d5:12:b1:c8:1a:d1:69:ed:59:ee:a1:2b:56:02:30:19:ef:
         ad:f3:c5:0e:14:4a:a5:81:8e:48:10:e6:75:d5:50:0d:c1:6b:
         9d:fc:54:02:1e:30:5a:a1:94:29:b0:7a:bc:1d:1c:bc:a9:a8:
         ce:cc:89:3c:73:ac:1a:49:ed:f4:32:34:40:be:f2:d2:46:55:
         a8:d0:aa:87:fc:bf:f4:7f:6d:b1:e6:71:2b:1c:51:c5:3f:94:
         60:0a:99:c2:a6:8a:47:21:3f:52:8e:2e:70:7c:02:b3:b3:bc:
         77:8b:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:24:22 2024 by rpki-client on console-ams.rpki-client.org