Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb.cer
File:                     810a26b8-2ddc-4001-9876-52b54c0695fb.cer (raw, json)
Hash identifier:          e8j2j+ayqGNzBfBdO0WKkXVYnkTlrYVg/BwegfhTeoA=
Subject key identifier:   89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858447DB7B3B83CDCFBE259A3B840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Jan 2024 01:45:19 +0000
Certificate not after:    Mon 13 Apr 2026 00:45:19 +0000
Subordinate resources:    AS: 398041
                          IP: 23.156.16.0/24
                          IP: 104.224.24.0/22
                          IP: 134.195.148.0/22
                          IP: 2605:6840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7d:b7:b3:b8:3c:dc:fb:e2:59:a3:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan  9 01:45:19 2024 GMT
            Not After : Apr 13 00:45:19 2026 GMT
        Subject: CN=810a26b8-2ddc-4001-9876-52b54c0695fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:f4:c9:42:32:87:c6:1d:97:a8:42:ae:3e:
                    1f:27:51:3b:3c:31:30:d2:c9:95:39:a6:3b:2c:14:
                    6f:c5:c4:64:1b:9d:df:00:a5:9f:eb:74:9d:88:8c:
                    54:dc:5d:df:90:d0:ff:d9:b2:04:bd:30:5b:ff:78:
                    f9:09:7b:25:0d:e6:e4:0b:7c:3b:58:60:61:10:74:
                    50:35:35:3e:dc:d4:fc:70:51:51:9c:ca:49:64:ee:
                    86:4f:5b:a3:39:4c:2c:fa:63:fa:26:33:1b:d3:1b:
                    21:66:cc:0a:f7:73:37:e4:7b:da:9e:49:bd:90:f6:
                    cc:d6:30:f3:19:a1:4b:e7:60:97:e8:17:47:ed:85:
                    b4:08:d0:a0:60:ab:e5:1b:4c:15:f2:a4:15:4f:d8:
                    54:5a:1a:d6:d7:d9:d0:21:aa:c7:56:27:1e:18:8f:
                    bb:6c:59:45:2c:70:0b:88:33:52:88:97:65:a3:3e:
                    66:f6:b3:d2:d4:a4:39:19:eb:f7:42:a9:f0:af:60:
                    2d:87:b2:e7:fd:b4:ac:57:87:05:39:93:e9:01:c2:
                    30:d9:f0:e9:25:9a:ec:ec:82:04:e3:a7:2d:b0:bf:
                    29:d9:30:bb:b3:80:79:c8:5a:40:5a:5d:01:59:14:
                    02:56:1c:b8:d0:ea:ed:4a:6f:53:1f:e1:a2:1b:a8:
                    4f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:B7:DA:D7:26:DD:6E:D2:E3:A5:FD:4F:31:E0:0C:4F:9E:7E:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/810a26b8-2ddc-4001-9876-52b54c0695fb/810a26b8-2ddc-4001-9876-52b54c0695fb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.16.0/24
                  104.224.24.0/22
                  134.195.148.0/22
                IPv6:
                  2605:6840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:10:92:b0:f1:0a:69:c0:00:f5:73:89:4a:ad:94:43:ad:d2:
         ae:7f:b0:16:35:b8:50:b2:f1:f8:33:20:6f:45:38:ec:92:5c:
         37:14:55:f1:96:97:f6:a0:0a:2c:0a:8f:29:6c:d2:bc:b8:07:
         e2:1d:96:c7:da:20:36:f1:15:4b:75:6c:ea:51:69:c3:67:89:
         31:20:c4:e8:7a:df:d6:f7:24:56:5a:a8:8d:a6:e1:7d:6f:16:
         27:0f:5b:a1:d9:05:0e:0d:01:a1:2f:75:e3:d2:a7:8e:36:65:
         b3:ba:80:e4:5f:d8:ae:8b:0a:f5:45:9d:79:28:26:ee:06:21:
         71:19:e2:2d:15:f0:6c:32:d0:31:a9:c8:b1:35:d3:0f:60:c2:
         1f:5a:af:30:aa:e2:a7:45:1e:50:c6:04:d8:ab:12:68:45:f9:
         24:d9:e1:b5:08:34:35:53:03:de:2c:57:34:f3:05:40:ac:2b:
         6f:cf:07:68:0e:6a:9d:fe:90:ac:09:cf:72:0c:e8:2a:79:7d:
         31:2d:52:f9:c4:d2:6b:51:3a:af:45:5d:97:0b:33:9c:46:f8:
         94:d8:64:cf:c8:e9:b4:fe:12:30:80:50:3a:44:d4:46:ad:a3:
         ae:e7:16:96:d3:60:1e:72:e7:cd:2e:95:4a:1a:0e:05:3c:b3:
         78:d5:44:af
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWER9t7O4PNz74lmjuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDEwOTAxNDUxOVoXDTI2MDQxMzAwNDUxOVowLzEtMCsGA1UEAxMk
ODEwYTI2YjgtMmRkYy00MDAxLTk4NzYtNTJiNTRjMDY5NWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7n0yUIyh8Ydl6hCrj4fJ1E7PDEw0smVOaY7
LBRvxcRkG53fAKWf63SdiIxU3F3fkND/2bIEvTBb/3j5CXslDebkC3w7WGBhEHRQ
NTU+3NT8cFFRnMpJZO6GT1ujOUws+mP6JjMb0xshZswK93M35Hvankm9kPbM1jDz
GaFL52CX6BdH7YW0CNCgYKvlG0wV8qQVT9hUWhrW19nQIarHViceGI+7bFlFLHAL
iDNSiJdloz5m9rPS1KQ5Gev3Qqnwr2Ath7Ln/bSsV4cFOZPpAcIw2fDpJZrs7IIE
46ctsL8p2TC7s4B5yFpAWl0BWRQCVhy40OrtSm9TH+GiG6hPWQIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFInJt9rXJt1u0uOl/U8x4AxPnn6oMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84
MTBhMjZiOC0yZGRjLTQwMDEtOTg3Ni01MmI1NGMwNjk1ZmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzgxMGEyNmI4LTJkZGMtNDAwMS05
ODc2LTUyYjU0YzA2OTVmYi84MTBhMjZiOC0yZGRjLTQwMDEtOTg3Ni01MmI1NGMw
Njk1ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAAXnBADBAJo4BgDBAKGw5QwDQQCAAIwBwMFACYF
aEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhLZMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADUQkrDxCmnA
APVziUqtlEOt0q5/sBY1uFCy8fgzIG9FOOySXDcUVfGWl/agCiwKjyls0ry4B+Id
lsfaIDbxFUt1bOpRacNniTEgxOh639b3JFZaqI2m4X1vFicPW6HZBQ4NAaEvdePS
p442ZbO6gORf2K6LCvVFnXkoJu4GIXEZ4i0V8Gwy0DGpyLE10w9gwh9arzCq4qdF
HlDGBNirEmhF+STZ4bUINDVTA94sVzTzBUCsK2/PB2gOap3+kKwJz3IM6Cp5fTEt
UvnE0mtROq9FXZcLM5xG+JTYZM/I6bT+EjCAUDpE1Eato67nFpbTYB5y580ulUoa
DgU8s3jVRK8=
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:17:56 2024 by rpki-client on console-fra.rpki-client.org