Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer
File:                     95cc1176-f33c-4294-a79a-4ace8f16f714.cer (raw, json)
Hash identifier:          42dcB0fI3caBh/bCFLgVvfDy5dvvQx4P4ORZIfJiAbo=
Subject key identifier:   5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285848731E203B86983E659027FE20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 Jan 2025 01:45:33 +0000
Certificate not after:    Sun 11 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 396321
                          IP: 52.119.32.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:1e:20:3b:86:98:3e:65:90:27:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan  6 01:45:33 2025 GMT
            Not After : Apr 11 00:45:33 2027 GMT
        Subject: CN=95cc1176-f33c-4294-a79a-4ace8f16f714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:44:ce:e2:5c:44:77:92:e3:b1:9a:91:bb:
                    e5:04:62:7c:e7:3d:9f:1b:af:ff:e8:2a:ad:4c:af:
                    db:03:9c:e7:0c:87:d6:96:08:9d:16:c1:93:c6:c4:
                    ad:8d:fa:4e:23:1b:4a:a9:a0:23:55:ca:f2:10:d5:
                    7f:8e:69:f7:04:85:b5:4b:53:82:be:8f:37:cc:35:
                    1b:46:a2:86:be:bd:6a:dc:02:d4:39:3f:15:d1:bb:
                    65:3f:d4:93:3b:5a:ea:7d:1a:33:38:82:50:f5:30:
                    be:e8:7d:d6:6c:93:3c:3e:84:f8:af:f3:5d:ae:f6:
                    12:58:0d:1d:f5:af:ad:57:5a:5c:e1:e1:16:b0:e0:
                    2c:f0:b4:34:c2:15:7a:7b:7a:52:a2:72:5b:09:d5:
                    73:96:f2:3a:94:81:df:2e:d5:5d:fe:2e:bf:f9:75:
                    c0:d7:34:d6:fd:8a:9a:de:99:36:c5:30:e5:48:19:
                    a7:2d:9e:cf:06:1f:3c:a3:ba:0a:57:1d:b5:ca:6d:
                    0b:32:91:85:5e:58:b6:32:7e:9a:f4:8f:59:81:b4:
                    00:77:d1:0c:5f:88:e7:d0:f4:41:66:20:f4:2e:9c:
                    0a:3a:ab:73:9d:95:07:bc:45:b9:96:58:21:64:f9:
                    7b:20:fe:75:0f:fb:db:b9:56:1d:53:30:d2:ad:2b:
                    44:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.32.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396321

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:05:d9:9c:63:f5:72:5a:f2:c1:77:e8:11:e0:27:f7:d7:3e:
         80:8f:e9:81:8c:ee:b8:78:75:bc:d8:94:73:ee:54:3a:4e:1a:
         2f:62:43:2f:6a:5b:81:cd:56:c8:2a:2a:c5:4d:59:ef:e3:25:
         e6:aa:3d:dd:44:09:b7:80:cf:1a:25:be:55:ba:c9:48:5b:ea:
         7e:f5:98:fe:d5:f9:c9:e8:62:1a:2d:1c:4e:a5:ac:d3:8e:ee:
         19:3f:96:ca:2d:64:5e:de:f3:c2:5b:fe:ab:bb:5d:65:53:a6:
         eb:93:78:e0:58:4c:e4:e6:25:08:bb:aa:92:ba:e8:50:8b:82:
         6a:43:80:d8:60:9e:72:da:40:6b:08:bc:cc:f4:73:7a:b0:78:
         de:29:ce:f8:9c:45:67:fa:c2:86:ff:e9:01:f3:43:07:e9:22:
         08:8a:a1:73:15:ab:43:55:9c:c3:32:cf:aa:a8:9b:a9:1e:cd:
         11:4a:c7:d2:c0:cf:6e:a4:d4:10:d3:6d:02:df:ab:fa:82:a7:
         6c:78:29:fb:73:5c:31:00:2b:b4:77:4e:3b:d8:19:83:97:14:
         c0:f5:ac:16:2c:8a:2b:83:5e:96:c4:c6:d3:0e:fe:e3:05:15:
         fc:13:9f:e8:df:69:8d:2c:19:5f:48:58:b2:59:6e:fb:d2:95:
         7f:83:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 19:46:21 2025 by rpki-client