Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer
File:                     9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer (raw, json)
Hash identifier:          UQJrXHYwSwodw8FGRgNBfD7lF2a1lM7jhokJ3UtsQB4=
Subject key identifier:   56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842DAD7537A3D9241611D9B1280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 12 Aug 2023 00:45:20 +0000
Certificate not after:    Fri 14 Nov 2025 01:45:20 +0000
Subordinate resources:    IP: 64.250.128.0/20
                          IP: 104.145.16.0/20
                          IP: 130.51.44.0/22
                          IP: 2620:e6:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:d7:53:7a:3d:92:41:61:1d:9b:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 12 00:45:20 2023 GMT
            Not After : Nov 14 01:45:20 2025 GMT
        Subject: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:f4:82:10:ba:37:fd:af:45:cd:2d:99:c4:
                    84:58:d1:7a:e3:18:c8:ce:2c:04:83:57:1e:a5:0f:
                    85:53:74:dc:75:0e:31:ef:26:50:75:0c:19:02:34:
                    f2:5f:c5:b0:0b:bf:54:29:3a:77:d1:92:8c:1e:04:
                    39:3b:40:16:77:cc:36:7a:de:06:b4:04:50:be:45:
                    1b:6e:93:3e:bf:91:58:35:f6:67:c9:bc:b4:05:aa:
                    3e:d0:8e:6d:96:e5:d9:f1:c7:fc:54:38:4c:54:25:
                    7e:da:2f:fa:54:18:7e:bb:ad:3c:d7:0e:14:c2:a0:
                    7d:ca:6f:cd:24:5b:99:5a:28:cf:9a:9c:60:dd:21:
                    ee:a0:8f:78:65:5d:88:24:b5:d9:5f:99:e1:2a:f6:
                    b8:39:2f:a8:b4:84:34:2b:6b:4c:97:91:b3:5f:eb:
                    31:70:3d:50:0c:de:54:d9:d4:16:3e:de:5f:4d:8c:
                    77:03:ac:b7:94:30:55:ac:eb:14:d0:aa:83:ce:d0:
                    b3:52:30:86:7d:6b:5c:69:49:cb:df:46:11:57:96:
                    3d:3c:21:46:47:c0:4e:f0:38:8c:99:df:73:c7:1c:
                    a5:d7:e5:aa:51:eb:83:f4:16:22:88:b0:62:71:d3:
                    89:72:b6:99:22:d0:71:ac:87:1a:79:64:fd:d9:82:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.250.128.0/20
                  104.145.16.0/20
                  130.51.44.0/22
                IPv6:
                  2620:e6:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:dc:5c:ee:f4:7b:1e:ea:2e:5f:c8:9d:1f:55:9e:e2:b1:
         8b:92:f9:44:df:d0:93:b3:60:72:84:90:49:4f:60:90:c8:0a:
         fe:33:49:de:98:28:e3:b4:6d:e8:d1:06:46:d1:5e:61:37:e3:
         93:c9:6d:c7:b9:4f:ec:c2:55:33:4d:aa:6b:ed:7e:48:c9:3e:
         26:d5:7a:ba:35:29:49:00:61:52:2c:f6:d7:e2:18:38:57:2e:
         01:c7:f4:91:90:6e:27:1e:42:e8:47:bb:60:8d:1d:cb:c1:ba:
         72:f0:9d:c3:f5:3c:23:77:3d:c8:b1:c7:7d:bd:a7:da:84:24:
         1f:4e:d6:27:c4:0f:d0:e5:1b:29:1a:ef:4a:95:a4:d0:35:af:
         4d:4e:53:a3:84:f7:07:ed:ce:0b:56:4d:40:af:16:c3:df:1b:
         17:e5:b2:37:a7:e9:88:ba:6b:7c:2c:d5:7e:9f:38:a6:a3:7a:
         b9:c3:6a:89:6f:09:e8:07:a5:1a:e0:84:c8:57:c9:1b:3a:af:
         aa:cd:13:ea:5a:1c:fb:b1:08:4e:da:97:3e:5a:7d:cb:2e:10:
         c8:0e:58:20:33:22:02:e6:71:bf:48:40:46:0c:20:70:98:0f:
         93:94:ba:e9:6a:17:37:ac:52:b6:c6:16:4c:49:62:ba:c9:42:
         67:cc:ef:3c
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWELa11N6PZJBYR2bEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDgxMjAwNDUyMFoXDTI1MTExNDAxNDUyMFowLzEtMCsGA1UEAxMk
OWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYyZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo70ghC6N/2vRc0tmcSEWNF64xjIziwEg1ce
pQ+FU3TcdQ4x7yZQdQwZAjTyX8WwC79UKTp30ZKMHgQ5O0AWd8w2et4GtARQvkUb
bpM+v5FYNfZnyby0Bao+0I5tluXZ8cf8VDhMVCV+2i/6VBh+u6081w4UwqB9ym/N
JFuZWijPmpxg3SHuoI94ZV2IJLXZX5nhKva4OS+otIQ0K2tMl5GzX+sxcD1QDN5U
2dQWPt5fTYx3A6y3lDBVrOsU0KqDztCzUjCGfWtcaUnL30YRV5Y9PCFGR8BO8DiM
md9zxxyl1+WqUeuD9BYiiLBicdOJcraZItBxrIcaeWT92YL1TwIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFFZFdabcmTkWiLzT/oaa/Zzp/XQbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85
ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzlmZjQzYWFiLWM4YzItNGYyMy05
MWU1LTM3M2JlMjQ2MmU5Zi85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0
NjJlOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwPAYIKwYBBQUH
AQcBAf8ELTArMBgEAgABMBIDBARA+oADBARokRADBAKCMywwDwQCAAIwCQMHACYg
AObAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQCAP9xc7vR7HuouX8idH1We4rGLkvlE39CTs2ByhJBJT2CQ
yAr+M0nemCjjtG3o0QZG0V5hN+OTyW3HuU/swlUzTapr7X5IyT4m1Xq6NSlJAGFS
LPbX4hg4Vy4Bx/SRkG4nHkLoR7tgjR3Lwbpy8J3D9Twjdz3Iscd9vafahCQfTtYn
xA/Q5RspGu9KlaTQNa9NTlOjhPcH7c4LVk1ArxbD3xsX5bI3p+mIumt8LNV+nzim
o3q5w2qJbwnoB6Ua4ITIV8kbOq+qzRPqWhz7sQhO2pc+Wn3LLhDIDlggMyIC5nG/
SEBGDCBwmA+TlLrpahc3rFK2xhZMSWK6yUJnzO88
-----END CERTIFICATE-----
Generated at Fri Apr 19 22:23:08 2024 by rpki-client on console-ams.rpki-client.org