Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
File:                     a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer (raw, json)
Hash identifier:          I7vr2wUM6dqi2JB0GMxpbwFMm4Hg9k4nxzptbIghLis=
Subject key identifier:   2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584360D82BC64ACD775534AC1A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 29 Sep 2023 00:45:21 +0000
Certificate not after:    Thu 01 Jan 2026 01:45:21 +0000
Subordinate resources:    AS: 29848
                          IP: 45.62.0.0/19
                          IP: 104.201.128.0/17
                          IP: 204.108.162.0/23
                          IP: 2604:9b40::/32
                          IP: 2605::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:d8:2b:c6:4a:cd:77:55:34:ac:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 29 00:45:21 2023 GMT
            Not After : Jan  1 01:45:21 2026 GMT
        Subject: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:26:62:e6:cd:d2:90:59:e8:be:3e:10:17:
                    29:75:df:be:05:7a:f2:90:c8:cf:3e:b2:62:f5:52:
                    36:d8:e0:85:0d:c9:0c:63:ca:60:c8:e8:cb:ce:ef:
                    cb:86:54:4a:a2:f6:7e:ef:b2:ce:9e:f9:de:df:34:
                    03:63:24:fb:b0:d5:0b:0e:c1:72:af:de:87:ed:9f:
                    b5:6a:7b:e5:d8:dc:9a:21:47:b4:2c:88:a1:05:94:
                    56:2a:04:fa:5f:8b:b3:78:41:ce:4e:59:e0:c0:41:
                    9e:2a:fe:41:ec:8d:45:d0:b3:46:25:e5:24:bb:de:
                    b1:ab:a4:19:b9:7d:50:65:56:ea:06:d5:11:fa:1a:
                    1f:9a:00:29:e7:8a:a3:85:67:43:55:cd:cd:37:20:
                    d1:2e:a3:0f:45:99:67:3b:e2:f4:30:10:1f:12:c6:
                    57:11:62:bc:27:61:dd:8f:1e:d2:92:d8:06:1d:14:
                    4c:6b:ea:ca:8b:49:eb:76:03:ca:f1:ed:d3:6b:a1:
                    f0:79:5b:2c:ef:da:01:4c:20:a9:73:6d:66:03:74:
                    6e:b0:02:76:50:60:8d:c2:eb:e9:0a:65:c4:b8:45:
                    ea:f7:95:1f:a8:25:cf:a6:ff:a7:c5:ee:dc:9e:32:
                    80:00:96:c7:8e:5e:39:74:98:5a:64:74:e3:83:21:
                    f6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.0.0/19
                  104.201.128.0/17
                  204.108.162.0/23
                IPv6:
                  2604:9b40::/32
                  2605::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29848

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:3d:f9:e0:e3:1f:e2:3a:a6:05:2a:53:c5:9a:81:d3:15:
         b8:26:01:f2:a5:6c:51:ef:75:ac:ed:0c:8e:f5:96:1a:1a:e8:
         4d:9b:56:42:44:79:94:91:12:df:ab:80:be:70:2f:e5:32:f6:
         c5:9a:1e:ee:12:84:79:09:56:9a:33:1f:e7:e0:6f:42:b1:c9:
         75:b9:a8:27:3b:96:54:ad:09:fe:21:d4:3a:c9:22:16:91:85:
         9d:73:f4:e8:29:a2:7d:3c:10:3b:30:56:4d:ee:d8:93:66:b8:
         7f:7c:3d:40:d7:60:e4:9d:f1:f7:57:aa:fa:4b:0a:83:cc:18:
         b8:f7:a3:20:c2:f2:e3:5d:6f:f0:1b:cb:e5:7b:ee:c1:71:67:
         17:51:a1:94:61:e2:85:2f:36:d6:2c:77:40:12:db:9f:eb:6a:
         75:ea:d1:8c:27:38:b7:42:df:47:11:30:c5:1e:0a:64:b1:68:
         bb:83:ad:4d:12:1d:b8:81:31:9a:ee:ca:25:96:56:76:41:e4:
         86:01:2b:61:63:d0:0e:ab:17:75:3e:01:66:8b:76:b3:45:10:
         44:02:90:56:c0:d8:32:36:c8:dd:2e:3b:d8:0c:09:7d:cc:3b:
         bd:6b:bc:a4:b9:23:58:78:f1:f2:14:c3:d4:fc:02:e4:0e:ab:
         77:13:ac:31
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWENg2CvGSs13VTSsGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDkyOTAwNDUyMVoXDTI2MDEwMTAxNDUyMVowLzEtMCsGA1UEAxMk
YTkyYzBlM2UtZTc4Ni00MGYxLWEyMTEtYmY4YTliMzEzMTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8AmYubN0pBZ6L4+EBcpdd++BXrykMjPPrJi
9VI22OCFDckMY8pgyOjLzu/LhlRKovZ+77LOnvne3zQDYyT7sNULDsFyr96H7Z+1
anvl2NyaIUe0LIihBZRWKgT6X4uzeEHOTlngwEGeKv5B7I1F0LNGJeUku96xq6QZ
uX1QZVbqBtUR+hofmgAp54qjhWdDVc3NNyDRLqMPRZlnO+L0MBAfEsZXEWK8J2Hd
jx7SktgGHRRMa+rKi0nrdgPK8e3Ta6HweVss79oBTCCpc21mA3RusAJ2UGCNwuvp
CmXEuEXq95UfqCXPpv+nxe7cnjKAAJbHjl45dJhaZHTjgyH2swIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFCwfNcnDKfFZHpwu5YIlsHn1Z7p1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h
OTJjMGUzZS1lNzg2LTQwZjEtYTIxMS1iZjhhOWIzMTMxNWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2E5MmMwZTNlLWU3ODYtNDBmMS1h
MjExLWJmOGE5YjMxMzE1Yi9hOTJjMGUzZS1lNzg2LTQwZjEtYTIxMS1iZjhhOWIz
MTMxNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQQYIKwYBBQUH
AQcBAf8EMjAwMBgEAgABMBIDBAUtPgADBAdoyYADBAHMbKIwFAQCAAIwDgMFACYE
m0ADBQAmBQAAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnSYMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHoI
Pfng4x/iOqYFKlPFmoHTFbgmAfKlbFHvdaztDI71lhoa6E2bVkJEeZSREt+rgL5w
L+Uy9sWaHu4ShHkJVpozH+fgb0KxyXW5qCc7llStCf4h1DrJIhaRhZ1z9Ogpon08
EDswVk3u2JNmuH98PUDXYOSd8fdXqvpLCoPMGLj3oyDC8uNdb/Aby+V77sFxZxdR
oZRh4oUvNtYsd0AS25/ranXq0YwnOLdC30cRMMUeCmSxaLuDrU0SHbiBMZruyiWW
VnZB5IYBK2Fj0A6rF3U+AWaLdrNFEEQCkFbA2DI2yN0uO9gMCX3MO71rvKS5I1h4
8fIUw9T8AuQOq3cTrDE=
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:40:55 2024 by rpki-client on console-fra.rpki-client.org