Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
File:                     baebde37-2461-4409-96e1-a720edbe80a7.cer (raw, json)
Hash identifier:          XZYEo9ESYwhcsFZMMIltI8Z/RJ7QTNG2KCA4GAM1Bhw=
Subject key identifier:   50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285846304F1F50E7695AD4628B3780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 17:51:14 +0000
Certificate not after:    Mon 06 Jul 2026 00:45:22 +0000
Subordinate resources:    AS: 11539
                          AS: 16751
                          AS: 18442
                          AS: 19554
                          AS: 21563
                          AS: 22591
                          AS: 26547
                          AS: 26704
                          AS: 27495
                          AS: 27570
                          AS: 31917
                          AS: 32216
                          AS: 32263
                          AS: 35888
                          AS: 46371
                          AS: 395509
                          AS: 395791
                          AS: 397717
                          AS: 398848
                          AS: 399973
                          IP: 66.159.106.0/23
                          IP: 67.202.160.0/20
                          IP: 74.112.144.0/21
                          IP: 137.236.0.0/16
                          IP: 142.75.0.0/16
                          IP: 150.105.0.0/16
                          IP: 162.252.12.0/22
                          IP: 173.243.48.0/20
                          IP: 192.67.53.0/24
                          IP: 192.80.54.0/24
                          IP: 192.138.191.0/24
                          IP: 199.71.120.0/24
                          IP: 199.85.101.0/24
                          IP: 199.182.176.0/21
                          IP: 204.107.28.0/22
                          IP: 204.138.115.0/24
                          IP: 205.211.178.0/24
                          IP: 206.197.31.0/24
                          IP: 206.253.128.0/21
                          IP: 2604:8b00::/32
                          IP: 2620:10c:f000::/40
                          IP: 2620:134:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:30:4f:1f:50:e7:69:5a:d4:62:8b:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 12 17:51:14 2024 GMT
            Not After : Jul  6 00:45:22 2026 GMT
        Subject: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:f4:b2:b2:02:12:f1:4c:6f:53:88:09:01:
                    3c:e4:af:ac:6f:3a:bf:7a:5b:aa:42:a4:41:8e:37:
                    b1:50:85:90:1b:e5:5a:e5:ee:f7:a4:f9:1a:1b:5f:
                    bd:da:6f:11:9d:b6:13:b2:26:d0:5d:ac:ce:af:17:
                    9a:65:0a:40:58:2e:b9:f4:fb:00:2d:90:6d:d8:b0:
                    23:66:8c:df:06:10:86:8c:c2:42:94:4f:b5:f0:3c:
                    48:3c:5b:02:5d:e9:5c:e2:76:c5:b6:07:70:2e:61:
                    5c:e8:f5:ac:48:b1:32:bf:4e:6a:18:05:b1:b4:a5:
                    df:cb:39:1e:0a:b8:f2:40:bc:40:d4:7e:64:a2:70:
                    8f:40:1c:40:3b:b5:21:2c:88:8e:1c:1b:aa:e2:3d:
                    f8:75:6f:8a:fc:8d:da:52:f8:20:3f:b6:3a:dc:ec:
                    77:f6:8d:02:83:ad:7a:c7:e2:eb:67:02:24:2f:bb:
                    ef:06:e6:ea:10:10:c3:d7:83:3f:31:64:f4:db:1d:
                    9d:e9:be:7c:6d:88:20:28:07:4b:e8:07:da:6c:10:
                    79:fd:d6:2b:10:f3:c6:96:31:ed:2b:58:bf:3a:6e:
                    bb:b2:3a:46:c0:bc:bd:4e:69:09:73:ea:40:6b:22:
                    e4:78:39:2d:7e:77:69:6f:d9:47:03:39:0d:cc:c1:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.159.106.0/23
                  67.202.160.0/20
                  74.112.144.0/21
                  137.236.0.0/16
                  142.75.0.0/16
                  150.105.0.0/16
                  162.252.12.0/22
                  173.243.48.0/20
                  192.67.53.0/24
                  192.80.54.0/24
                  192.138.191.0/24
                  199.71.120.0/24
                  199.85.101.0/24
                  199.182.176.0/21
                  204.107.28.0/22
                  204.138.115.0/24
                  205.211.178.0/24
                  206.197.31.0/24
                  206.253.128.0/21
                IPv6:
                  2604:8b00::/32
                  2620:10c:f000::/40
                  2620:134:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11539
                  16751
                  18442
                  19554
                  21563
                  22591
                  26547
                  26704
                  27495
                  27570
                  31917
                  32216
                  32263
                  35888
                  46371
                  395509
                  395791
                  397717
                  398848
                  399973

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:b6:a0:0c:d4:08:73:08:71:42:a6:c3:87:3d:2d:cc:00:
         e6:1d:15:59:5b:13:68:df:9d:e9:a2:95:d4:6c:eb:3d:a5:df:
         cf:2b:a9:12:71:5d:21:7c:85:cf:66:e4:6b:47:80:9a:aa:80:
         30:e2:32:02:b3:e6:12:92:9f:4b:a3:84:ca:39:4d:9d:ae:e9:
         ad:24:01:a9:89:d2:88:9b:5c:a4:25:10:5a:9f:cb:d9:93:aa:
         b4:d4:dd:2c:fd:64:c8:a6:8b:21:01:59:62:85:54:2e:42:18:
         38:d7:11:b6:7c:19:fc:94:53:d9:20:66:8a:66:1a:1e:69:8c:
         39:b8:ea:fd:eb:27:d6:f8:24:41:29:e7:5c:4f:fd:af:a8:67:
         8b:5d:da:f4:29:6c:63:d1:f2:a2:25:03:53:0d:0d:b8:bb:fd:
         48:09:a9:60:a5:b4:dc:76:33:50:d4:4e:08:4f:ad:f4:8c:77:
         2a:a4:0c:32:bf:34:00:e6:1a:dc:7f:ec:af:c9:fd:73:1f:41:
         47:e8:df:08:d9:6a:64:83:b9:16:a6:68:0c:ef:ef:33:db:e1:
         f6:b4:f6:21:f7:a1:d6:57:93:fa:25:c3:35:92:84:72:c1:03:
         f0:d0:04:1e:a6:22:1d:d6:60:16:ad:c6:7f:d8:47:2e:45:ca:
         3e:43:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:37:58 2024 by rpki-client on console-fra.rpki-client.org