Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
File:                     d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer (raw, json)
Hash identifier:          FlnEdc5312JDOX5IsVV99pS4S1KyVZ1UwSaUF4lUoo8=
Subject key identifier:   BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845EE1C3A40A9FACDBC22627C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 May 2024 00:45:20 +0000
Certificate not after:    Sun 23 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 1280
                          AS: 3557
                          IP: 149.20.0.0 -- 149.20.67.255
                          IP: 149.20.72.0 -- 149.20.88.255
                          IP: 149.20.90.0 -- 149.20.95.255
                          IP: 192.5.4.0/23
                          IP: 204.152.184.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ee:1c:3a:40:a9:fa:cd:bc:22:62:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 20 00:45:20 2024 GMT
            Not After : Aug 23 00:45:20 2026 GMT
        Subject: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:c6:2a:0b:4a:f1:e1:fb:e9:cc:21:5b:4b:
                    1f:d3:d9:ee:d3:c3:7b:fa:1e:8a:42:51:1a:3e:71:
                    62:18:cd:b3:78:86:56:0c:05:41:38:87:b5:3d:cc:
                    80:54:50:a1:51:a8:6c:f3:5e:94:ef:31:3a:69:a4:
                    e4:24:f4:f4:6e:44:8e:a5:03:0a:cf:d5:8e:a1:49:
                    82:12:8a:d9:2f:87:c0:e5:3a:1b:06:72:63:5f:e8:
                    59:62:e4:07:67:ba:64:12:8b:96:4f:80:5d:0b:a3:
                    49:8e:ee:1a:4d:9b:49:57:6a:e1:99:fb:92:a4:68:
                    d1:57:31:70:64:f3:0e:9e:f5:0c:5c:6e:bd:8f:bf:
                    02:ff:27:42:9d:f0:1b:c1:a0:8b:3e:17:56:2b:a3:
                    37:34:44:ed:90:e8:05:36:1b:6e:bc:f0:76:37:e0:
                    3c:22:6e:88:0e:7f:b1:4c:be:50:57:ab:4b:1e:7c:
                    a6:9b:f3:da:6b:36:2c:c8:c8:d3:f5:56:4e:6c:5f:
                    86:d8:12:2f:61:19:0f:01:df:fa:2f:11:16:62:b2:
                    03:5a:de:ba:27:f5:9b:20:33:70:24:e1:96:bd:8d:
                    ac:e8:ab:68:7e:1b:6c:46:a6:ba:11:e2:0a:ec:b1:
                    74:c8:d1:d8:ce:72:92:58:83:56:46:49:66:c0:ed:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.0.0-149.20.67.255
                  149.20.72.0-149.20.88.255
                  149.20.90.0-149.20.95.255
                  192.5.4.0/23
                  204.152.184.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1280
                  3557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:12:37:7a:7b:2f:ba:d6:5e:3b:39:42:1d:ef:67:14:10:
         2d:4f:ae:c3:4b:b4:d5:ba:e3:dd:ae:68:ff:a2:94:d1:77:db:
         69:9e:09:80:db:60:8c:ed:9f:6e:b1:33:8f:53:8e:99:e9:3c:
         58:da:ee:ce:d3:60:df:79:c2:0b:44:fd:ec:23:0c:1c:f3:88:
         b1:87:b4:b4:65:6a:81:21:48:1c:5a:c8:44:1d:aa:63:a3:19:
         0a:cf:9d:15:73:32:b9:e8:fa:0e:7b:84:a8:3b:6e:1b:67:89:
         99:9f:e4:80:87:3f:d1:8f:99:f9:82:85:80:42:b4:09:c4:5f:
         ba:4b:87:fa:60:e3:64:9e:68:cc:f2:7d:82:6e:ca:3b:9c:82:
         06:d5:f0:bb:4c:3b:e6:7e:b9:ce:c1:8c:2a:18:79:ec:01:1c:
         35:e3:0d:4e:49:a1:e1:fd:c1:fb:1f:a4:42:28:7d:cb:ed:9b:
         9d:a3:88:7c:b4:43:e4:e3:84:bc:26:0b:dc:1c:da:f1:a5:92:
         5d:a5:ee:eb:20:13:dc:cd:3b:f3:b3:c1:e7:37:fd:81:8b:fa:
         2c:6b:27:b6:6e:01:fc:a0:5d:a4:3d:8b:0a:ad:94:2e:ef:b0:
         a3:41:92:c2:bd:c9:6f:59:95:8c:ec:13:6a:99:c0:8f:23:14:
         ca:1d:c2:27
-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEXuHDpAqfrNvCJifEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDUyMDAwNDUyMFoXDTI2MDgyMzAwNDUyMFowLzEtMCsGA1UEAxMk
ZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4NTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq7GKgtK8eH76cwhW0sf09nu08N7+h6KQlEa
PnFiGM2zeIZWDAVBOIe1PcyAVFChUahs816U7zE6aaTkJPT0bkSOpQMKz9WOoUmC
EorZL4fA5TobBnJjX+hZYuQHZ7pkEouWT4BdC6NJju4aTZtJV2rhmfuSpGjRVzFw
ZPMOnvUMXG69j78C/ydCnfAbwaCLPhdWK6M3NETtkOgFNhtuvPB2N+A8Im6IDn+x
TL5QV6tLHnymm/PaazYsyMjT9VZObF+G2BIvYRkPAd/6LxEWYrIDWt66J/WbIDNw
JOGWvY2s6KtofhtsRqa6EeIK7LF0yNHYznKSWINWRklmwO04WQIDAQABo4IETTCC
BEkwHQYDVR0OBBYEFLqMMSfwe2hZDgmEZ+qbpFSEgvWOMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k
NDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Q0MGI4NDc2LWY0OGEtNGNmMi1h
YmNmLWY0ZmExZGYyODUxMC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRm
Mjg1MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwTgYIKwYBBQUH
AQcBAf8EPzA9MDsEAgABMDUwCwMDApUUAwQClRRAMAwDBAOVFEgDBACVFFgwDAME
AZUUWgMEBZUUQAMEAcAFBAMEA8yYuDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIF
AAICDeUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAJ6ISN3p7L7rWXjs5Qh3vZxQQLU+uw0u01brj3a5o/6KU
0XfbaZ4JgNtgjO2fbrEzj1OOmek8WNruztNg33nCC0T97CMMHPOIsYe0tGVqgSFI
HFrIRB2qY6MZCs+dFXMyuej6DnuEqDtuG2eJmZ/kgIc/0Y+Z+YKFgEK0CcRfukuH
+mDjZJ5ozPJ9gm7KO5yCBtXwu0w75n65zsGMKhh57AEcNeMNTkmh4f3B+x+kQih9
y+2bnaOIfLRD5OOEvCYL3Bza8aWSXaXu6yAT3M0787PB5zf9gYv6LGsntm4B/KBd
pD2LCq2ULu+wo0GSwr3Jb1mVjOwTapnAjyMUyh3CJw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:00 2024 by rpki-client on console-fra.rpki-client.org