Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
File:                     d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer (raw, json)
Hash identifier:          r0Qm8kkKabvJAc1FGHGgMpTTFI44Ulem7S83I13aEb4=
Subject key identifier:   BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E48348E73FB8617231DD0940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 19 May 2025 19:06:39 +0000
Subordinate resources:    AS: 1280
                          AS: 3557
                          IP: 149.20.0.0 -- 149.20.67.255
                          IP: 149.20.72.0 -- 149.20.88.255
                          IP: 149.20.90.0 -- 149.20.95.255
                          IP: 192.5.4.0/23
                          IP: 204.152.184.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:e7:3f:b8:61:72:31:dd:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 19 19:06:39 2025 GMT
        Subject: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:c6:2a:0b:4a:f1:e1:fb:e9:cc:21:5b:4b:
                    1f:d3:d9:ee:d3:c3:7b:fa:1e:8a:42:51:1a:3e:71:
                    62:18:cd:b3:78:86:56:0c:05:41:38:87:b5:3d:cc:
                    80:54:50:a1:51:a8:6c:f3:5e:94:ef:31:3a:69:a4:
                    e4:24:f4:f4:6e:44:8e:a5:03:0a:cf:d5:8e:a1:49:
                    82:12:8a:d9:2f:87:c0:e5:3a:1b:06:72:63:5f:e8:
                    59:62:e4:07:67:ba:64:12:8b:96:4f:80:5d:0b:a3:
                    49:8e:ee:1a:4d:9b:49:57:6a:e1:99:fb:92:a4:68:
                    d1:57:31:70:64:f3:0e:9e:f5:0c:5c:6e:bd:8f:bf:
                    02:ff:27:42:9d:f0:1b:c1:a0:8b:3e:17:56:2b:a3:
                    37:34:44:ed:90:e8:05:36:1b:6e:bc:f0:76:37:e0:
                    3c:22:6e:88:0e:7f:b1:4c:be:50:57:ab:4b:1e:7c:
                    a6:9b:f3:da:6b:36:2c:c8:c8:d3:f5:56:4e:6c:5f:
                    86:d8:12:2f:61:19:0f:01:df:fa:2f:11:16:62:b2:
                    03:5a:de:ba:27:f5:9b:20:33:70:24:e1:96:bd:8d:
                    ac:e8:ab:68:7e:1b:6c:46:a6:ba:11:e2:0a:ec:b1:
                    74:c8:d1:d8:ce:72:92:58:83:56:46:49:66:c0:ed:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.0.0-149.20.67.255
                  149.20.72.0-149.20.88.255
                  149.20.90.0-149.20.95.255
                  192.5.4.0/23
                  204.152.184.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1280
                  3557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:50:ad:79:2a:e9:b0:c8:50:7c:87:08:b8:74:89:f8:a7:60:
         54:b0:4f:f9:aa:90:8a:fe:c9:43:d1:47:f6:f1:42:68:9d:df:
         3b:6c:6c:58:05:1b:0d:e3:59:66:55:89:28:6f:ab:0c:aa:d6:
         40:93:d3:02:23:4e:0f:21:91:6e:3f:c6:74:38:07:74:c4:1f:
         e1:c1:57:1c:c8:97:39:ac:e9:86:2a:cd:31:d9:6b:00:77:e4:
         39:c3:34:04:54:be:59:52:14:4a:d1:dd:ca:c5:04:ef:ed:e4:
         ea:d9:7f:5b:45:8a:9f:a6:e4:6a:a7:23:ff:66:8d:3e:f2:ae:
         35:79:b7:a0:0e:bc:98:f3:9d:9d:58:15:d2:73:62:73:0b:69:
         20:16:31:e2:43:8b:f0:9b:48:5f:64:14:95:17:3b:85:f5:ea:
         62:81:85:2a:df:d5:e6:d9:30:49:41:fc:84:f1:20:58:d4:10:
         4f:62:50:46:37:06:d6:a9:c0:38:64:67:d3:4c:96:f8:ad:ca:
         0f:d2:fb:04:fb:dd:dd:0b:85:a4:90:3c:7e:be:84:1d:17:06:
         fb:db:fa:17:62:0f:27:af:3e:72:ef:18:5f:ee:59:ff:85:4f:
         14:1e:7d:4f:23:5a:b7:84:5f:ff:a6:03:43:02:4e:ee:15:a8:
         54:88:88:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:44:22 2024 by rpki-client on console-ams.rpki-client.org