Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
File:                     ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer (raw, json)
Hash identifier:          KKnlJRkTCDQhQ4HhfTX8JfYpLts9tBDHjHRs34xbIqk=
Subject key identifier:   00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844A4B866DA0C81AB4AAAF1EA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Jan 2024 01:03:15 +0000
Certificate not after:    Tue 21 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 26271
                          AS: 397186
                          IP: 64.25.192.0/20
                          IP: 107.161.128.0/20
                          IP: 107.181.192.0/19
                          IP: 138.229.32.0/19
                          IP: 162.249.112.0/22
                          IP: 162.250.24.0/21
                          IP: 207.241.128.0/20
                          IP: 2606:e400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a4:b8:66:da:0c:81:ab:4a:aa:f1:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 23 01:03:15 2024 GMT
            Not After : Oct 21 00:45:16 2025 GMT
        Subject: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:32:81:32:bd:93:a4:e3:ca:38:d9:c7:7f:
                    98:58:86:93:ca:d6:f9:d0:cc:4b:e8:2c:ef:08:79:
                    97:bd:b3:e3:72:ac:72:5c:90:e0:c5:a0:a0:dd:5f:
                    aa:74:2f:7e:55:cc:c9:99:15:fd:45:85:00:95:63:
                    b4:cf:97:7f:a7:03:74:5f:6c:22:8e:db:88:b6:77:
                    43:ae:8b:ff:fe:ea:d4:45:2f:ec:e2:dc:ba:e7:9e:
                    9c:e8:72:87:09:4f:3e:8e:1e:dc:b1:49:2a:7b:0b:
                    3f:f5:18:ba:b9:f4:c2:31:41:b2:bf:ab:80:f9:6f:
                    ce:21:0c:3b:79:41:e2:54:76:1d:2a:10:e1:3a:53:
                    c4:e6:d7:35:f9:8d:d7:88:50:76:8f:f4:aa:09:30:
                    63:b4:05:93:7a:2f:26:3e:19:54:f9:15:22:df:dc:
                    f9:88:e4:5c:61:45:04:5b:23:93:4c:c6:74:56:7a:
                    89:6e:b5:af:88:71:65:80:93:95:22:04:2d:5e:e3:
                    bb:3e:63:9b:06:c0:e7:90:dd:f1:10:43:9d:70:8f:
                    88:c2:ac:43:14:40:1d:1d:61:3c:25:10:fb:f3:23:
                    9a:b5:2f:a9:b3:4b:35:1a:ec:17:80:88:b1:7b:d7:
                    cb:0a:88:1d:03:40:2c:e0:c3:95:d4:88:da:80:11:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.192.0/20
                  107.161.128.0/20
                  107.181.192.0/19
                  138.229.32.0/19
                  162.249.112.0/22
                  162.250.24.0/21
                  207.241.128.0/20
                IPv6:
                  2606:e400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26271
                  397186

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8c:16:75:4b:02:77:ff:c2:2c:57:b7:78:58:81:95:ce:b6:
         cb:92:47:6d:45:cc:8b:d8:01:e3:72:27:9a:65:7b:50:9b:91:
         38:7b:71:a7:5e:af:9d:0c:4f:6d:cf:47:3f:bc:4a:79:32:94:
         2f:73:fc:d7:f8:04:e3:59:a1:6e:50:a2:33:bc:36:b5:76:5e:
         07:ce:1a:58:ec:66:ea:30:ad:89:6d:05:85:4d:69:89:cd:2f:
         ec:af:ea:0e:78:b7:e6:35:4c:c6:7a:0f:70:9c:de:2f:0d:40:
         4a:23:ec:0b:7c:0d:d6:36:05:da:f9:22:fc:f0:04:37:0b:ab:
         97:96:88:7c:90:67:8e:be:21:44:02:e8:af:3e:74:76:84:81:
         6b:32:6f:7a:de:d4:20:c2:c6:bc:80:88:cc:85:0c:df:4f:5a:
         53:0a:49:b4:56:45:49:43:22:ae:b6:1f:f2:1f:0c:df:ea:de:
         c8:9d:55:b9:83:e7:a1:49:58:63:94:fe:b2:77:23:bf:84:45:
         f6:47:24:ad:06:80:9f:e6:dd:58:9a:f5:49:44:ef:6e:88:62:
         55:e0:f1:47:63:c2:b2:6e:75:3a:2c:17:5d:82:66:c0:3d:4e:
         78:ed:63:80:ce:a8:e2:a5:ae:b5:ff:c6:b7:e7:63:8a:61:2b:
         e4:be:fc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 08:43:59 2024 by rpki-client on console-fra.rpki-client.org