Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer
File:                     df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.cer (raw, json)
Hash identifier:          /WPGQ4ND5CfkR4POZGrKtxK2+WYQ8f8ttpbHMZZfeWw=
Subject key identifier:   6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834E0126AE766B38F98588
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 23 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 63362
                          IP: 104.254.204.0/22
                          IP: 205.143.40.0/22
                          IP: 2620:136:5000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:01:26:ae:76:6b:38:f9:85:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 23 19:06:39 2025 GMT
        Subject: CN=df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:2c:d5:08:97:74:25:d9:f3:54:34:24:ea:
                    e0:aa:d9:da:88:26:59:37:b6:f6:b0:09:0b:8c:cf:
                    4a:38:60:99:e6:77:e0:cd:47:b2:a6:96:6b:3a:d8:
                    5b:e3:b2:60:1a:b5:7f:b9:ff:11:f6:7f:e8:16:fc:
                    b2:a6:56:01:ef:9c:38:e4:34:7b:87:36:c3:dd:a7:
                    c5:f4:f8:f7:ab:0f:ae:43:49:af:c5:b6:73:e7:f3:
                    5e:bd:28:f4:00:c2:9a:f7:19:6a:c1:f8:99:51:dc:
                    c4:de:23:97:20:0e:ba:7d:87:b2:c3:af:e4:9f:13:
                    7c:26:c5:75:eb:b5:d6:d7:da:45:e8:70:66:c8:57:
                    09:d4:d3:bc:1f:34:24:0c:67:be:15:70:6e:a0:99:
                    0a:55:21:7f:ce:37:e2:41:fe:b8:c3:13:d2:6d:46:
                    c3:60:d8:8d:74:55:0a:a4:09:5e:d3:de:3f:5f:7a:
                    c5:34:7c:d8:1d:ff:32:1f:28:a5:3e:a7:dc:60:f6:
                    a0:1d:f8:77:0e:16:ee:6f:dc:24:4a:43:96:be:e4:
                    44:22:ee:73:ae:5e:e1:aa:4a:f3:f5:e9:0a:cd:e7:
                    aa:0e:65:51:42:17:c8:00:81:fc:b0:55:7e:d6:42:
                    b1:e9:30:74:85:d3:9e:df:c4:ac:4a:ac:13:9c:06:
                    35:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:21:21:3F:15:F9:77:C2:6B:EF:1A:58:1F:41:1C:58:6B:7E:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e/df9696f6-7ca5-4eb7-bd21-eaee3b1e3f8e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.204.0/22
                  205.143.40.0/22
                IPv6:
                  2620:136:5000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63362

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:53:d7:24:c8:68:f6:94:d1:0c:25:e8:60:6b:5f:07:98:
         d5:06:60:b0:ac:a2:51:0a:b9:13:7c:78:ba:31:cf:5f:c2:d6:
         15:76:4d:26:14:32:e1:75:2a:92:fd:6b:a1:4f:1e:f4:fd:0f:
         89:b7:9b:dc:f8:c9:ed:2e:91:f0:37:b6:61:66:42:bd:a3:81:
         de:4c:14:52:04:aa:3c:41:97:d4:b3:a0:79:0d:96:2d:c1:42:
         5e:e1:f8:01:1f:2b:5c:2e:97:8d:b4:f3:e1:be:21:b6:a6:85:
         a2:ba:4f:40:21:5b:24:99:4a:04:8a:78:f1:90:91:eb:ac:78:
         f6:44:07:ef:79:ee:92:12:5d:35:99:db:52:af:cb:33:0c:df:
         19:f3:f6:a6:ee:2d:31:47:ce:23:78:09:9c:d0:3d:36:19:57:
         13:45:3a:c2:6a:03:6f:04:00:25:e8:d6:a7:41:ed:50:f2:1d:
         68:13:89:49:61:51:c5:6e:37:4d:aa:29:36:f7:86:7c:ce:e1:
         a2:70:97:9b:ce:90:3f:3a:de:d4:01:89:41:30:3a:64:45:e1:
         64:97:79:d0:72:f1:7e:a1:17:62:4f:40:f2:7b:ed:62:10:58:
         5f:b1:07:e2:23:c7:4b:60:c5:36:3e:94:f4:25:ce:81:8b:87:
         67:a2:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 17:02:56 2024 by rpki-client on console-fra.rpki-client.org