Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
File:                     e201ba8b-eda4-4920-948d-160d561b0e16.cer (raw, json)
Hash identifier:          YjVBdRF8JSw0KsfwvyreBULKckJy7AEH48tx2ajPxHs=
Subject key identifier:   65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584731F3A084B9890D9874E2AEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Sep 2024 00:45:26 +0000
Certificate not after:    Thu 17 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 17252
                          AS: 21769
                          AS: 33708
                          AS: 47007
                          AS: 47013
                          IP: 43.255.188.0/22
                          IP: 45.40.96.0/19
                          IP: 45.73.160.0/19
                          IP: 45.250.8.0/22
                          IP: 45.252.80.0/22
                          IP: 66.78.0.0/18
                          IP: 67.203.0.0/18
                          IP: 67.207.160.0/19
                          IP: 67.219.16.0/20
                          IP: 67.227.0.0/17
                          IP: 69.171.208.0 -- 69.171.219.255
                          IP: 74.114.116.0/22
                          IP: 89.208.52.0/22
                          IP: 89.208.180.0/22
                          IP: 92.38.208.0/22
                          IP: 95.163.148.0/22
                          IP: 103.48.32.0/22
                          IP: 103.51.32.0/22
                          IP: 103.56.86.0/23
                          IP: 103.76.186.0/23
                          IP: 103.87.252.0/23
                          IP: 103.108.96.0/23
                          IP: 103.219.16.0/22
                          IP: 103.251.220.0/22
                          IP: 104.129.240.0/20
                          IP: 104.143.96.0/20
                          IP: 104.224.64.0/19
                          IP: 104.247.152.0/21
                          IP: 147.185.114.0/23
                          IP: 173.46.80.0/20
                          IP: 173.211.0.0/17
                          IP: 173.214.176.0/20
                          IP: 174.140.192.0/18
                          IP: 180.131.144.0/22
                          IP: 180.149.32.0/22
                          IP: 184.174.0.0/17
                          IP: 185.176.48.0/22
                          IP: 185.185.28.0/22
                          IP: 185.188.76.0/22
                          IP: 185.193.72.0/22
                          IP: 185.194.116.0/22
                          IP: 185.194.228.0/22
                          IP: 185.197.16.0/22
                          IP: 185.201.228.0/22
                          IP: 185.202.168.0/22
                          IP: 185.205.196.0/22
                          IP: 185.206.220.0/22
                          IP: 185.207.96.0/22
                          IP: 185.210.76.0/22
                          IP: 198.89.96.0/21
                          IP: 198.89.120.0/21
                          IP: 198.102.8.0/21
                          IP: 199.182.168.0/21
                          IP: 206.206.64.0/18
                          IP: 208.70.248.0/21
                          IP: 208.76.248.0/21
                          IP: 213.219.252.0/22
                          IP: 216.10.0.0/19
                          IP: 216.74.64.0/18
                          IP: 216.107.128.0/20
                          IP: 216.122.160.0/19
                          IP: 2604:4840::/32
                          IP: 2605:a240::/32
                          IP: 2606:e7c0::/32
                          IP: 2607:f188::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:f3:a0:84:b9:89:0d:98:74:e2:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 13 00:45:26 2024 GMT
            Not After : Dec 17 01:45:26 2026 GMT
        Subject: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:4a:4a:a4:47:f8:eb:dd:b3:37:58:30:ec:
                    7b:4b:91:30:87:23:d0:a2:2e:1a:0b:46:a1:bc:27:
                    3b:ff:9f:f8:d2:6c:12:be:e6:b4:1d:93:e4:66:dc:
                    d9:18:e3:47:5a:c2:18:3a:66:d7:ec:de:bf:8e:6b:
                    1f:de:89:02:be:48:25:c4:c2:e4:80:dc:f0:af:54:
                    7d:03:d3:b5:7f:48:31:d1:cd:be:4b:bc:66:47:64:
                    4d:16:b0:fc:24:8e:d6:aa:0a:4a:b4:6d:8c:62:82:
                    e5:97:a3:6c:9b:1b:d1:d9:d8:4f:5d:f8:db:23:45:
                    4b:f4:5e:14:ed:07:d0:6d:6b:53:bf:d3:94:c1:a2:
                    73:46:ed:02:3a:19:16:9c:c0:e8:40:c9:08:8b:93:
                    7d:87:0a:f6:1a:ee:c2:9d:da:7f:7e:e2:d8:88:29:
                    94:56:ac:2b:a7:12:da:5e:23:de:7a:e0:96:c5:10:
                    ac:89:d0:82:4a:1d:e9:5c:86:31:38:2e:9f:67:cd:
                    8e:f4:24:22:1c:92:73:e6:f6:2a:5e:bc:62:50:0a:
                    ac:38:25:e0:24:b8:ef:fc:d6:4b:b4:c4:6b:1f:93:
                    f7:6c:9a:41:7f:7d:57:c4:91:20:aa:0f:a2:08:9c:
                    cd:43:d6:cf:eb:fd:22:60:7f:de:3e:37:28:4d:8a:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.188.0/22
                  45.40.96.0/19
                  45.73.160.0/19
                  45.250.8.0/22
                  45.252.80.0/22
                  66.78.0.0/18
                  67.203.0.0/18
                  67.207.160.0/19
                  67.219.16.0/20
                  67.227.0.0/17
                  69.171.208.0-69.171.219.255
                  74.114.116.0/22
                  89.208.52.0/22
                  89.208.180.0/22
                  92.38.208.0/22
                  95.163.148.0/22
                  103.48.32.0/22
                  103.51.32.0/22
                  103.56.86.0/23
                  103.76.186.0/23
                  103.87.252.0/23
                  103.108.96.0/23
                  103.219.16.0/22
                  103.251.220.0/22
                  104.129.240.0/20
                  104.143.96.0/20
                  104.224.64.0/19
                  104.247.152.0/21
                  147.185.114.0/23
                  173.46.80.0/20
                  173.211.0.0/17
                  173.214.176.0/20
                  174.140.192.0/18
                  180.131.144.0/22
                  180.149.32.0/22
                  184.174.0.0/17
                  185.176.48.0/22
                  185.185.28.0/22
                  185.188.76.0/22
                  185.193.72.0/22
                  185.194.116.0/22
                  185.194.228.0/22
                  185.197.16.0/22
                  185.201.228.0/22
                  185.202.168.0/22
                  185.205.196.0/22
                  185.206.220.0/22
                  185.207.96.0/22
                  185.210.76.0/22
                  198.89.96.0/21
                  198.89.120.0/21
                  198.102.8.0/21
                  199.182.168.0/21
                  206.206.64.0/18
                  208.70.248.0/21
                  208.76.248.0/21
                  213.219.252.0/22
                  216.10.0.0/19
                  216.74.64.0/18
                  216.107.128.0/20
                  216.122.160.0/19
                IPv6:
                  2604:4840::/32
                  2605:a240::/32
                  2606:e7c0::/32
                  2607:f188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17252
                  21769
                  33708
                  47007
                  47013

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:8f:73:35:93:8f:e2:34:e1:5e:56:93:20:f7:5b:5a:d3:
         d1:b0:5d:fd:b3:b2:7c:0d:41:71:ac:78:10:07:cb:31:ed:e6:
         c5:72:ef:45:31:9d:b7:69:67:b8:de:49:0b:65:22:f6:7a:18:
         c4:b6:47:9d:bb:ad:07:8f:e1:15:16:94:4a:95:d8:1e:62:0c:
         e7:e9:9b:dd:4b:5d:ac:b4:62:6e:55:e5:5f:d3:f2:e4:c1:ec:
         2e:ee:fd:9c:a5:77:4d:ee:d3:9d:2d:dd:6a:04:5d:e9:8c:8b:
         55:67:31:48:96:48:e8:d2:fd:af:b9:c1:ee:16:b0:9a:0d:a1:
         6f:f0:f4:a4:93:c9:a9:0a:ed:c2:dc:86:c3:88:e2:74:12:98:
         12:ef:b8:22:70:36:bb:f6:52:82:4a:68:2e:67:d0:8e:ca:35:
         84:94:e3:12:e5:45:cd:52:86:36:0a:4b:8e:1d:a8:35:76:4d:
         6b:d3:22:18:cc:ab:3d:f9:18:37:45:31:41:5e:fb:4c:a5:79:
         ce:0e:9f:b9:00:9a:85:e8:01:17:ab:ca:fc:05:9f:fd:50:51:
         c4:89:27:78:ef:c3:49:6f:db:20:e6:6e:e5:a9:71:c9:f7:3a:
         d1:1c:21:5f:0f:bf:31:78:3c:c4:a5:02:09:7e:8d:1e:23:fa:
         ca:af:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:26:18 2024 by rpki-client on console-ams.rpki-client.org