Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
File:                     e201ba8b-eda4-4920-948d-160d561b0e16.cer (raw, json)
Hash identifier:          Mn+NAUmbq+2dCcPmC2ORu5iIkhn7hxIzw45lMT+nBBY=
Subject key identifier:   65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844B71F58ACE3DF49E768614A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 15:15:13 +0000
Certificate not after:    Sat 13 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 17252
                          AS: 21769
                          AS: 33708
                          AS: 47007
                          AS: 47013
                          IP: 43.255.188.0/22
                          IP: 45.40.96.0/19
                          IP: 45.73.160.0/19
                          IP: 45.250.8.0/22
                          IP: 45.252.80.0/22
                          IP: 66.78.0.0/18
                          IP: 67.203.0.0/18
                          IP: 67.207.160.0/19
                          IP: 67.219.16.0/20
                          IP: 67.227.0.0/17
                          IP: 69.171.208.0 -- 69.171.219.255
                          IP: 74.114.116.0/22
                          IP: 89.208.52.0/22
                          IP: 89.208.180.0/22
                          IP: 92.38.208.0/22
                          IP: 95.163.148.0/22
                          IP: 103.48.32.0/22
                          IP: 103.51.32.0/22
                          IP: 103.56.86.0/23
                          IP: 103.76.186.0/23
                          IP: 103.87.252.0/23
                          IP: 103.108.96.0/23
                          IP: 103.219.16.0/22
                          IP: 104.129.240.0/20
                          IP: 104.143.96.0/20
                          IP: 104.224.64.0/19
                          IP: 104.247.152.0/21
                          IP: 147.185.114.0/23
                          IP: 173.46.80.0/20
                          IP: 173.211.0.0/17
                          IP: 173.214.176.0/20
                          IP: 174.140.192.0/18
                          IP: 180.131.144.0/22
                          IP: 184.174.0.0/17
                          IP: 185.176.48.0/22
                          IP: 185.185.28.0/22
                          IP: 185.188.76.0/22
                          IP: 185.193.72.0/22
                          IP: 185.194.116.0/22
                          IP: 185.194.228.0/22
                          IP: 185.197.16.0/22
                          IP: 185.201.228.0/22
                          IP: 185.202.168.0/22
                          IP: 185.205.196.0/22
                          IP: 185.206.220.0/22
                          IP: 185.207.96.0/22
                          IP: 185.210.76.0/22
                          IP: 198.102.8.0/21
                          IP: 199.182.168.0/21
                          IP: 206.206.64.0/18
                          IP: 208.70.248.0/21
                          IP: 208.76.248.0/21
                          IP: 213.219.252.0/22
                          IP: 216.10.0.0/19
                          IP: 216.74.64.0/18
                          IP: 216.107.128.0/20
                          IP: 216.122.160.0/19
                          IP: 2604:4840::/32
                          IP: 2605:a240::/32
                          IP: 2606:e7c0::/32
                          IP: 2607:f188::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b7:1f:58:ac:e3:df:49:e7:68:61:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 29 15:15:13 2024 GMT
            Not After : Sep 13 00:45:16 2025 GMT
        Subject: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:4a:4a:a4:47:f8:eb:dd:b3:37:58:30:ec:
                    7b:4b:91:30:87:23:d0:a2:2e:1a:0b:46:a1:bc:27:
                    3b:ff:9f:f8:d2:6c:12:be:e6:b4:1d:93:e4:66:dc:
                    d9:18:e3:47:5a:c2:18:3a:66:d7:ec:de:bf:8e:6b:
                    1f:de:89:02:be:48:25:c4:c2:e4:80:dc:f0:af:54:
                    7d:03:d3:b5:7f:48:31:d1:cd:be:4b:bc:66:47:64:
                    4d:16:b0:fc:24:8e:d6:aa:0a:4a:b4:6d:8c:62:82:
                    e5:97:a3:6c:9b:1b:d1:d9:d8:4f:5d:f8:db:23:45:
                    4b:f4:5e:14:ed:07:d0:6d:6b:53:bf:d3:94:c1:a2:
                    73:46:ed:02:3a:19:16:9c:c0:e8:40:c9:08:8b:93:
                    7d:87:0a:f6:1a:ee:c2:9d:da:7f:7e:e2:d8:88:29:
                    94:56:ac:2b:a7:12:da:5e:23:de:7a:e0:96:c5:10:
                    ac:89:d0:82:4a:1d:e9:5c:86:31:38:2e:9f:67:cd:
                    8e:f4:24:22:1c:92:73:e6:f6:2a:5e:bc:62:50:0a:
                    ac:38:25:e0:24:b8:ef:fc:d6:4b:b4:c4:6b:1f:93:
                    f7:6c:9a:41:7f:7d:57:c4:91:20:aa:0f:a2:08:9c:
                    cd:43:d6:cf:eb:fd:22:60:7f:de:3e:37:28:4d:8a:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.188.0/22
                  45.40.96.0/19
                  45.73.160.0/19
                  45.250.8.0/22
                  45.252.80.0/22
                  66.78.0.0/18
                  67.203.0.0/18
                  67.207.160.0/19
                  67.219.16.0/20
                  67.227.0.0/17
                  69.171.208.0-69.171.219.255
                  74.114.116.0/22
                  89.208.52.0/22
                  89.208.180.0/22
                  92.38.208.0/22
                  95.163.148.0/22
                  103.48.32.0/22
                  103.51.32.0/22
                  103.56.86.0/23
                  103.76.186.0/23
                  103.87.252.0/23
                  103.108.96.0/23
                  103.219.16.0/22
                  104.129.240.0/20
                  104.143.96.0/20
                  104.224.64.0/19
                  104.247.152.0/21
                  147.185.114.0/23
                  173.46.80.0/20
                  173.211.0.0/17
                  173.214.176.0/20
                  174.140.192.0/18
                  180.131.144.0/22
                  184.174.0.0/17
                  185.176.48.0/22
                  185.185.28.0/22
                  185.188.76.0/22
                  185.193.72.0/22
                  185.194.116.0/22
                  185.194.228.0/22
                  185.197.16.0/22
                  185.201.228.0/22
                  185.202.168.0/22
                  185.205.196.0/22
                  185.206.220.0/22
                  185.207.96.0/22
                  185.210.76.0/22
                  198.102.8.0/21
                  199.182.168.0/21
                  206.206.64.0/18
                  208.70.248.0/21
                  208.76.248.0/21
                  213.219.252.0/22
                  216.10.0.0/19
                  216.74.64.0/18
                  216.107.128.0/20
                  216.122.160.0/19
                IPv6:
                  2604:4840::/32
                  2605:a240::/32
                  2606:e7c0::/32
                  2607:f188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17252
                  21769
                  33708
                  47007
                  47013

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:02:90:30:f3:19:25:f6:46:ec:0d:29:ac:a6:e5:5f:a0:84:
         53:07:4a:37:b1:a8:4c:3e:d6:1f:ce:ad:e3:d2:00:a5:1f:06:
         f7:81:a0:fa:73:f7:ff:da:a8:4c:50:8a:af:d3:a6:66:fe:64:
         b9:da:1a:13:a5:89:46:1a:33:78:b2:6c:ef:ea:7c:43:6d:5b:
         00:23:f5:79:4d:29:58:58:f5:9f:93:9d:85:04:53:d0:5c:09:
         e9:9c:17:78:57:46:2f:8a:c6:ac:71:11:80:bf:ad:83:f7:57:
         24:a4:df:79:19:32:b5:65:21:a4:53:6c:33:64:ec:78:24:22:
         8e:7c:bd:3d:3d:cd:21:7f:a9:0f:c0:0d:7e:3c:92:18:30:cf:
         56:96:79:38:b9:6e:79:f2:cd:88:fb:12:61:e4:0b:80:4c:72:
         e2:98:e4:8d:7c:7b:48:dd:c1:4a:c6:5e:aa:cc:aa:f4:54:51:
         e6:b8:0b:95:fd:42:bd:b1:dc:fb:4f:a9:73:4d:ce:6d:9a:3c:
         29:be:2f:c8:32:cd:a0:16:54:d3:60:02:f7:60:87:8f:8b:83:
         1e:3a:d6:5f:0d:40:08:30:e1:9d:9b:a2:7e:70:de:9e:51:47:
         9f:fd:c6:a6:e8:f7:c6:21:f4:06:9e:e9:02:15:22:c0:87:76:
         f6:9e:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:03 2024 by rpki-client on console-fra.rpki-client.org