Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer
File:                     e76e962d-5249-4aed-ae77-b2d6c2ef42d0.cer (raw, json)
Hash identifier:          +Aw8qcmTr3NQvp4rwhRPKKgnpaSy2bE8QPUMWT4DtnY=
Subject key identifier:   10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845670AE01F7F160F73E7113380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 15:36:15 +0000
Certificate not after:    Sun 07 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 40895
                          IP: 23.247.192.0/22
                          IP: 163.123.168.0/22
                          IP: 174.136.240.0/22
                          IP: 209.209.32.0/22
                          IP: 2602:fd11::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:0a:e0:1f:7f:16:0f:73:e7:11:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr  1 15:36:15 2024 GMT
            Not After : Jun  7 00:45:20 2026 GMT
        Subject: CN=e76e962d-5249-4aed-ae77-b2d6c2ef42d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:c0:9b:8b:0d:60:f2:f5:dc:6c:e9:2a:01:
                    4a:09:2e:f9:a9:6d:d1:ae:c0:a1:d9:17:a3:6f:4b:
                    6b:00:97:0c:45:a5:1a:ea:e6:e1:d1:c3:ae:b3:65:
                    63:e0:22:57:32:e5:93:9f:47:02:81:9a:54:6c:0c:
                    77:73:3d:8e:a0:ff:cd:a7:30:0c:df:7d:5b:06:95:
                    8a:39:f6:ff:0c:2e:25:04:68:2b:42:fb:bb:ed:f9:
                    f2:8b:8d:0d:54:4b:8d:2f:04:a4:4e:d7:a8:7e:56:
                    a3:a0:4f:07:a3:11:8a:a4:d4:be:70:41:70:5b:11:
                    60:21:1e:4a:d1:86:bf:67:86:e1:0c:f5:76:99:f2:
                    5e:9f:38:f5:cd:63:e3:cd:99:c4:94:16:b4:52:6d:
                    6e:b7:31:7c:59:f1:b6:53:1e:ba:ce:93:e3:c3:0e:
                    96:17:08:13:90:0f:33:ca:f9:76:02:a4:39:87:67:
                    bb:3a:67:f9:0d:53:7c:16:a5:76:6b:e3:2b:2f:22:
                    95:89:e1:c9:ee:6e:70:a8:4d:41:90:91:fc:66:99:
                    a5:03:63:2f:b9:73:c5:29:b7:e4:e2:8e:6d:cf:72:
                    74:56:5b:a7:83:30:55:0e:37:fd:ad:9d:8e:e4:e6:
                    26:08:af:4a:e2:90:f1:a7:80:1b:00:29:8e:08:b9:
                    1e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:A7:D2:EC:2F:54:91:40:CA:72:98:C8:E8:9F:03:57:52:8F:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e76e962d-5249-4aed-ae77-b2d6c2ef42d0/e76e962d-5249-4aed-ae77-b2d6c2ef42d0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.192.0/22
                  163.123.168.0/22
                  174.136.240.0/22
                  209.209.32.0/22
                IPv6:
                  2602:fd11::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40895

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:56:98:b2:5e:a4:60:6f:ec:e2:bd:d3:c1:07:5f:1f:4c:
         2d:ca:09:6d:89:5c:da:5c:56:43:ab:7e:2b:50:3e:d3:fd:a2:
         ad:d8:fa:e9:d3:5a:17:03:c7:ee:d9:8f:11:aa:eb:02:f6:96:
         02:53:8b:ed:a0:88:7d:15:af:89:d8:15:63:1e:0e:df:5d:81:
         a7:4d:37:0f:3f:1c:f5:b9:b3:6f:72:6d:c3:4e:18:f0:93:eb:
         43:82:80:e9:27:bc:2b:53:0a:2f:09:5e:68:1d:27:0b:a7:56:
         37:7f:2a:dc:70:41:fb:ae:6b:81:3b:70:5d:ed:6d:da:2a:eb:
         96:5e:75:54:e7:45:15:38:b3:72:55:de:b7:03:8d:92:31:0b:
         84:dc:d8:f7:91:cb:c5:9f:43:b6:96:16:cd:ab:45:08:fa:df:
         2a:f8:74:6e:d1:b9:c9:00:33:32:8b:ee:9e:b4:94:09:bd:99:
         08:d3:f2:85:f2:7b:0e:31:c8:65:e4:34:2f:f9:9f:8d:a7:e7:
         12:47:b4:82:7e:1a:0e:0a:e1:32:0a:fb:21:c0:58:2c:64:e5:
         93:44:59:18:8d:ea:cd:2c:27:de:5a:4f:d2:ef:de:25:c0:f5:
         60:7f:29:d4:0b:a1:ac:7e:f5:c0:26:06:48:6b:b4:e8:89:9a:
         cf:b3:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:45:05 2024 by rpki-client on console-fra.rpki-client.org