Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
File:                     1c5adecb-4ac8-432f-817c-84bec47b7708.cer (raw, json)
Hash identifier:          8MNT+qT6oo8iDPQaIrYivEqxOULgbbWxWmejuditTcw=
Subject key identifier:   55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584246E10B36C428BDBBA12D9180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 00:45:17 +0000
Certificate not after:    Mon 22 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 16673
                          AS: 23167
                          AS: 396121
                          AS: 398416
                          AS: 399076
                          IP: 149.234.0.0/21
                          IP: 149.234.192.0 -- 149.234.225.255
                          IP: 149.234.228.0/22
                          IP: 149.234.234.0 -- 149.234.255.255
                          IP: 192.80.67.0 -- 192.80.68.255
                          IP: 192.80.73.0/24
                          IP: 192.122.250.0/24
                          IP: 192.206.64.0/24
                          IP: 205.166.66.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:e1:0b:36:c4:28:bd:bb:a1:2d:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 20 00:45:17 2023 GMT
            Not After : Sep 22 00:45:17 2025 GMT
        Subject: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:7b:c6:56:a3:ea:c2:b4:8d:10:00:b3:9c:
                    50:43:13:07:b5:05:bc:ed:78:b0:1d:37:54:c3:a4:
                    a5:15:d6:31:17:26:5a:3a:89:c6:fc:0d:46:9d:cc:
                    08:ab:d3:b0:2d:7d:26:96:9d:e0:9e:ee:df:93:02:
                    df:79:ab:6c:c8:52:76:f4:0e:d5:73:c5:03:93:70:
                    15:52:17:65:2f:2e:e9:f3:d1:a2:3d:d5:45:68:ac:
                    18:a8:0d:73:5f:f2:59:78:34:44:41:1d:d1:98:5f:
                    f0:54:6b:f6:1f:2e:e8:ac:bf:6d:5e:9c:7d:50:4c:
                    20:f0:6a:cd:74:b3:53:57:b8:e6:e1:66:6e:3e:ab:
                    a1:f1:f1:5d:18:41:66:ae:54:6e:a6:cb:b7:4f:11:
                    67:38:ef:73:e7:63:ef:90:89:69:3d:ae:cf:a5:59:
                    c7:28:b9:92:c4:2e:d5:ec:97:2a:94:8d:dd:0f:35:
                    82:70:0e:5a:74:ac:fb:0f:bb:0c:29:a9:ce:c4:40:
                    35:62:5c:33:e9:3f:c4:9c:07:b4:6a:fb:de:e4:3e:
                    51:10:d4:b6:30:e9:05:6e:d8:bb:ad:36:09:a3:1b:
                    c2:94:e5:72:c1:82:50:cf:88:49:3b:33:38:36:2a:
                    ed:15:60:9b:c9:7c:99:22:e0:39:56:c5:b6:86:db:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.0.0/21
                  149.234.192.0-149.234.225.255
                  149.234.228.0/22
                  149.234.234.0-149.234.255.255
                  192.80.67.0-192.80.68.255
                  192.80.73.0/24
                  192.122.250.0/24
                  192.206.64.0/24
                  205.166.66.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16673
                  23167
                  396121
                  398416
                  399076

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:37:08:81:d6:fc:21:47:e8:22:42:25:c4:55:0a:67:74:
         82:d1:11:e5:7d:5d:1c:d8:9c:00:e3:dd:12:0f:80:1c:4d:65:
         98:fa:2f:15:a3:b3:63:cd:e7:02:e2:e8:51:99:0f:fe:d2:39:
         26:b8:21:fa:ff:39:be:48:c7:52:fe:2f:fa:03:c0:47:62:13:
         cf:0f:2d:74:00:91:d1:0c:46:3c:70:6b:5b:97:a0:fa:3f:ae:
         a7:24:65:85:52:14:97:1a:3e:88:a3:6d:12:a2:28:4c:0b:7c:
         fa:89:3a:12:de:db:27:83:7a:23:fe:77:6a:b4:84:38:b1:66:
         93:1d:43:47:87:62:8e:25:ce:02:59:74:49:51:a8:ce:13:5a:
         93:4f:7f:73:c4:a5:59:6f:75:e3:4e:04:ac:38:16:f8:35:9f:
         66:d2:36:8f:f2:b4:df:a2:e5:47:57:61:e0:b2:17:b0:6c:c2:
         8c:08:dd:d6:c8:e6:15:30:b8:6f:36:74:db:72:8d:e3:4e:93:
         26:05:14:aa:f9:ad:7e:02:ff:63:ef:c5:80:33:74:6b:1c:ea:
         c5:3e:2b:bd:21:19:f9:26:43:a1:78:59:b3:6c:20:8b:3b:b9:
         57:2a:24:9f:1c:93:db:70:12:9e:b8:16:78:0d:60:8b:54:36:
         10:04:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:47 2024 by rpki-client on console-ams.rpki-client.org