Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer
File:                     37a1bff3-cff2-41f8-a1d2-8a10cad7e340.cer (raw, json)
Hash identifier:          rdCrr2KLAkoZfyNiFPRJuNrG5Y5t1LW7Np490w3lGuQ=
Subject key identifier:   0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858448E77D0640E87283ED5D6A480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 19 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 13413
                          AS: 22166
                          AS: 30269
                          AS: 36001
                          AS: 62684
                          AS: 393429
                          IP: 97.107.32.0/20
                          IP: 104.192.244.0/22
                          IP: 134.195.20.0/22
                          IP: 139.60.8.0/21
                          IP: 162.210.60.0/22
                          IP: 172.98.220.0/22
                          IP: 173.242.80.0/20
                          IP: 192.200.136.0/21
                          IP: 199.167.212.0/22
                          IP: 206.126.208.0/20
                          IP: 209.103.224.0/19
                          IP: 216.127.192.0/19
                          IP: 2605:bbc0::/32
                          IP: 2606:3d00::/32
                          IP: 2606:ab80::/32
                          IP: 2607:580::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8e:77:d0:64:0e:87:28:3e:d5:d6:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 15 01:45:20 2024 GMT
            Not After : Apr 19 00:45:20 2026 GMT
        Subject: CN=37a1bff3-cff2-41f8-a1d2-8a10cad7e340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:bc:87:75:75:eb:51:1e:7f:d8:4a:23:91:
                    2d:41:c5:78:26:b9:2a:61:86:2b:07:62:15:6a:c5:
                    58:69:63:0d:8d:89:58:02:f9:cb:9e:18:04:14:24:
                    6d:cf:60:11:2b:07:2c:47:c4:6f:c1:ef:e5:d6:9b:
                    b1:3a:c1:8f:aa:17:81:ea:81:a0:c1:46:62:db:5b:
                    78:da:b2:4a:29:23:3d:ec:3a:76:69:64:a1:3a:22:
                    d5:ee:21:25:e6:d5:d1:74:62:b6:12:da:e7:97:15:
                    2f:cd:57:9a:aa:03:56:cd:be:96:35:ef:a2:d9:08:
                    7f:b3:18:62:cc:c9:17:96:f9:d7:01:5f:57:13:d5:
                    f2:f9:6d:04:68:7b:d0:34:a2:6a:d2:05:85:07:14:
                    5b:aa:cd:8f:4f:00:70:d2:b3:2a:d1:fb:e3:d3:49:
                    1a:c8:12:8a:de:0d:2c:38:81:d5:36:a6:fd:ac:d3:
                    fc:75:13:c0:84:48:9c:16:50:fa:10:c6:f7:cb:fe:
                    86:f1:a9:ad:f4:9f:c6:06:bf:ec:54:6d:73:8f:09:
                    b9:82:51:86:9e:6c:57:00:8d:57:6b:a0:8d:22:71:
                    6f:84:c7:60:e6:e2:55:97:65:05:28:1b:2a:83:69:
                    49:53:cf:07:3c:1e:a6:95:48:6f:f1:1f:a6:71:54:
                    4b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:A0:41:6E:20:D0:55:A5:33:45:77:B1:7E:51:36:33:22:11:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37a1bff3-cff2-41f8-a1d2-8a10cad7e340/37a1bff3-cff2-41f8-a1d2-8a10cad7e340.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.32.0/20
                  104.192.244.0/22
                  134.195.20.0/22
                  139.60.8.0/21
                  162.210.60.0/22
                  172.98.220.0/22
                  173.242.80.0/20
                  192.200.136.0/21
                  199.167.212.0/22
                  206.126.208.0/20
                  209.103.224.0/19
                  216.127.192.0/19
                IPv6:
                  2605:bbc0::/32
                  2606:3d00::/32
                  2606:ab80::/32
                  2607:580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13413
                  22166
                  30269
                  36001
                  62684
                  393429

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:31:2e:7a:be:bf:48:c4:6e:03:cb:21:fa:7a:07:6d:92:c6:
         cc:2d:4d:d0:23:56:29:c9:df:3d:62:1d:86:73:84:e2:58:84:
         b6:9d:03:16:a5:5c:da:5b:6b:ad:07:bb:20:57:ff:62:47:11:
         fe:12:96:8c:fd:b2:37:ef:b4:93:b0:db:0c:30:d3:de:a9:fe:
         e6:8d:f5:1b:63:27:e8:89:ae:41:dd:2c:58:c4:34:f5:44:b6:
         57:cc:81:93:68:26:68:df:10:ef:c3:90:86:49:0f:f7:39:b1:
         49:fa:52:aa:32:c0:21:e1:1c:46:ce:4d:d6:be:09:54:8a:77:
         ef:48:79:ff:4d:69:eb:b7:c5:ab:c1:ea:a9:de:fa:76:6d:dd:
         b4:cc:b6:16:67:c1:07:14:b7:02:3f:43:fe:5d:e9:60:da:cb:
         bd:88:e4:d4:2c:90:2e:f4:d5:f2:95:67:e0:58:b3:98:ed:98:
         cf:4b:b6:dd:1a:c0:74:3a:79:69:d7:51:4a:55:27:15:ae:11:
         c9:6e:74:63:a6:55:2e:f6:0e:aa:55:1c:63:36:b1:9b:82:d0:
         d8:94:61:6b:2c:43:cc:71:ae:8b:f5:33:00:f7:85:18:b9:38:
         30:a9:a8:a3:0b:b3:59:d8:b7:60:c3:ed:46:ab:22:51:4e:e3:
         c4:32:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:14 2024 by rpki-client on console-fra.rpki-client.org