Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
File:                     3965685f-104b-41c9-9fe3-53d7fe4d141e.cer (raw, json)
Hash identifier:          sUDAtuNYhV6e6chBP6+kDQO/hYbY1LUMiYUnOOHgASE=
Subject key identifier:   2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584257A124D93FDD134BB14CBE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Jun 2023 00:45:16 +0000
Certificate not after:    Sun 28 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 398796
                          IP: 45.45.200.0/22
                          IP: 172.99.240.0/22
                          IP: 208.94.140.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:57:a1:24:d9:3f:dd:13:4b:b1:4c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 26 00:45:16 2023 GMT
            Not After : Sep 28 00:45:16 2025 GMT
        Subject: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:c6:d5:54:0d:9f:64:7e:7c:cf:fb:45:5d:
                    72:34:18:da:64:00:c6:f4:29:3c:14:98:fe:15:67:
                    a8:cc:d5:ef:dd:7b:3e:93:a6:1a:35:83:1e:cb:0b:
                    69:28:65:9e:e5:00:d6:2f:74:29:ba:21:14:8e:61:
                    44:b4:da:ad:69:6b:aa:71:e6:f2:10:72:08:34:6a:
                    41:4b:54:6b:d7:3c:7b:80:68:f9:07:81:4d:9a:30:
                    0b:93:4d:07:5d:30:b9:95:df:6c:b2:a5:bf:bb:b5:
                    36:0a:e5:bf:d7:35:e4:18:3b:f5:8c:4d:63:a4:65:
                    7e:d8:6e:66:ad:34:8c:29:15:47:d8:58:d5:f3:59:
                    fd:21:b7:e5:15:3c:9f:27:40:f4:08:93:e1:56:b0:
                    a4:8e:7d:71:9a:e7:02:f8:82:8b:31:fe:cb:83:30:
                    a1:c1:f5:0f:ec:93:1b:86:4b:45:81:20:49:ba:31:
                    5e:a1:36:1a:da:7b:04:2f:07:a7:d4:2d:76:32:4e:
                    b3:ad:2f:4f:d7:93:81:83:91:2f:b2:5f:aa:38:f1:
                    18:a9:e3:7d:ec:fd:98:07:92:40:18:99:d1:2a:11:
                    b4:f2:af:f0:4e:d7:76:e8:55:c8:e0:fa:ee:c8:ef:
                    f0:d6:8f:68:d8:00:13:93:4b:bf:88:be:ad:4d:32:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.200.0/22
                  172.99.240.0/22
                  208.94.140.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398796

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:c2:ec:fd:8e:70:41:4a:f3:39:ab:01:35:48:0b:81:dc:
         93:81:93:9b:4b:49:87:93:ff:60:08:01:6b:39:49:b4:c2:46:
         78:c1:f9:cd:69:db:16:59:50:7b:e1:d4:52:5c:d5:7b:c7:59:
         f7:f1:36:c1:67:77:2a:6a:da:9d:95:98:88:b5:ba:cd:ea:56:
         39:42:8a:7a:ba:9f:13:b9:c1:29:9f:ef:50:d8:a1:e5:59:c1:
         6b:c6:83:01:29:e6:37:23:5d:1f:80:a1:f5:96:61:e6:aa:fe:
         6e:7e:79:c1:80:da:83:d1:f6:23:81:bc:7d:b7:47:05:2e:bf:
         2f:2f:a6:16:22:fe:09:46:de:51:a4:d1:c2:70:0f:a8:e8:7b:
         e2:a3:6b:d4:bc:68:c1:32:c3:eb:0b:6f:50:6d:84:b7:51:ba:
         60:dd:f4:ae:27:1e:73:87:fa:6a:1f:14:ac:cf:de:61:7d:38:
         87:49:7d:dd:c3:9c:fd:11:a5:54:ff:11:10:ec:30:28:7a:78:
         bf:3e:ac:70:45:c7:68:ec:a1:60:c9:b0:cb:94:f6:8e:99:d4:
         d1:41:4a:b4:bc:10:8a:e4:2a:fa:95:46:33:9b:52:94:05:15:
         26:f6:2a:c0:58:e0:97:a2:24:ce:da:56:66:5a:e1:13:b8:05:
         1c:5b:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:27:04 2024 by rpki-client on console-fra.rpki-client.org