Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267.cer
File:                     41ec972f-711e-4391-a3ef-92a389a34267.cer (raw, json)
Hash identifier:          NBzT+YRVkC3hyr9CiMeOJZ4dyU+8jZrnhSIM+6QX5Is=
Subject key identifier:   F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845DD5C1E5E8F9112A8699AFB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/41ec972f-711e-4391-a3ef-92a389a34267.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 May 2024 00:45:19 +0000
Certificate not after:    Mon 17 Aug 2026 00:45:19 +0000
Subordinate resources:    AS: 400177
                          AS: 400522
                          IP: 23.146.200.0/24
                          IP: 23.181.176.0/24
                          IP: 66.118.4.0/22
                          IP: 2606:5440::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:5c:1e:5e:8f:91:12:a8:69:9a:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 14 00:45:19 2024 GMT
            Not After : Aug 17 00:45:19 2026 GMT
        Subject: CN=41ec972f-711e-4391-a3ef-92a389a34267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:6b:de:b0:b5:5f:89:be:24:a6:b7:35:53:
                    92:76:6c:95:b9:4f:44:7c:ba:51:ea:1f:a7:08:03:
                    13:8f:a9:92:33:1d:ab:da:b2:8f:65:25:6d:24:3a:
                    c2:e9:4c:9a:54:21:ee:72:66:b9:63:10:65:e2:a7:
                    21:16:8f:0f:c5:6e:14:70:cb:ec:df:d3:96:0d:c5:
                    df:a5:98:4a:f2:60:79:04:dd:10:98:3f:43:3c:27:
                    8c:bd:81:45:75:b4:85:fb:ca:7f:4b:6d:93:da:85:
                    47:e1:ca:5e:58:ea:bc:df:83:fd:53:d4:8c:84:3f:
                    36:ab:3a:46:b9:d4:36:d2:8a:9c:b0:a7:3a:50:3c:
                    79:f9:c4:32:27:e2:26:4c:91:fe:b7:c6:c3:53:be:
                    77:bc:4c:8a:ea:da:05:dc:ff:40:3f:9b:47:fa:64:
                    b4:9b:2a:41:ea:b0:4c:c0:3a:10:0c:1f:22:7f:9b:
                    18:5d:45:f4:ca:6a:44:8c:39:d3:c6:08:d6:7d:f0:
                    63:db:4b:92:d4:ca:c8:55:9a:2f:35:dd:2a:18:42:
                    9e:b3:93:0a:3e:46:b7:54:54:9c:65:d0:0b:4f:94:
                    f4:0f:8b:d3:55:62:ea:20:8d:51:28:9e:37:94:1f:
                    8a:bc:6f:39:fb:c6:ad:9d:5a:78:df:3a:77:5c:50:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:8B:7B:76:F4:89:42:3F:7D:7D:06:04:68:60:D3:1C:9B:33:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/41ec972f-711e-4391-a3ef-92a389a34267/41ec972f-711e-4391-a3ef-92a389a34267.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.200.0/24
                  23.181.176.0/24
                  66.118.4.0/22
                IPv6:
                  2606:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400177
                  400522

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ca:21:e9:84:31:40:e4:1c:e3:22:80:c5:fb:e2:d9:f5:e3:
         58:77:6f:40:f5:d2:40:37:6f:19:c7:90:a6:b6:8f:71:26:4b:
         d1:67:c1:ca:b8:ee:64:1b:b4:17:50:08:9f:00:9b:1e:ee:a1:
         25:b4:95:dc:d6:c9:99:a2:ca:98:f1:07:79:04:e5:1d:82:c8:
         57:e9:a8:25:53:6c:f5:8e:57:03:25:82:ed:c0:d9:f9:08:00:
         8b:30:bf:92:fe:37:75:90:7d:b5:ec:a5:b3:96:8f:65:c3:fc:
         b9:80:50:81:4f:69:a1:80:4d:09:c4:37:af:c8:98:ae:c8:91:
         94:ee:67:7b:64:c3:1e:b8:f7:c9:a1:43:a5:81:8a:eb:31:74:
         ef:cd:0e:d6:ea:d8:f6:db:39:37:41:2f:83:51:1a:09:46:21:
         46:a5:5d:7e:3c:c6:4c:d6:77:26:12:3d:04:d3:de:16:6d:f4:
         44:c2:bd:2e:66:a6:e5:b8:36:74:c9:d4:9a:62:93:0d:f3:8b:
         34:4b:d2:3c:d7:22:ee:ca:3c:1c:f8:84:6a:35:cb:f6:6c:77:
         86:02:f3:20:10:92:eb:ab:b6:e0:7c:ea:0d:30:7f:0f:d5:5b:
         bc:4d:11:a7:e3:67:a9:b6:51:9e:aa:9f:5b:3e:c9:71:5d:f3:
         46:5b:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:14 2024 by rpki-client on console-fra.rpki-client.org