Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc.cer
File:                     7e3be480-7f34-440b-9382-84a56fb763cc.cer (raw, json)
Hash identifier:          wR9ji8B7prAroHKfXc4RmIYPFJcMKTUu+OzhHleD2Ac=
Subject key identifier:   FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584769C94F3810DF66A33DBA0D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 06 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 398699
                          IP: 74.117.120.0/21
                          IP: 75.119.188.0/23
                          IP: 104.156.40.0/21
                          IP: 170.76.240.0/24
                          IP: 216.9.168.0/21
                          IP: 2605:f640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:c9:4f:38:10:df:66:a3:3d:ba:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct  3 00:45:26 2024 GMT
            Not After : Jan  6 01:45:26 2027 GMT
        Subject: CN=7e3be480-7f34-440b-9382-84a56fb763cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:d1:0b:bc:61:98:86:15:86:bb:ae:74:c9:
                    29:45:39:c3:30:93:70:8b:03:a7:5a:9b:90:ef:1b:
                    a9:d2:db:1c:b3:56:40:98:99:9f:b5:9d:5f:e4:af:
                    fe:6c:d5:8d:10:d0:1b:66:6b:2b:45:29:fd:3f:af:
                    21:5c:ad:f3:4a:23:af:bc:1a:fc:8d:ea:c0:7c:18:
                    3e:d8:a0:10:a5:53:78:0f:3c:cc:c4:cf:65:b2:53:
                    6d:8a:47:12:0e:6f:48:d6:6d:6f:69:87:77:5c:24:
                    3a:c3:be:11:73:51:da:72:0b:9f:fd:2d:f5:50:d4:
                    39:3c:e7:ef:91:38:be:da:14:c9:0d:e2:8a:a3:30:
                    f8:5b:41:a9:ca:11:c0:0a:82:88:0e:ca:a1:90:9f:
                    f2:32:a2:12:66:ec:04:ed:7d:48:67:63:79:1c:b4:
                    fe:a8:80:f8:70:d3:92:f9:99:20:c4:a8:d5:d8:c0:
                    ee:3f:59:cf:83:df:78:28:5e:18:6f:17:b2:b4:dc:
                    f5:e1:1d:80:a3:2a:a8:d9:96:42:0f:44:e7:4e:4f:
                    6c:bc:b6:ca:07:6f:c2:96:82:51:dc:a2:61:b5:37:
                    87:8d:24:2f:de:06:e3:c8:a1:7b:36:35:f6:cc:54:
                    a0:85:6e:8b:d7:a2:27:b0:c8:7d:d5:7d:da:3f:3c:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:77:B6:48:3E:32:9B:52:4C:A4:A0:E0:C8:2A:55:C8:45:DB:88
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7e3be480-7f34-440b-9382-84a56fb763cc/7e3be480-7f34-440b-9382-84a56fb763cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.120.0/21
                  75.119.188.0/23
                  104.156.40.0/21
                  170.76.240.0/24
                  216.9.168.0/21
                IPv6:
                  2605:f640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398699

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:bd:db:cc:34:c6:2d:48:06:e2:98:68:27:4f:72:39:82:
         de:58:50:f7:83:ff:4f:9b:a2:41:dc:9e:63:b0:ee:f3:a0:42:
         55:a2:2d:d8:be:bf:e7:1f:1f:2e:59:88:6f:f9:84:71:9c:a3:
         2e:01:00:1c:7c:59:c8:74:fa:6e:f3:fb:46:88:a3:8e:74:b6:
         0c:fd:01:a2:d0:66:6b:9e:31:46:c4:00:7c:12:59:c7:f5:ca:
         c0:b2:81:31:62:3e:7f:49:a8:e8:b5:08:fa:b3:87:dd:b8:e3:
         17:49:2b:c5:9c:f2:58:24:75:88:a7:1c:d5:15:7d:cc:9c:2f:
         ee:fe:01:96:27:cd:89:37:9e:6d:44:f7:fb:2d:31:22:18:c0:
         51:9c:92:e3:a6:80:89:15:bd:c1:9f:cd:40:88:46:cc:d6:0b:
         87:14:52:a7:fe:a6:f9:10:63:cf:ce:61:b1:03:96:66:b4:db:
         64:44:f7:d2:cf:f1:b4:3f:5d:c5:fe:d1:aa:ae:89:fb:b5:11:
         a6:a3:a7:8c:79:33:b5:c4:ce:87:9a:5e:34:83:cb:bd:8d:8d:
         1e:a3:58:4a:d5:d9:82:5c:ec:cc:35:67:2a:66:be:f9:68:8d:
         5a:4f:f9:93:a2:4a:40:0c:06:6d:60:c4:48:b6:b1:21:16:a0:
         35:ae:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:26:55 2024 by rpki-client on console-ams.rpki-client.org