Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
File:                     85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer (raw, json)
Hash identifier:          Gx3zWLEz3EpaaQFOVTpwgw4lSerI/TgnL4uClpDn3Bk=
Subject key identifier:   83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E483534334294F7060FDE500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 29 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 13903
                          AS: 23342
                          IP: 64.29.128.0/20
                          IP: 67.221.160.0/20
                          IP: 207.7.128.0/19
                          IP: 209.237.224.0/19
                          IP: 2607:f3a0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:43:34:29:4f:70:60:fd:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 29 19:06:39 2025 GMT
        Subject: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:81:5c:7d:8c:f0:71:ca:4a:79:00:81:f2:
                    e9:b6:bd:1d:c2:44:2e:5f:72:4a:d0:e0:85:0e:1c:
                    49:d9:9e:01:4e:b3:95:22:be:a2:22:b1:06:c9:c0:
                    74:1d:a3:b8:ed:63:5b:81:36:30:a0:e2:1a:de:d3:
                    48:91:60:a9:e2:be:3a:15:4d:00:4d:77:7d:54:6a:
                    f6:5b:7c:20:2d:7e:98:c7:4c:0c:35:50:86:f7:7e:
                    2e:2b:56:a0:3e:e6:0f:33:34:24:b1:f8:7b:67:e1:
                    ec:7d:58:87:7f:94:26:3a:85:37:aa:52:6e:28:0c:
                    c5:31:80:44:67:56:be:89:a0:ae:e6:ae:58:60:40:
                    3f:bf:79:d1:0e:78:1d:5b:51:fe:94:86:e9:16:1a:
                    4f:f9:e9:4c:88:99:2f:bf:e0:bd:11:18:e7:f8:d7:
                    6f:b5:27:4c:c8:3b:7a:d8:2a:5e:80:92:cf:fb:58:
                    68:5d:5e:7c:92:a6:64:00:77:ab:46:e0:d9:e8:b2:
                    75:f9:8c:ee:bd:53:a6:9d:af:8f:80:09:2c:4b:86:
                    1c:9e:fc:26:37:4a:97:8c:02:f8:10:b8:26:63:89:
                    4c:83:a0:4d:73:e5:90:c8:4e:08:fa:bf:1f:fc:70:
                    ad:90:2f:6f:54:23:f0:91:5e:dd:05:5b:0d:1b:6e:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.128.0/20
                  67.221.160.0/20
                  207.7.128.0/19
                  209.237.224.0/19
                IPv6:
                  2607:f3a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13903
                  23342

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:d1:44:93:77:63:7a:ed:71:ee:fb:5a:6e:8d:bc:99:59:
         9e:4f:3a:f3:ab:80:63:5a:7f:72:20:99:2e:4a:20:c8:37:9f:
         90:53:5b:bb:2d:c5:4e:2a:15:00:0b:66:46:7c:d4:58:41:f6:
         c4:ee:9a:50:96:2c:d2:26:c8:0e:7f:89:c4:9d:47:b9:12:f8:
         0c:b6:2d:c9:d9:2d:89:eb:54:6e:0c:4e:11:6e:e5:63:cb:91:
         ea:bd:41:46:14:c7:bc:37:25:9e:0c:38:3f:a3:ce:66:e2:15:
         03:32:e5:3f:a6:86:74:bf:dd:86:da:93:18:b2:e3:e8:9b:c5:
         aa:77:ac:eb:78:4c:c7:02:18:7f:16:31:9f:89:d5:ed:51:da:
         8c:03:4e:b2:11:dd:84:b1:67:a0:0e:21:24:62:b0:77:b3:1a:
         c5:3c:34:a3:b5:de:df:0b:da:77:72:cb:2a:aa:0a:b2:3f:3b:
         56:f2:90:0e:b8:59:f1:4c:94:5b:a5:74:4a:0c:fc:f8:b0:8d:
         5b:f1:79:03:22:20:49:16:67:11:a8:0d:d2:3d:92:e3:65:87:
         9c:e2:6c:5c:8d:b1:76:5f:bd:33:94:8f:18:fe:bb:31:99:fc:
         a3:fa:72:18:bc:c0:d5:61:4f:76:76:85:e1:8f:8a:b2:a2:20:
         2c:f3:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:36:44 2024 by rpki-client on console-ams.rpki-client.org