Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
File:                     8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer (raw, json)
Hash identifier:          bXv4E1vfBiTLAxKxxFuZwPuxB9YqcwxftlXjj/gDzv4=
Subject key identifier:   0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858427254BFF5354226C9EC4B7E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 05 Jul 2023 14:18:10 +0000
Certificate not after:    Thu 18 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 7354
                          AS: 399045
                          IP: 64.112.72.0/22
                          IP: 68.69.184.0/22
                          IP: 104.167.220.0/22
                          IP: 199.204.96.0/22
                          IP: 2606:d640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:72:54:bf:f5:35:42:26:c9:ec:4b:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  5 14:18:10 2023 GMT
            Not After : Sep 18 00:45:16 2025 GMT
        Subject: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:d1:a3:b0:87:2e:33:91:78:06:fa:8d:9d:
                    ca:8f:32:61:af:b3:02:11:03:40:c0:1c:65:e1:08:
                    fd:15:e0:81:1b:b0:ec:51:39:87:66:52:26:77:6f:
                    12:cd:0d:f7:21:14:7c:3e:17:0d:d5:8e:0d:2d:be:
                    7e:f6:69:8a:81:8a:3c:4c:4a:fc:3c:f2:76:95:f1:
                    43:0a:d6:26:10:6f:a0:19:f4:47:92:44:3f:3e:0e:
                    6d:ec:7b:ab:15:25:ca:57:be:25:64:fe:22:dd:93:
                    c7:93:46:66:d8:05:7c:19:54:61:57:34:e3:19:71:
                    e8:9d:3a:12:cc:1e:e5:36:e2:47:24:2c:13:da:c6:
                    17:93:56:79:69:1e:04:2f:c7:c8:1f:25:01:77:bd:
                    aa:52:09:3f:39:4c:ba:7c:e3:fc:21:53:83:c2:13:
                    d5:35:5e:cd:84:b9:65:8d:8a:58:09:e7:78:50:59:
                    aa:8b:98:ad:99:4a:dd:9f:74:56:da:2f:73:90:da:
                    8b:c4:c7:4c:c3:dc:af:d4:28:1c:dd:4b:ac:a9:2b:
                    a6:72:4e:94:9e:bc:2a:fa:c1:f4:11:2b:6a:47:09:
                    98:4e:28:18:6b:d4:49:1e:7d:08:56:7f:a1:c7:0c:
                    07:3f:96:b1:24:84:4f:43:56:27:d0:55:f2:f3:c5:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22
                  68.69.184.0/22
                  104.167.220.0/22
                  199.204.96.0/22
                IPv6:
                  2606:d640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7354
                  399045

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:33:34:c9:31:b8:61:00:ad:ad:19:a1:38:58:ca:0b:ea:71:
         4e:56:b8:2a:3d:6d:38:35:3b:bc:46:44:a9:d6:b6:ba:2e:c0:
         7b:cd:c2:1f:d5:82:56:e8:a1:56:71:d9:44:56:4d:c6:e8:07:
         bd:cb:0b:d4:29:ff:e5:37:26:36:aa:35:42:89:41:a6:52:80:
         e4:2a:b1:aa:29:ab:2e:fb:33:23:90:fd:1c:7b:40:6f:c8:13:
         69:35:fd:8b:06:10:40:5b:63:4e:98:34:af:b5:ca:25:25:4e:
         29:32:b2:e6:5b:26:4a:5c:a8:7d:17:2d:cc:dc:cd:70:0e:7e:
         9f:c6:27:7f:a6:aa:d2:78:91:a3:4e:24:6c:25:ef:9a:f6:65:
         82:cf:55:25:1c:14:ed:e1:c9:db:74:ac:72:fa:85:b7:ea:60:
         25:c0:e8:1e:bc:de:0c:f7:1b:c2:34:d7:a2:66:a4:2b:6e:17:
         73:d0:40:8e:5e:5d:f1:27:49:98:5e:9e:e4:8b:8e:b3:53:e3:
         59:fa:9a:02:d0:69:97:f3:59:16:b8:3d:69:95:88:86:35:b1:
         01:7b:32:21:d9:a1:95:1e:c8:dc:e7:05:34:73:9b:77:12:55:
         cf:73:38:6b:46:68:7c:09:3f:fc:36:12:4c:d5:06:cc:82:04:
         a4:ca:03:16
-----BEGIN CERTIFICATE-----
MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEJyVL/1NUImyexLfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDcwNTE0MTgxMFoXDTI1MDkxODAwNDUxNlowLzEtMCsGA1UEAxMk
OGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNkYTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHRo7CHLjOReAb6jZ3KjzJhr7MCEQNAwBxl
4Qj9FeCBG7DsUTmHZlImd28SzQ33IRR8PhcN1Y4NLb5+9mmKgYo8TEr8PPJ2lfFD
CtYmEG+gGfRHkkQ/Pg5t7HurFSXKV74lZP4i3ZPHk0Zm2AV8GVRhVzTjGXHonToS
zB7lNuJHJCwT2sYXk1Z5aR4EL8fIHyUBd72qUgk/OUy6fOP8IVODwhPVNV7NhLll
jYpYCed4UFmqi5itmUrdn3RW2i9zkNqLxMdMw9yv1Cgc3UusqSumck6Unrwq+sH0
EStqRwmYTigYa9RJHn0IVn+hxwwHP5axJIRPQ1Yn0FXy88XNIQIDAQABo4IEQDCC
BDwwHQYDVR0OBBYEFApJGJaYb8/UjbPmoiInwSZZ0utrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84
ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhlNDliNGM2LTRkNTgtNDJlMC1h
YmUyLTkzNzU0ZmRjZGEzNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZk
Y2RhMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAJAcEgDBAJERbgDBAJop9wDBALHzGAwDQQCAAIw
BwMFACYG1kAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICHLoCAwYWxTBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQBIMzTJMbhhAK2tGaE4WMoL6nFOVrgqPW04NTu8RkSp1ra6LsB7zcIf1YJW6KFW
cdlEVk3G6Ae9ywvUKf/lNyY2qjVCiUGmUoDkKrGqKasu+zMjkP0ce0BvyBNpNf2L
BhBAW2NOmDSvtcolJU4pMrLmWyZKXKh9Fy3M3M1wDn6fxid/pqrSeJGjTiRsJe+a
9mWCz1UlHBTt4cnbdKxy+oW36mAlwOgevN4M9xvCNNeiZqQrbhdz0ECOXl3xJ0mY
Xp7ki46zU+NZ+poC0GmX81kWuD1plYiGNbEBezIh2aGVHsjc5wU0c5t3ElXPczhr
Rmh8CT/8NhJM1QbMggSkygMW
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:32:58 2024 by rpki-client on console-ams.rpki-client.org