Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
File:                     b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer (download)
Hash identifier:          9ULxp8wwNI75WKET9rJjDDIGnGHVK2Djk2H6+HbIiHI=
Subject key identifier:   3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583D18A4F25AA671D81A467EF880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Sat 19 Jul 2031 13:03:40 +0000
Subordinate resources:
    1: AS: 399899
    2: IP: 172.98.52.0/22
    3: IP: 2602:fbb7::/36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:18:a4:f2:5a:a6:71:d8:1a:46:7e:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul 19 13:03:40 2021 GMT
            Not After : Jul 19 13:03:40 2031 GMT
        Subject: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:3f:a5:17:7b:a8:69:e3:4a:28:5b:c1:a2:
                    a0:01:5d:3a:a7:54:5a:4a:26:82:44:12:c4:52:fb:
                    b6:63:c4:f1:95:64:40:34:58:7e:1e:c7:d6:e7:12:
                    a4:ca:da:da:fa:67:7d:b7:ea:ec:ec:15:ce:de:9f:
                    95:db:de:b9:d8:41:33:c2:85:6c:05:bd:55:d6:7f:
                    e4:83:83:61:90:8d:e7:90:12:f7:3d:a6:93:f9:01:
                    8b:27:ab:76:73:da:16:19:7c:56:08:f2:70:fa:22:
                    21:55:06:40:0e:2c:0b:e2:a5:16:6d:42:ac:7a:69:
                    11:77:a2:dc:94:52:35:24:28:e0:a4:d9:5c:ca:2c:
                    45:30:32:c9:d6:b3:2e:e8:bf:21:5d:05:b1:09:aa:
                    f5:90:c9:08:a6:7e:d9:cb:3d:70:24:42:f8:cd:08:
                    40:34:62:ce:dc:dd:7e:1d:a1:cb:44:6e:29:2b:05:
                    68:d5:6d:c1:04:1c:a6:16:83:b9:41:bb:01:56:b4:
                    e7:14:be:44:99:f0:5f:f0:a2:ba:99:c1:1c:50:5c:
                    60:a1:fb:bd:d9:ed:f3:a6:f6:81:b7:21:c9:01:39:
                    fa:84:26:fd:3b:b0:55:07:27:9a:b4:ea:3f:69:28:
                    e8:68:e7:30:35:66:19:6e:54:53:fc:2d:e7:c9:2b:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier: 
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.52.0/22
                IPv6:
                  2602:fbb7::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399899

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:b2:d5:f5:d3:dd:58:a2:fa:26:f5:e8:51:82:cf:81:9b:4f:
         4f:83:69:40:42:cd:18:1e:29:4d:3a:86:aa:74:67:6b:22:ab:
         10:4d:0a:40:c3:98:07:09:16:99:7f:0b:4c:f4:0d:91:00:ad:
         fc:07:b8:3a:29:72:09:77:b0:64:54:71:23:a0:d9:51:8c:95:
         d4:64:aa:ef:1a:7f:0a:d0:b0:b6:23:50:f4:4a:5b:9a:20:cc:
         e2:b3:1f:3a:26:01:ab:a3:55:11:a8:ae:6f:07:63:53:99:ad:
         01:6a:aa:eb:2d:61:d8:be:d2:9d:0d:cc:c0:3b:2d:33:97:0d:
         47:ef:ba:84:d2:74:17:89:12:df:93:6c:d6:6b:3f:09:3c:cd:
         c2:25:f7:ee:25:25:95:8b:da:44:ed:95:45:7a:5e:cb:74:5c:
         e9:cf:06:7b:a8:e4:d2:9d:b0:9b:dc:79:fd:e0:19:0f:af:bf:
         a7:24:14:13:82:d5:59:8d:8a:07:84:f0:47:ea:cb:f1:16:d2:
         e2:ce:28:3d:89:33:2e:e4:22:63:27:c8:a5:89:71:69:9d:b2:
         f1:78:e0:56:16:19:05:6e:b5:d0:17:25:e9:1c:4c:cc:aa:b4:
         17:e9:26:8b:c7:f7:1f:af:fc:82:8b:be:36:5c:b6:eb:98:06:
         f0:21:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 8 07:47:50 2023 by rpki-client.