Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
File:                     b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer (raw, json)
Hash identifier:          XypwwaXhmmhThsIqORYgnqXwyyxZIgXCZu9c4ZtLUWQ=
Subject key identifier:   E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844B58D641B1DFEDED897EE72C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 03 May 2026 00:45:20 +0000
Subordinate resources:    AS: 40244
                          IP: 66.206.32.0/20
                          IP: 67.231.240.0/20
                          IP: 94.26.27.0/24
                          IP: 94.26.31.0/24
                          IP: 94.26.44.0/24
                          IP: 94.26.46.0/23
                          IP: 94.26.67.0/24
                          IP: 94.26.73.0/24
                          IP: 94.26.84.0/23
                          IP: 104.129.168.0/22
                          IP: 162.213.120.0/22
                          IP: 162.250.200.0/22
                          IP: 163.182.168.0/21
                          IP: 173.198.192.0/18
                          IP: 173.233.64.0/19
                          IP: 192.111.37.0/24
                          IP: 198.48.48.0/20
                          IP: 199.223.252.0/22
                          IP: 208.85.0.0/21
                          IP: 209.240.96.0/20
                          IP: 2604:7c00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b5:8d:64:1b:1d:fe:de:d8:97:ee:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 29 01:45:20 2024 GMT
            Not After : May  3 00:45:20 2026 GMT
        Subject: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:65:8d:69:c5:1b:46:2b:a9:58:9c:49:29:
                    1a:84:69:84:d9:a0:10:28:4a:a3:ee:09:0f:92:9e:
                    fb:a2:0e:b5:7b:84:bd:5a:50:41:8c:bd:e7:16:17:
                    f6:ef:a8:31:6d:12:e1:64:f2:aa:0d:f7:75:60:af:
                    3c:40:7a:e5:d2:1c:31:7f:1b:6f:ca:6b:ab:fc:e7:
                    41:ba:13:fe:2c:f1:cc:d0:d5:f4:58:b3:2b:cd:69:
                    06:5e:52:60:00:74:61:17:ce:31:b0:98:73:b6:b3:
                    ba:96:51:a5:70:be:63:d5:3e:d4:61:a5:25:66:cf:
                    73:01:13:7d:ba:10:f9:0e:bd:b4:a8:17:8b:5b:cf:
                    9f:5f:26:35:df:f3:88:07:1b:6b:28:16:ac:80:15:
                    f8:51:55:a6:05:21:17:e8:09:20:6e:80:60:b6:95:
                    d5:07:ff:cd:89:81:9c:51:1b:d9:bc:ec:91:86:e5:
                    e5:bf:95:1b:aa:33:00:24:bc:4c:94:3a:a9:9d:47:
                    dd:fa:15:d2:9e:11:93:d7:df:16:ee:39:cb:40:04:
                    00:de:08:9c:47:c9:87:31:dd:9a:82:4e:fb:8a:8e:
                    82:82:45:03:ec:35:f9:32:ac:01:bc:80:af:c6:21:
                    9b:48:06:89:b0:89:9b:36:c6:cd:e6:04:bc:98:e0:
                    dd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.206.32.0/20
                  67.231.240.0/20
                  94.26.27.0/24
                  94.26.31.0/24
                  94.26.44.0/24
                  94.26.46.0/23
                  94.26.67.0/24
                  94.26.73.0/24
                  94.26.84.0/23
                  104.129.168.0/22
                  162.213.120.0/22
                  162.250.200.0/22
                  163.182.168.0/21
                  173.198.192.0/18
                  173.233.64.0/19
                  192.111.37.0/24
                  198.48.48.0/20
                  199.223.252.0/22
                  208.85.0.0/21
                  209.240.96.0/20
                IPv6:
                  2604:7c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40244

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:9c:bc:51:48:95:fd:6d:4b:23:ca:6f:a2:5f:48:a8:14:
         2f:c0:6c:fa:e3:cd:5e:ed:c2:ec:88:06:89:82:27:31:fc:6a:
         d3:53:aa:67:d7:8e:90:29:35:bc:ce:ca:67:86:35:1d:64:97:
         d4:e5:68:f7:ff:e3:7c:6f:b6:f2:96:27:35:0e:ce:30:ea:1d:
         31:af:cc:66:c7:28:78:3d:93:0e:18:2b:4e:7c:72:cc:44:44:
         1b:f7:14:08:bd:65:e0:a7:70:9d:3f:da:d9:5b:db:6f:4f:3f:
         e5:a5:4b:6e:61:c9:93:e3:c3:83:5b:17:8a:d3:61:23:60:41:
         65:a2:94:90:68:28:be:52:b0:8c:84:ee:d5:66:c9:f0:76:be:
         b1:36:52:0a:1e:85:db:1f:d8:b6:a2:3c:ea:cb:69:59:04:e8:
         e1:ac:c9:31:dd:eb:15:cb:e0:9a:1e:50:a4:00:50:d9:e7:52:
         3a:76:3a:c8:4e:04:2a:9b:66:e0:0d:50:4d:d6:43:7b:22:b0:
         e2:63:cb:68:5c:7a:13:4c:00:11:1b:99:47:51:fb:cc:09:78:
         44:8e:18:bd:06:59:b5:1c:71:ca:da:87:fa:04:e6:2f:6b:2d:
         b2:32:b2:3d:78:8b:46:a4:9b:85:ae:5e:96:37:64:55:60:47:
         96:6d:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 21:26:36 2024 by rpki-client on console-ams.rpki-client.org