Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
File:                     c727dab7-c852-4d24-82ff-cf171b24f2f9.cer (raw, json)
Hash identifier:          b/xbJzR/uEGGrFI6FdEq9RWOpKj/vK7Ai0N2gEvk7Po=
Subject key identifier:   61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584371984A84CAD67E4ABF6D1B20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Oct 2023 00:45:23 +0000
Certificate not after:    Wed 07 Jan 2026 01:45:23 +0000
Subordinate resources:    AS: 394161
                          AS: 394363
                          AS: 394943
                          IP: 149.106.192.0/19
                          IP: 192.95.64.0/24
                          IP: 199.43.255.0/24
                          IP: 199.66.8.0/22
                          IP: 199.120.32.0 -- 199.120.57.255
                          IP: 2620:137:d000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:71:98:4a:84:ca:d6:7e:4a:bf:6d:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct  5 00:45:23 2023 GMT
            Not After : Jan  7 01:45:23 2026 GMT
        Subject: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cf:74:51:af:dc:13:3c:ff:d6:6a:fa:f8:d4:
                    9a:d0:cf:8c:26:74:b4:1b:e2:ff:87:ef:48:a5:b7:
                    63:1b:4e:eb:ee:92:0e:07:53:80:b8:f0:34:cb:d0:
                    1c:14:db:5a:5b:81:c6:50:b8:7f:a2:62:39:6a:b4:
                    ab:ef:5e:62:c8:3c:24:49:b9:65:e1:93:5c:92:01:
                    1d:10:0f:70:a5:6c:18:09:32:25:0a:81:3b:a6:a7:
                    db:8c:41:f2:fa:d3:a1:91:a4:dd:63:c2:bc:80:c2:
                    c6:5b:5c:8e:e6:3a:cb:c6:9f:c5:19:c6:11:0d:ac:
                    3f:df:c3:d2:8a:b3:ff:35:69:fc:e9:69:18:c8:64:
                    d5:65:b8:27:71:4e:5d:6c:8a:9f:22:3d:3f:01:18:
                    e2:fd:ef:82:db:a6:2a:2d:91:dd:a1:22:e3:c3:2f:
                    c7:44:2d:68:87:fc:6e:22:1d:d7:62:bd:f1:54:68:
                    e8:d6:32:ba:b9:d1:4e:bf:c5:53:71:6e:2e:dc:f7:
                    d7:13:6f:64:83:1b:2b:40:7c:62:d7:05:0f:26:41:
                    01:de:6f:79:ce:da:4c:15:8a:91:02:62:5c:e9:c1:
                    74:72:31:a2:c0:0d:a1:73:21:f0:37:ec:b6:cf:49:
                    55:ac:75:ee:7e:8f:9d:ad:82:09:ca:d2:83:df:48:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.106.192.0/19
                  192.95.64.0/24
                  199.43.255.0/24
                  199.66.8.0/22
                  199.120.32.0-199.120.57.255
                IPv6:
                  2620:137:d000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394161
                  394363
                  394943

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4b:ad:4f:0d:8e:3f:83:5e:8b:db:38:e4:9e:db:69:6d:1c:
         2e:9b:92:f0:c3:70:18:ae:bd:f6:0f:1e:d9:20:3e:2f:57:36:
         6c:5d:34:e0:c0:44:40:27:ae:a1:2f:07:48:eb:b6:e0:97:2f:
         76:c8:7f:8a:1d:ee:65:2b:c8:7d:1b:d4:a1:ae:66:dd:a8:13:
         7b:b4:24:a6:5c:38:f9:23:83:52:73:76:a8:6f:f5:ae:ec:6d:
         59:58:4a:18:b6:d7:03:e0:58:29:74:7a:3b:c5:9e:5b:7b:2d:
         da:ca:df:02:39:06:4d:3a:6c:ef:46:5e:9d:54:f1:02:17:28:
         58:80:7b:5f:b7:08:cc:82:0e:10:a8:76:8a:36:a3:54:a0:2e:
         b9:56:1c:c5:37:98:87:40:ee:97:65:4d:81:1c:f4:93:23:21:
         c5:c0:1e:57:a3:9e:52:6b:51:c8:93:de:21:b1:e5:f0:11:23:
         35:53:f2:29:32:74:75:7f:87:83:1e:a8:12:5b:d2:31:7d:48:
         75:3f:a7:53:50:74:5f:fe:97:73:67:6f:74:a8:de:c7:b8:a8:
         e2:55:db:97:09:ab:f8:9d:16:90:22:c3:7b:b3:23:82:7d:ce:
         21:df:7c:3d:7c:c0:8a:4b:1c:7a:a8:25:23:fb:24:93:1c:e6:
         d8:f0:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 20:36:49 2024 by rpki-client on console-ams.rpki-client.org