Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
File:                     c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer (raw, json)
Hash identifier:          SVc18d3bH9lNFrFavsqDG+AnUJYjSRR7vDlIjdBWJ9Q=
Subject key identifier:   BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845F3B199882FBB4D281CBBA280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 May 2024 00:45:20 +0000
Certificate not after:    Tue 25 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 46208
                          IP: 67.212.208.0/20
                          IP: 67.214.160.0/20
                          IP: 67.214.182.0 -- 67.214.191.255
                          IP: 74.221.48.0/20
                          IP: 170.249.0.0/19
                          IP: 192.158.26.0/23
                          IP: 216.129.144.0/21
                          IP: 2607:f5b8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f3:b1:99:88:2f:bb:4d:28:1c:bb:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 22 00:45:20 2024 GMT
            Not After : Aug 25 00:45:20 2026 GMT
        Subject: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:60:7e:ab:05:07:8a:70:8b:cd:71:14:0f:
                    7c:a1:4e:7b:66:cb:b7:40:85:2d:fb:7f:ee:35:1d:
                    b4:5e:3d:b2:0c:59:25:06:4d:56:5c:1b:0f:2e:d9:
                    08:5c:0e:3a:17:89:c3:51:6d:8c:6b:50:06:8c:b0:
                    f9:1e:8e:7f:86:fd:b4:05:31:36:83:3d:64:37:b4:
                    5a:8f:24:64:e8:6c:2c:fd:9c:d7:97:b7:5e:e2:fe:
                    0d:82:39:6b:6c:f6:de:ef:b5:52:28:38:6c:02:25:
                    df:df:b9:0b:bd:2e:3e:09:a9:a3:95:be:63:27:56:
                    35:21:f7:ec:44:96:d8:58:b7:f6:19:93:72:31:9e:
                    72:5f:74:32:b4:1b:3e:a9:05:4b:ae:3d:e4:a7:84:
                    64:73:74:8c:41:3a:c5:7f:8b:7f:02:be:1e:34:ef:
                    72:dc:7c:b0:2d:c4:3e:cc:15:fc:b4:6d:15:43:f1:
                    f9:4d:b3:d8:fe:5b:67:6b:66:f0:bb:3c:c9:1f:fb:
                    57:87:d6:0d:16:05:08:1c:cb:bc:8d:6b:de:86:c2:
                    d5:3b:8c:c1:65:8b:50:d6:5f:a9:ea:a5:63:6d:b7:
                    05:fd:f8:be:e0:b1:92:83:65:e0:b0:6f:9f:46:b6:
                    6b:ce:09:b5:5a:98:92:fe:47:3f:f6:a9:83:3a:ab:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.208.0/20
                  67.214.160.0/20
                  67.214.182.0-67.214.191.255
                  74.221.48.0/20
                  170.249.0.0/19
                  192.158.26.0/23
                  216.129.144.0/21
                IPv6:
                  2607:f5b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46208

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:5d:1a:67:17:ba:4e:ab:05:b1:e7:fc:f7:6a:a9:34:bc:
         24:98:55:5b:4c:75:72:58:4d:c1:d8:92:b9:ca:ee:27:f7:10:
         0a:e7:be:1d:54:0c:ec:fe:95:75:b2:bd:da:9b:04:86:fb:1d:
         e1:9c:f3:70:85:fd:b8:a4:59:79:35:ab:be:84:d0:be:54:b3:
         c9:2c:9e:d0:f8:ab:98:67:89:06:e4:bb:1d:e8:c7:27:24:da:
         23:cb:e0:b9:52:df:c5:75:59:e0:b2:94:c4:55:31:a3:86:b3:
         e0:3a:2c:39:d5:ab:25:3c:5a:6b:13:1d:8c:7b:13:ee:02:33:
         ee:2e:bd:e2:8e:db:69:88:bf:c4:3f:fc:3f:98:a5:d0:62:f7:
         b9:45:17:0d:e7:68:3f:88:ac:82:74:37:d7:28:75:7c:8f:c7:
         46:0c:e0:e9:f8:1b:36:13:90:f5:17:ac:f2:5a:f7:c4:82:e5:
         a2:db:f4:27:27:d5:e0:8d:ad:11:df:9b:95:3d:c0:90:a9:f9:
         c4:b8:50:45:a6:0f:ec:78:64:72:b4:59:2b:b7:9b:31:b5:2c:
         18:69:ac:7b:42:e7:bf:a3:ba:90:28:05:12:ad:25:1b:c1:aa:
         d8:4b:7f:cc:bf:3d:6b:0f:08:d7:b9:09:c1:fb:b0:bb:7b:08:
         cb:45:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:30 2024 by rpki-client on console-fra.rpki-client.org