Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer
File:                     cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.cer (raw, json)
Hash identifier:          lbcTW7iy0abT7v3lVGUMK/8wmlPlr/gMFQcet38W438=
Subject key identifier:   0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844A94934077A0DFA5A0771BF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 24 Jan 2024 16:18:15 +0000
Certificate not after:    Tue 31 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 398940
                          IP: 192.245.221.0 -- 192.245.224.255
                          IP: 199.33.130.0 -- 199.33.134.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a9:49:34:07:7a:0d:fa:5a:07:71:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 24 16:18:15 2024 GMT
            Not After : Mar 31 00:45:15 2026 GMT
        Subject: CN=cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:a9:9a:f7:4e:87:c7:67:89:77:1f:7a:06:
                    4a:b2:58:9b:72:9a:08:e5:88:4b:0b:2b:af:25:96:
                    33:90:3f:37:f7:07:92:5d:35:c8:b5:97:f3:09:e7:
                    31:16:1f:54:a4:16:df:5b:18:37:21:a6:34:08:72:
                    f8:67:a7:5d:b2:db:1f:c2:ef:0b:01:47:b9:8a:e6:
                    7a:bb:73:a6:9b:47:cf:39:3c:e7:69:43:d7:45:e1:
                    e1:ab:ac:ed:5e:49:40:a6:a1:17:63:2e:c7:0d:ef:
                    97:62:09:00:c9:0e:bf:d7:5c:4f:29:a8:c0:a1:ed:
                    78:5f:7e:0d:bc:94:ca:32:a2:3b:a9:bb:18:2b:52:
                    d2:32:05:6d:7b:70:85:ad:8c:66:50:99:c4:01:77:
                    d2:24:c8:46:fe:f4:fe:25:22:eb:88:30:96:e1:fe:
                    dc:10:af:15:26:09:8a:ca:85:f7:c4:7c:72:da:78:
                    48:6d:01:66:f3:a2:9c:5b:af:23:92:b9:58:69:55:
                    8f:d4:50:30:e8:ef:75:ff:39:9b:af:e8:b9:42:54:
                    7b:1a:a8:8c:5a:ce:d9:b1:38:38:a5:27:b2:bd:93:
                    7e:3b:77:70:ad:e2:e9:13:59:9c:dc:88:f2:09:07:
                    4f:c5:99:73:49:59:2f:85:12:af:f2:1c:ad:bf:d8:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:BF:FC:CA:9D:3B:96:77:AB:14:6E:B1:80:5C:09:2F:9C:A7:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2/cd54e5bb-30cd-460a-a3ae-4ab83c2f62a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.221.0-192.245.224.255
                  199.33.130.0-199.33.134.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398940

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:fe:71:09:a5:f7:12:75:ce:7c:03:81:d9:27:a8:77:09:21:
         13:23:79:8d:3a:d0:b4:b7:1f:36:1c:6b:e8:cd:67:2b:f2:45:
         0d:2f:96:df:e8:ff:cb:04:26:af:13:25:38:85:77:36:b0:5a:
         d5:e0:43:cd:55:07:14:5b:80:bf:11:23:d4:4c:82:21:96:7b:
         17:08:ce:09:07:cb:56:62:b3:2d:20:fb:55:d9:56:05:c8:6d:
         12:4b:a3:f2:4d:95:ec:c3:d8:12:59:4e:5a:28:cc:f2:39:81:
         19:fc:c1:19:ae:47:3f:3a:89:af:3b:db:09:37:b5:98:84:0d:
         de:60:ed:27:4c:10:44:c6:f8:b7:ca:c9:4c:60:3d:4e:05:d5:
         1e:f2:df:23:14:54:a0:93:bb:1c:70:a0:c4:2d:e7:b7:43:da:
         37:a6:c5:5c:e0:86:4d:9d:5c:02:ca:d0:68:8c:21:09:2b:35:
         4f:98:1f:fa:10:ea:a3:4a:de:ea:db:d5:bd:0a:fd:5e:55:51:
         15:47:38:91:8a:79:6f:eb:dd:76:b1:9a:d9:29:d4:96:1e:f0:
         1c:6b:7b:1d:09:87:b1:f7:66:b9:5a:28:94:74:eb:a4:e3:e4:
         ed:39:00:48:d7:a2:9c:48:2a:1c:66:3a:bf:19:3b:c9:b0:ef:
         82:ce:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:33:01 2024 by rpki-client on console-ams.rpki-client.org