Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af.cer
File:                     80a5a637-2442-4c3f-b791-5a2e260822af.cer (raw, json)
Hash identifier:          rmWrafW+Vrl1JrEk4j/wBuW+2vJ+VwD9HNXHgXxNm1A=
Subject key identifier:   8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858433F57F8BC7ED054FCA2F79FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Sep 2023 00:45:22 +0000
Certificate not after:    Sat 20 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 394688
                          IP: 98.142.188.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3f:57:f8:bc:7e:d0:54:fc:a2:f7:9f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 17 00:45:22 2023 GMT
            Not After : Dec 20 01:45:22 2025 GMT
        Subject: CN=80a5a637-2442-4c3f-b791-5a2e260822af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:1e:25:08:a3:41:c5:29:f7:1a:92:cd:47:
                    e0:7e:6b:9b:23:25:8e:e9:67:50:78:6c:11:65:52:
                    46:8d:ff:28:32:bd:0a:34:6d:ba:1f:eb:f1:5c:bd:
                    14:ac:b4:52:86:5a:6a:e5:31:2f:dd:db:75:1a:0f:
                    a3:42:15:83:8a:ec:91:24:06:1d:8a:90:94:0d:b8:
                    87:e1:41:8e:48:40:3b:a2:d1:0a:c0:c1:71:ba:0d:
                    f9:9d:de:06:53:04:68:cb:be:56:17:5a:89:05:ed:
                    50:3f:36:fc:3f:65:2f:c8:fa:18:e6:e6:b2:0f:2c:
                    94:6a:c1:4a:21:7d:64:99:23:10:b3:fc:68:3e:e6:
                    71:0f:81:7f:c0:7b:f8:c3:8f:8d:42:8e:1b:bc:63:
                    29:34:f0:43:9e:b5:1d:98:30:b5:e6:a8:fd:db:23:
                    fc:d5:e2:c3:bf:8f:b7:e1:d9:05:de:1b:9d:de:46:
                    61:78:f4:84:0c:af:e7:9a:23:f4:5c:45:ee:63:c6:
                    b8:ea:03:4c:b7:5c:ee:70:67:a2:d2:09:26:8d:7e:
                    c0:b6:f1:43:e0:33:61:98:46:ab:e9:27:37:0d:0d:
                    91:a4:8b:7b:7d:cb:8e:a6:09:19:dc:5a:60:42:65:
                    b5:ba:9c:5f:88:9b:80:a4:36:13:8f:ff:e8:78:71:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:39:90:B1:69:98:EF:64:F0:DF:06:55:9A:81:14:F5:E3:79:72:F3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/80a5a637-2442-4c3f-b791-5a2e260822af/80a5a637-2442-4c3f-b791-5a2e260822af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.188.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394688

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:47:fb:8f:82:57:ae:7d:cc:51:0d:53:81:27:0e:05:8d:54:
         5f:be:b6:64:54:b2:da:ab:76:dd:5a:a9:c1:72:15:79:fc:ae:
         98:cc:b2:2d:57:71:b5:ec:cc:c3:a2:76:91:0f:dd:b2:2d:12:
         3c:67:c9:c3:32:1b:54:09:37:10:1a:27:4f:0c:a9:12:1d:0e:
         c3:3f:d6:56:b2:19:5d:3c:ae:84:ca:20:7f:f1:02:56:76:ec:
         76:30:69:c3:df:b2:e4:e9:b7:ee:30:b1:fa:66:ad:62:41:9f:
         50:89:3e:10:0f:de:7b:e2:9d:4d:b2:1b:bc:e4:24:4f:70:fd:
         6f:e7:01:04:d1:45:ee:42:46:3e:45:44:e0:e5:d6:f0:fe:67:
         6d:da:b1:3b:c5:0b:16:43:ce:bb:42:98:31:75:e4:0a:15:b9:
         5f:c8:42:41:38:f7:c6:28:46:8f:41:27:b3:d1:b5:7e:f5:20:
         86:07:9d:26:12:c0:fa:94:62:7b:79:6b:a2:1d:c2:79:81:d3:
         5b:1e:33:81:6d:f5:16:aa:bd:82:79:8a:50:9a:eb:2a:1c:23:
         6f:33:36:d2:dc:4c:40:a1:f0:6e:f6:62:52:e7:4b:2b:db:51:
         c8:84:21:02:d6:7b:c5:ec:90:12:24:bb:38:49:06:39:4c:6b:
         c7:ec:0a:c0
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEM/V/i8ftBU/KL3n6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDkxNzAwNDUyMloXDTI1MTIyMDAxNDUyMlowLzEtMCsGA1UEAxMk
ODBhNWE2MzctMjQ0Mi00YzNmLWI3OTEtNWEyZTI2MDgyMmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoYeJQijQcUp9xqSzUfgfmubIyWO6WdQeGwR
ZVJGjf8oMr0KNG26H+vxXL0UrLRShlpq5TEv3dt1Gg+jQhWDiuyRJAYdipCUDbiH
4UGOSEA7otEKwMFxug35nd4GUwRoy75WF1qJBe1QPzb8P2UvyPoY5uayDyyUasFK
IX1kmSMQs/xoPuZxD4F/wHv4w4+NQo4bvGMpNPBDnrUdmDC15qj92yP81eLDv4+3
4dkF3hud3kZhePSEDK/nmiP0XEXuY8a46gNMt1zucGei0gkmjX7AtvFD4DNhmEar
6Sc3DQ2RpIt7fcuOpgkZ3FpgQmW1upxfiJuApDYTj//oeHFVlwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFIo5kLFpmO9k8N8GVZqBFPXjeXLzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84
MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYwODIyYWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwYTVhNjM3LTI0NDItNGMzZi1i
NzkxLTVhMmUyNjA4MjJhZi84MGE1YTYzNy0yNDQyLTRjM2YtYjc5MS01YTJlMjYw
ODIyYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJijrwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgXAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGdH+4+CV659zFENU4EnDgWNVF++tmRUstqrdt1aqcFyFXn8
rpjMsi1XcbXszMOidpEP3bItEjxnycMyG1QJNxAaJ08MqRIdDsM/1layGV08roTK
IH/xAlZ27HYwacPfsuTpt+4wsfpmrWJBn1CJPhAP3nvinU2yG7zkJE9w/W/nAQTR
Re5CRj5FRODl1vD+Z23asTvFCxZDzrtCmDF15AoVuV/IQkE498YoRo9BJ7PRtX71
IIYHnSYSwPqUYnt5a6IdwnmB01seM4Ft9RaqvYJ5ilCa6yocI28zNtLcTECh8G72
YlLnSyvbUciEIQLWe8XskBIkuzhJBjlMa8fsCsA=
-----END CERTIFICATE-----
Generated at Sun May 5 01:25:50 2024 by rpki-client on console-ams.rpki-client.org