Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5.cer
File:                     3d8dd457-4641-4633-bb2c-ade38d76edd5.cer (raw, json)
Hash identifier:          JpZsPg8mbpgjVlyo8mb3adb7HO1JTRmJWWFKcSqnysg=
Subject key identifier:   25:80:DF:D3:7F:D1:C6:5D:24:01:67:21:B2:A1:85:CF:10:76:38:EA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858461A27A76F9FA362D903978F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/3d8dd457-4641-4633-bb2c-ade38d76edd5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Jun 2024 19:23:56 +0000
Certificate not after:    Mon 07 Sep 2026 19:23:56 +0000
Subordinate resources:    AS: 5742
                          AS: 6300
                          AS: 10664
                          AS: 11401
                          AS: 12042
                          AS: 12112
                          AS: 13333
                          AS: 14051
                          AS: 25660
                          IP: 64.30.96.0/19
                          IP: 64.61.192.0/18
                          IP: 64.92.0.0/18
                          IP: 64.113.96.0/19
                          IP: 64.254.176.0/20
                          IP: 65.78.128.0/18
                          IP: 66.37.48.0/20
                          IP: 66.60.128.0/18
                          IP: 66.116.0.0/18
                          IP: 66.170.192.0/19
                          IP: 66.205.128.0/19
                          IP: 66.212.128.0/19
                          IP: 67.20.224.0/19
                          IP: 67.58.224.0/19
                          IP: 67.159.128.0/19
                          IP: 67.218.16.0/20
                          IP: 68.232.224.0/19
                          IP: 69.4.128.0/19
                          IP: 69.24.160.0/19
                          IP: 69.62.128.0/17
                          IP: 72.22.0.0/19
                          IP: 72.26.0.0/19
                          IP: 72.46.176.0/22
                          IP: 72.46.183.0/24
                          IP: 72.251.160.0/19
                          IP: 76.164.64.0/18
                          IP: 104.193.76.0/22
                          IP: 135.26.0.0 -- 135.26.223.255
                          IP: 156.47.32.0 -- 156.47.255.255
                          IP: 162.217.208.0/22
                          IP: 173.233.0.0/19
                          IP: 174.34.192.0/19
                          IP: 192.159.88.0/24
                          IP: 192.241.48.0/20
                          IP: 198.144.0.0/20
                          IP: 198.190.226.0/24
                          IP: 204.11.72.0/21
                          IP: 204.154.216.0/21
                          IP: 205.166.20.0/24
                          IP: 206.51.192.0/19
                          IP: 206.123.240.0/20
                          IP: 206.193.224.0/19
                          IP: 206.221.144.0/21
                          IP: 206.221.156.0/22
                          IP: 207.70.128.0/18
                          IP: 207.183.224.0/19
                          IP: 207.231.64.0/19
                          IP: 208.92.196.0/22
                          IP: 208.124.64.0/18
                          IP: 209.23.128.0/18
                          IP: 209.34.0.0/18
                          IP: 209.107.224.0/19
                          IP: 209.169.64.0/18
                          IP: 209.195.128.0/18
                          IP: 209.240.224.0/19
                          IP: 216.70.0.0/18
                          IP: 216.93.192.0 -- 216.93.239.255
                          IP: 216.114.192.0/18
                          IP: 216.176.64.0/19
                          IP: 216.251.160.0/19
                          IP: 2605:d00::/32
                          IP: 2605:7e00::/32
                          IP: 2605:9400::/32
                          IP: 2605:b380::/32
                          IP: 2605:db80::/32
                          IP: 2606:400::/32
                          IP: 2607:f7e0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1a:27:a7:6f:9f:a3:62:d9:03:97:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun  4 19:23:56 2024 GMT
            Not After : Sep  7 19:23:56 2026 GMT
        Subject: CN=3d8dd457-4641-4633-bb2c-ade38d76edd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:c6:0e:a8:af:22:8e:7f:49:2c:b6:ca:af:
                    ff:be:77:cd:fe:26:cd:4e:f9:d6:5c:49:ea:d4:bc:
                    18:c0:d5:47:6e:06:01:3d:43:4f:16:3f:1f:cc:77:
                    03:2d:00:24:e3:e2:b4:aa:18:4a:1b:4f:52:4c:44:
                    49:33:be:e5:b9:b6:55:1d:e9:4e:68:58:8b:ce:aa:
                    50:31:64:81:0f:1d:76:90:0f:6f:2a:99:0f:74:3f:
                    8d:5d:af:ca:35:93:83:02:d2:49:84:d3:6e:91:f6:
                    13:a0:0b:68:19:96:32:35:21:67:ba:62:d8:b6:88:
                    1d:f2:6b:81:6e:85:9a:24:f2:f6:91:89:1d:66:b1:
                    a1:88:ff:dc:63:80:a0:c3:27:fc:83:f0:5a:ac:8c:
                    a4:91:e6:4d:c0:2f:c6:78:f8:cd:7c:71:49:af:7e:
                    0d:5e:11:a1:87:70:45:75:28:c7:bd:9c:be:ed:82:
                    2f:a3:5c:28:12:77:a3:d4:75:27:1b:e5:99:9c:98:
                    a1:df:0c:2c:45:c3:45:6c:03:21:4d:3e:2c:3d:e6:
                    cb:c8:98:9a:30:16:c5:c5:9d:0e:53:89:3b:23:a2:
                    db:b9:80:52:4c:34:0c:bf:92:b2:b5:9a:23:26:5f:
                    d5:05:a9:2d:cf:35:97:2f:24:35:f9:1d:1e:bb:9d:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:80:DF:D3:7F:D1:C6:5D:24:01:67:21:B2:A1:85:CF:10:76:38:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d8dd457-4641-4633-bb2c-ade38d76edd5/3d8dd457-4641-4633-bb2c-ade38d76edd5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.96.0/19
                  64.61.192.0/18
                  64.92.0.0/18
                  64.113.96.0/19
                  64.254.176.0/20
                  65.78.128.0/18
                  66.37.48.0/20
                  66.60.128.0/18
                  66.116.0.0/18
                  66.170.192.0/19
                  66.205.128.0/19
                  66.212.128.0/19
                  67.20.224.0/19
                  67.58.224.0/19
                  67.159.128.0/19
                  67.218.16.0/20
                  68.232.224.0/19
                  69.4.128.0/19
                  69.24.160.0/19
                  69.62.128.0/17
                  72.22.0.0/19
                  72.26.0.0/19
                  72.46.176.0/22
                  72.46.183.0/24
                  72.251.160.0/19
                  76.164.64.0/18
                  104.193.76.0/22
                  135.26.0.0-135.26.223.255
                  156.47.32.0-156.47.255.255
                  162.217.208.0/22
                  173.233.0.0/19
                  174.34.192.0/19
                  192.159.88.0/24
                  192.241.48.0/20
                  198.144.0.0/20
                  198.190.226.0/24
                  204.11.72.0/21
                  204.154.216.0/21
                  205.166.20.0/24
                  206.51.192.0/19
                  206.123.240.0/20
                  206.193.224.0/19
                  206.221.144.0/21
                  206.221.156.0/22
                  207.70.128.0/18
                  207.183.224.0/19
                  207.231.64.0/19
                  208.92.196.0/22
                  208.124.64.0/18
                  209.23.128.0/18
                  209.34.0.0/18
                  209.107.224.0/19
                  209.169.64.0/18
                  209.195.128.0/18
                  209.240.224.0/19
                  216.70.0.0/18
                  216.93.192.0-216.93.239.255
                  216.114.192.0/18
                  216.176.64.0/19
                  216.251.160.0/19
                IPv6:
                  2605:d00::/32
                  2605:7e00::/32
                  2605:9400::/32
                  2605:b380::/32
                  2605:db80::/32
                  2606:400::/32
                  2607:f7e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5742
                  6300
                  10664
                  11401
                  12042
                  12112
                  13333
                  14051
                  25660

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:b5:7f:26:0b:54:67:79:e4:8a:62:03:d0:63:92:4a:ee:
         37:d2:a6:43:51:ed:3e:75:2a:d8:13:e3:c4:cf:da:81:5b:f5:
         c9:f6:bc:36:63:9f:48:ea:7c:87:9a:22:4c:70:7d:00:02:46:
         3d:b8:3d:e3:f5:af:70:dc:58:a3:cd:32:5f:3b:46:4c:64:bc:
         99:ea:92:66:08:44:08:b3:87:02:2c:c6:f3:f7:ea:bd:15:ee:
         44:85:31:25:2f:27:4d:b4:f5:e3:7a:12:db:65:8d:ab:b8:df:
         d1:69:62:dd:1a:84:86:90:e0:a6:8f:f9:4f:a1:80:32:d4:da:
         58:a5:d3:25:82:7d:b3:c4:2d:d9:33:97:f1:a7:3d:dc:b3:4d:
         55:e4:72:24:eb:64:89:59:7b:91:dd:26:61:eb:b6:76:54:4d:
         1b:e4:14:14:43:cc:27:0f:68:08:ee:58:0f:07:48:ca:5a:42:
         67:92:67:0f:b1:fc:93:d7:0e:ae:c3:c2:96:e8:5d:84:13:bd:
         0f:04:93:d2:4f:d9:f3:cf:7a:de:a9:11:50:c6:32:58:7d:93:
         6d:b4:6a:07:50:1b:f9:f3:d0:9c:65:2d:88:f9:43:87:dc:b4:
         72:2b:58:32:de:de:40:de:a4:3d:83:0d:46:6c:82:3b:71:ec:
         42:94:77:03
-----BEGIN CERTIFICATE-----
MIII4zCCB8ugAwIBAgIUAQ0Mn0MoWEYaJ6dvn6Ni2QOXj0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYwNDE5MjM1NloXDTI2MDkwNzE5MjM1NlowLzEtMCsGA1UEAxMk
M2Q4ZGQ0NTctNDY0MS00NjMzLWJiMmMtYWRlMzhkNzZlZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxTGDqivIo5/SSy2yq//vnfN/ibNTvnWXEnq
1LwYwNVHbgYBPUNPFj8fzHcDLQAk4+K0qhhKG09STERJM77lubZVHelOaFiLzqpQ
MWSBDx12kA9vKpkPdD+NXa/KNZODAtJJhNNukfYToAtoGZYyNSFnumLYtogd8muB
boWaJPL2kYkdZrGhiP/cY4Cgwyf8g/BarIykkeZNwC/GePjNfHFJr34NXhGhh3BF
dSjHvZy+7YIvo1woEnej1HUnG+WZnJih3wwsRcNFbAMhTT4sPebLyJiaMBbFxZ0O
U4k7I6LbuYBSTDQMv5KytZojJl/VBaktzzWXLyQ1+R0eu524uwIDAQABo4IF9TCC
BfEwHQYDVR0OBBYEFCWA39N/0cZdJAFnIbKhhc8QdjjqMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z
ZDhkZDQ1Ny00NjQxLTQ2MzMtYmIyYy1hZGUzOGQ3NmVkZDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNkOGRkNDU3LTQ2NDEtNDYzMy1i
YjJjLWFkZTM4ZDc2ZWRkNS8zZDhkZDQ1Ny00NjQxLTQ2MzMtYmIyYy1hZGUzOGQ3
NmVkZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwggHYBggrBgEF
BQcBBwEB/wSCAccwggHDMIIBhgQCAAEwggF+AwQFQB5gAwQGQD3AAwQGQFwAAwQF
QHFgAwQEQP6wAwQGQU6AAwQEQiUwAwQGQjyAAwQGQnQAAwQFQqrAAwQFQs2AAwQF
QtSAAwQFQxTgAwQFQzrgAwQFQ5+AAwQEQ9oQAwQFROjgAwQFRQSAAwQFRRigAwQH
RT6AAwQFSBYAAwQFSBoAAwQCSC6wAwQASC63AwQFSPugAwQGTKRAAwQCaMFMMAsD
AwGHGgMEBYcawDALAwQFnC8gAwMEnCADBAKi2dADBAWt6QADBAWuIsADBADAn1gD
BATA8TADBATGkAADBADGvuIDBAPMC0gDBAPMmtgDBADNphQDBAXOM8ADBATOe/AD
BAXOweADBAPO3ZADBALO3ZwDBAbPRoADBAXPt+ADBAXP50ADBALQXMQDBAbQfEAD
BAbRF4ADBAbRIgADBAXRa+ADBAbRqUADBAbRw4ADBAXR8OADBAbYRgAwDAMEBthd
wAMEBNhd4AMEBthywAMEBdiwQAMEBdj7oDA3BAIAAjAxAwUAJgUNAAMFACYFfgAD
BQAmBZQAAwUAJgWzgAMFACYF24ADBQAmBgQAAwUAJgf34DA5BggrBgEFBQcBCAEB
/wQqMCigJjAkAgIWbgICGJwCAimoAgIsiQICLwoCAi9QAgI0FQICNuMCAmQ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsftX8mC1RneeSKYgPQY5JK7jfSpkNR7T51KtgT48TP2oFb9cn2vDZj
n0jqfIeaIkxwfQACRj24PeP1r3DcWKPNMl87RkxkvJnqkmYIRAizhwIsxvP36r0V
7kSFMSUvJ0209eN6Ettljau439FpYt0ahIaQ4KaP+U+hgDLU2lil0yWCfbPELdkz
l/GnPdyzTVXkciTrZIlZe5HdJmHrtnZUTRvkFBRDzCcPaAjuWA8HSMpaQmeSZw+x
/JPXDq7DwpboXYQTvQ8Ek9JP2fPPet6pEVDGMlh9k220agdQG/nz0JxlLYj5Q4fc
tHIrWDLe3kDepD2DDUZsgjtx7EKUdwM=
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:16:30 2024 by rpki-client on console-ams.rpki-client.org