Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
File:                     e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer (raw, json)
Hash identifier:          d7qi1b6yXqvkE49NrCVIp4ce22uzIHoe/FB4KbQMO3w=
Subject key identifier:   14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E483499A2BB1C133D4DF2880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 23 May 2025 19:06:39 +0000
Subordinate resources:    AS: 10430
                          IP: 66.96.64.0/20
                          IP: 67.201.192.0/18
                          IP: 68.179.192.0/19
                          IP: 69.56.64.0/18
                          IP: 72.233.128.0/17
                          IP: 173.229.32.0/19
                          IP: 207.180.96.0/19
                          IP: 216.186.0.0/17
                          IP: 216.210.0.0/18
                          IP: 2607:fa78::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:49:9a:2b:b1:c1:33:d4:df:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 23 19:06:39 2025 GMT
        Subject: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cd:d6:e1:3a:52:01:8e:9a:0f:b2:ba:eb:e8:
                    90:81:8e:ec:41:8e:93:3f:1b:38:20:ad:09:ef:54:
                    39:59:7d:96:4f:57:73:66:a9:7d:93:a4:81:88:5b:
                    d0:65:1d:f1:0d:59:56:a2:b2:cf:4b:8c:cc:18:a0:
                    48:0a:41:ce:49:55:4b:d7:60:6f:bf:30:ef:f2:1b:
                    e8:a4:2f:3f:d8:bd:41:5d:79:9c:a0:6c:ed:f2:10:
                    ab:43:c7:b0:1e:c2:52:75:ad:32:55:4b:e1:d4:fa:
                    57:2a:c1:83:2c:d4:9e:83:22:9b:e5:3f:71:0d:02:
                    b6:02:92:48:d9:9d:ff:26:d3:58:32:d3:42:05:ed:
                    2c:7e:74:87:32:16:eb:49:01:3b:96:a3:7e:eb:ad:
                    55:c1:81:6f:f7:dd:53:79:17:f8:85:3d:57:b8:2a:
                    e3:53:07:0d:64:c3:3b:b1:98:36:99:c6:09:a8:e8:
                    dd:1c:4e:42:d1:d2:c1:10:68:e5:0b:2a:39:7c:e9:
                    45:95:f7:6f:56:a1:5e:d1:94:cc:11:24:36:5d:c3:
                    40:af:c6:47:0b:59:c3:f4:a3:56:43:70:d9:bd:b1:
                    95:d6:32:c5:2b:80:7e:cc:aa:6b:5f:e9:e2:06:d3:
                    ee:e3:80:21:b9:e8:f6:81:55:19:c5:96:c8:b0:23:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.96.64.0/20
                  67.201.192.0/18
                  68.179.192.0/19
                  69.56.64.0/18
                  72.233.128.0/17
                  173.229.32.0/19
                  207.180.96.0/19
                  216.186.0.0/17
                  216.210.0.0/18
                IPv6:
                  2607:fa78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10430

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:10:12:d1:68:a3:67:4f:3f:0d:21:3f:58:e4:d9:dd:1e:4b:
         3d:3d:b8:bf:66:17:f5:ce:86:bc:07:96:4a:90:c1:4d:12:85:
         71:c3:13:d8:de:18:09:5a:fb:63:ee:00:a9:9d:b4:e9:9c:ac:
         47:a6:86:28:8a:21:38:20:86:e5:d7:62:2c:b0:14:5a:be:bb:
         62:8e:7e:5a:cd:87:0d:f3:6f:01:fe:c0:21:4a:19:8b:9a:12:
         86:c7:61:80:ee:bb:e4:92:8e:cd:d0:1b:42:b6:47:45:58:80:
         a0:91:0f:c6:4a:f6:1d:14:a4:e0:ac:e9:02:d8:99:18:2d:af:
         5b:59:0f:e5:80:c0:94:56:44:cd:06:e3:09:2f:1d:a2:d1:76:
         e3:0c:c4:bc:88:71:49:86:af:40:c6:4b:ba:33:96:d6:f2:21:
         14:f6:db:e6:d1:ed:78:ec:51:85:cd:b6:bf:71:34:58:5e:fb:
         0a:da:bd:c8:68:b9:52:50:60:a9:7c:d8:8d:89:99:81:e0:66:
         d0:ec:7d:92:6a:5d:a2:74:b6:6d:c7:46:01:23:16:98:80:d8:
         01:08:fc:2c:12:06:e4:2c:a8:d3:09:d3:35:12:bf:22:72:cb:
         04:d7:ac:b4:1c:0e:7a:fc:77:56:33:93:d8:f1:85:b3:c8:25:
         30:14:6e:69
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEHkg0maK7HBM9TfKIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyMzE5MDYzOVowLzEtMCsGA1UEAxMk
ZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMzNzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM3W4TpSAY6aD7K66+iQgY7sQY6TPxs4IK0J
71Q5WX2WT1dzZql9k6SBiFvQZR3xDVlWorLPS4zMGKBICkHOSVVL12BvvzDv8hvo
pC8/2L1BXXmcoGzt8hCrQ8ewHsJSda0yVUvh1PpXKsGDLNSegyKb5T9xDQK2ApJI
2Z3/JtNYMtNCBe0sfnSHMhbrSQE7lqN+661VwYFv991TeRf4hT1XuCrjUwcNZMM7
sZg2mcYJqOjdHE5C0dLBEGjlCyo5fOlFlfdvVqFe0ZTMESQ2XcNAr8ZHC1nD9KNW
Q3DZvbGV1jLFK4B+zKprX+niBtPu44Ahuej2gVUZxZbIsCMsJwIDAQABo4IEWTCC
BFUwHQYDVR0OBBYEFBTveelp8wU4n4xa3j2FN9WYxXULMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l
OWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5YmJiMDZhLWU3NWItNDFjYi1i
OWRhLTJjYjI4ZjRjMzczZi9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0
YzM3M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXgYIKwYBBQUH
AQcBAf8ETzBNMDwEAgABMDYDBARCYEADBAZDycADBAVEs8ADBAZFOEADBAdI6YAD
BAWt5SADBAXPtGADBAfYugADBAbY0gAwDQQCAAIwBwMFACYH+ngwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICKL4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAABAS0WijZ08/DSE/WOTZ3R5LPT24
v2YX9c6GvAeWSpDBTRKFccMT2N4YCVr7Y+4AqZ206ZysR6aGKIohOCCG5ddiLLAU
Wr67Yo5+Ws2HDfNvAf7AIUoZi5oShsdhgO675JKOzdAbQrZHRViAoJEPxkr2HRSk
4KzpAtiZGC2vW1kP5YDAlFZEzQbjCS8dotF24wzEvIhxSYavQMZLujOW1vIhFPbb
5tHteOxRhc22v3E0WF77Ctq9yGi5UlBgqXzYjYmZgeBm0Ox9kmpdonS2bcdGASMW
mIDYAQj8LBIG5Cyo0wnTNRK/InLLBNestBwOevx3VjOT2PGFs8glMBRuaQ==
-----END CERTIFICATE-----
Generated at Wed May 1 16:33:37 2024 by rpki-client on console-fra.rpki-client.org