Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
File:                     50dd3001-8039-47e8-a642-92a97c54da3b.cer (raw, json)
Hash identifier:          gf+QSb9eTMqhAsapJgJwjI/a0oXwUqKEQF5TIOjw9dk=
Subject key identifier:   1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858440B41A0115FD298780BAF8200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 01:45:15 +0000
Certificate not after:    Tue 03 Mar 2026 01:45:15 +0000
Subordinate resources:    AS: 400771
                          IP: 23.141.40.0/24
                          IP: 2620:b0:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0b:41:a0:11:5f:d2:98:78:0b:af:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 29 01:45:15 2023 GMT
            Not After : Mar  3 01:45:15 2026 GMT
        Subject: CN=50dd3001-8039-47e8-a642-92a97c54da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:9d:ee:39:06:83:d7:96:d1:87:7c:28:66:
                    b1:a9:5a:f6:2f:e5:60:2b:1f:66:9c:8f:2a:bc:00:
                    0c:33:73:cf:7a:1a:b3:71:04:07:d8:a0:41:21:7b:
                    d2:38:d4:60:20:75:eb:21:c7:1e:dc:10:a1:e1:cc:
                    d0:e8:0e:7e:a5:9c:6b:a0:37:11:db:29:65:7b:60:
                    bf:a9:ac:a1:cc:20:dd:cd:81:5a:ad:16:f2:3d:cd:
                    26:d9:96:25:65:59:45:0c:b2:1e:0f:53:f8:5a:ad:
                    cc:94:22:41:a1:c0:76:5f:c0:92:4c:0e:63:39:d7:
                    b5:8f:9c:12:31:4c:f6:f1:1f:bb:b7:46:41:51:7c:
                    45:f2:8e:e1:30:01:a6:10:e5:82:28:69:90:c6:86:
                    82:ce:94:8b:42:36:f9:16:f8:ad:e6:bb:0f:7d:f0:
                    9a:9e:93:97:27:b8:20:c9:f0:70:c7:35:04:8e:b1:
                    b8:e8:ba:66:52:04:87:3b:51:cb:6b:08:05:4e:0d:
                    3d:e4:aa:e0:34:59:e9:aa:fe:e0:d0:0c:f6:93:33:
                    b7:c8:c4:9b:c3:fd:b7:02:7d:ca:75:6f:d2:10:c3:
                    05:db:f0:18:f4:12:df:83:4d:08:dc:db:8c:25:c5:
                    e5:14:9c:db:5c:b2:8b:a4:22:42:9a:0e:3e:c2:15:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.40.0/24
                IPv6:
                  2620:b0:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400771

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:5f:3f:67:b1:23:92:3b:12:ca:36:be:91:8c:99:56:89:
         f2:70:b8:98:08:02:15:79:4c:f1:a4:ae:7d:0f:f9:54:34:91:
         a7:6c:b0:98:d1:65:0e:cd:d5:40:63:5f:fb:a7:39:dd:a5:e2:
         9a:a9:b2:6b:05:4b:ea:ef:71:10:d5:44:b3:59:93:04:d2:a0:
         b4:e0:af:5a:fa:35:97:00:bc:b8:6e:12:7d:60:5f:a2:e2:50:
         53:e6:01:ae:c2:fe:ec:50:78:5a:7e:33:99:0f:8f:aa:b5:4e:
         b1:e9:20:3a:7e:06:2c:74:45:35:6f:25:f1:de:2f:97:07:89:
         11:99:7c:f0:12:db:71:94:15:d0:46:f3:28:55:0f:7f:c8:56:
         ef:86:b4:10:c5:e8:b2:21:f7:f1:88:8d:a4:72:a4:d7:d8:b7:
         c3:c8:25:b1:14:fb:5e:73:4b:63:d1:75:49:c2:01:6b:fb:10:
         d3:78:2c:86:94:a1:7a:89:6f:21:06:e3:16:28:47:ed:e8:4d:
         a6:92:7d:d5:de:f1:aa:96:d9:49:c4:8d:e8:8e:47:be:1e:69:
         15:9a:9b:a2:71:a4:f6:0d:3b:ca:5e:f9:42:48:3a:b4:fa:53:
         a1:75:d2:8f:18:d1:05:9f:66:b8:c0:ad:f3:27:47:8b:3c:9b:
         10:da:70:35
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEQLQaARX9KYeAuvggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIzMTEyOTAxNDUxNVoXDTI2MDMwMzAxNDUxNVowLzEtMCsGA1UEAxMk
NTBkZDMwMDEtODAzOS00N2U4LWE2NDItOTJhOTdjNTRkYTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkWd7jkGg9eW0Yd8KGaxqVr2L+VgKx9mnI8q
vAAMM3PPehqzcQQH2KBBIXvSONRgIHXrIcce3BCh4czQ6A5+pZxroDcR2ylle2C/
qayhzCDdzYFarRbyPc0m2ZYlZVlFDLIeD1P4Wq3MlCJBocB2X8CSTA5jOde1j5wS
MUz28R+7t0ZBUXxF8o7hMAGmEOWCKGmQxoaCzpSLQjb5Fvit5rsPffCanpOXJ7gg
yfBwxzUEjrG46LpmUgSHO1HLawgFTg095KrgNFnpqv7g0Az2kzO3yMSbw/23An3K
dW/SEMMF2/AY9BLfg00I3NuMJcXlFJzbXLKLpCJCmg4+whWDmwIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFB+KvhtOob5bFxK0RQTQv+QVcDwKMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81
MGRkMzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5N2M1NGRhM2IvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzUwZGQzMDAxLTgwMzktNDdlOC1h
NjQyLTkyYTk3YzU0ZGEzYi81MGRkMzAwMS04MDM5LTQ3ZTgtYTY0Mi05MmE5N2M1
NGRhM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXjSgwDwQCAAIwCQMHACYgALAgADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMGHYMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHPlfP2exI5I7Eso2vpGMmVaJ
8nC4mAgCFXlM8aSufQ/5VDSRp2ywmNFlDs3VQGNf+6c53aXimqmyawVL6u9xENVE
s1mTBNKgtOCvWvo1lwC8uG4SfWBfouJQU+YBrsL+7FB4Wn4zmQ+PqrVOsekgOn4G
LHRFNW8l8d4vlweJEZl88BLbcZQV0EbzKFUPf8hW74a0EMXosiH38YiNpHKk19i3
w8glsRT7XnNLY9F1ScIBa/sQ03gshpSheolvIQbjFihH7ehNppJ91d7xqpbZScSN
6I5Hvh5pFZqbonGk9g07yl75Qkg6tPpToXXSjxjRBZ9muMCt8ydHizybENpwNQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 14:26:06 2024 by rpki-client on console-fra.rpki-client.org