Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer
File:                     560b4c54-bd35-46e1-8698-aff50195e1b4.cer (raw, json)
Hash identifier:          81q+QUW8ZLZ2bAcNwMbK8hlTXG32oOJefqy/KpWoz68=
Subject key identifier:   E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584370E11B2F7A88FDEA33431100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 18:36:18 +0000
Certificate not after:    Tue 04 Nov 2025 01:45:16 +0000
Subordinate resources:    IP: 149.248.72.0/22
                          IP: 204.16.120.0/22
                          IP: 205.142.242.0/23
                          IP: 2607:6440::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:e1:1b:2f:7a:88:fd:ea:33:43:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct  4 18:36:18 2023 GMT
            Not After : Nov  4 01:45:16 2025 GMT
        Subject: CN=560b4c54-bd35-46e1-8698-aff50195e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:45:33:a9:a2:d0:fa:1d:9b:e7:fe:c7:bc:
                    36:d6:61:25:b4:f8:7a:11:c5:e4:f8:a4:22:2e:c6:
                    24:b9:f2:27:ac:95:a8:18:bf:a5:16:98:14:6d:0c:
                    4f:b5:8c:55:d5:8b:68:5f:7e:3a:81:73:e6:3d:7a:
                    ad:a5:96:7f:00:e0:00:b2:31:de:31:19:88:85:ba:
                    ef:dd:d8:ca:98:91:60:38:69:97:4e:ba:61:47:f5:
                    30:98:a1:5b:e1:45:ed:ab:9c:00:6b:54:e9:56:ad:
                    78:7f:a9:52:67:e5:56:b1:44:0a:aa:2e:30:cc:3b:
                    7f:73:8e:68:fd:35:67:8c:de:bf:0a:dc:ef:fc:67:
                    2a:35:23:58:3c:03:34:12:23:39:d8:72:ac:90:a5:
                    70:7f:3b:d8:f3:1a:44:94:c6:bd:7f:1c:82:2d:f6:
                    86:51:6c:6d:b0:a0:cc:2d:d9:fa:ff:71:20:1a:cc:
                    5d:f7:39:47:5a:7b:17:4e:b1:00:5f:23:20:45:41:
                    dd:18:b7:b8:4f:a2:d6:c3:56:54:c4:91:65:c1:c0:
                    7a:f4:83:26:f5:1d:ca:40:c3:a1:bf:4b:b8:2e:76:
                    f8:9f:f4:55:c6:09:f5:7d:34:ff:a5:d5:27:01:6c:
                    42:75:e0:44:eb:f7:f9:6d:b5:8c:40:52:c9:7a:99:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.72.0/22
                  204.16.120.0/22
                  205.142.242.0/23
                IPv6:
                  2607:6440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1d:93:73:53:ce:b5:c8:0c:2a:a1:fc:8e:c7:b2:60:c9:71:
         2d:78:e0:fc:d7:12:b6:0a:2a:46:ab:c6:f4:60:31:15:74:a0:
         8f:fa:4e:0b:49:84:36:03:76:62:e4:37:88:8a:16:34:af:52:
         01:3c:bc:c1:d6:52:b2:33:1e:f9:6d:3d:9a:14:46:0b:0d:36:
         6f:9e:99:d4:16:71:b4:7b:65:6d:5f:2e:aa:90:d7:b0:e1:99:
         c4:dd:f0:3a:8b:58:41:b4:9d:29:d0:c8:ed:f3:66:cd:4a:12:
         d0:05:eb:71:ce:c8:d5:a0:c2:46:77:7a:68:62:98:1f:a5:3a:
         25:cd:65:8e:23:bb:10:80:81:8c:32:bb:e0:34:61:81:99:b8:
         6f:24:c9:f6:69:f6:8e:49:39:f3:1a:a4:1e:43:ed:4e:65:47:
         b4:9c:f8:e7:d4:88:d7:12:ff:f8:e1:93:ff:ca:4d:a3:4f:d2:
         af:70:bf:4e:c1:40:28:94:ec:5c:c9:86:fa:0e:0c:e7:ac:4f:
         31:37:80:47:bd:25:a6:a3:08:5a:3e:fa:23:94:ae:06:d8:9c:
         51:e2:36:8b:34:b3:62:44:93:c1:89:bd:e5:53:61:9c:b6:ad:
         0e:f9:96:3f:ce:be:b4:96:4d:d4:9d:60:d2:57:89:28:52:63:
         1d:7a:8e:e9
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWENw4Rsveoj96jNDEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIzMTAwNDE4MzYxOFoXDTI1MTEwNDAxNDUxNlowLzEtMCsGA1UEAxMk
NTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVlMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6JFM6mi0Podm+f+x7w21mEltPh6EcXk+KQi
LsYkufInrJWoGL+lFpgUbQxPtYxV1YtoX346gXPmPXqtpZZ/AOAAsjHeMRmIhbrv
3djKmJFgOGmXTrphR/UwmKFb4UXtq5wAa1TpVq14f6lSZ+VWsUQKqi4wzDt/c45o
/TVnjN6/Ctzv/GcqNSNYPAM0EiM52HKskKVwfzvY8xpElMa9fxyCLfaGUWxtsKDM
Ldn6/3EgGsxd9zlHWnsXTrEAXyMgRUHdGLe4T6LWw1ZUxJFlwcB69IMm9R3KQMOh
v0u4Lnb4n/RVxgn1fTT/pdUnAWxCdeBE6/f5bbWMQFLJepmkWwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFOHzLN4cX+1MlZp4Dd76aXPelS/IMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81
NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzU2MGI0YzU0LWJkMzUtNDZlMS04
Njk4LWFmZjUwMTk1ZTFiNC81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5
NWUxYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAKV+EgDBALMEHgDBAHNjvIwDQQCAAIwBwMFACYH
ZEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAXR2Tc1POtcgMKqH8jseyYMlxLXjg/NcStgoqRqvG9GAxFXSg
j/pOC0mENgN2YuQ3iIoWNK9SATy8wdZSsjMe+W09mhRGCw02b56Z1BZxtHtlbV8u
qpDXsOGZxN3wOotYQbSdKdDI7fNmzUoS0AXrcc7I1aDCRnd6aGKYH6U6Jc1ljiO7
EICBjDK74DRhgZm4byTJ9mn2jkk58xqkHkPtTmVHtJz459SI1xL/+OGT/8pNo0/S
r3C/TsFAKJTsXMmG+g4M56xPMTeAR70lpqMIWj76I5SuBticUeI2izSzYkSTwYm9
5VNhnLatDvmWP86+tJZN1J1g0leJKFJjHXqO6Q==
-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:45 2024 by rpki-client on console-ams.rpki-client.org