Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b.cer
File:                     dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b.cer (raw, json)
Hash identifier:          Cgj4y87UTPc3OjdR+ZKtJTcqft0fkrjlCppls3beSFA=
Subject key identifier:   C7:AC:41:47:36:07:2C:3F:12:68:C0:AB:D1:3E:39:CE:F0:FF:2D:B3
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841E4834FED6AE662137ACD7080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 06 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 29916
                          IP: 23.170.96.0/24
                          IP: 158.51.0.0/23
                          IP: 2602:fe0f::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:ed:6a:e6:62:13:7a:cd:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  6 19:06:39 2025 GMT
        Subject: CN=dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:11:9d:c9:a6:23:df:94:8d:ea:99:41:fc:
                    50:77:d7:23:71:67:29:0b:2c:65:6d:ed:23:18:19:
                    bc:c2:97:f8:27:e9:a5:f3:22:3c:78:c7:c7:43:c0:
                    d4:5f:cb:ad:03:b7:e4:58:06:5a:cf:e4:fd:e1:c1:
                    ee:ac:e9:fa:db:a4:6a:80:a4:29:88:34:e8:d1:fc:
                    7d:d1:b1:16:fb:13:89:5e:ca:8f:ae:17:d5:a9:69:
                    40:28:dc:7a:e4:fe:c8:6f:49:83:87:8a:02:e2:6b:
                    0e:02:c2:3e:0a:79:8a:b2:e6:46:91:89:19:b5:e4:
                    4d:c3:e5:13:a5:8e:06:19:e7:f5:cf:5e:6f:1d:18:
                    ed:ae:e3:9a:6c:e7:16:7a:55:53:79:82:d3:d5:25:
                    25:4b:d6:8a:d8:b4:59:cd:fd:9d:e4:be:be:d7:59:
                    b4:06:e7:2c:f6:68:27:30:f5:61:9a:d0:01:90:9d:
                    96:a2:eb:e9:c4:d0:76:5d:08:75:e4:9a:b9:fb:6e:
                    4b:b2:96:a5:76:1b:71:5d:9f:29:47:5a:a6:92:dd:
                    cc:d3:cc:f5:4e:2d:78:78:b6:be:e2:28:e4:25:c4:
                    00:7d:3f:60:1f:0a:7f:7d:24:43:af:5e:0e:a1:49:
                    5f:63:eb:70:0c:90:60:6a:9b:c0:34:db:52:5c:7c:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:41:47:36:07:2C:3F:12:68:C0:AB:D1:3E:39:CE:F0:FF:2D:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b/dbea38ae-b7f4-4ce5-86cc-0a896e24eb2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.96.0/24
                  158.51.0.0/23
                IPv6:
                  2602:fe0f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29916

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:90:44:11:39:e9:7a:d9:ec:24:2b:07:a5:1a:cd:e2:97:
         be:2c:d2:2f:73:81:92:e0:05:82:35:c2:63:0b:0c:8c:fa:fa:
         b3:b4:3e:6f:62:3d:e5:38:87:64:35:41:48:b2:61:52:26:50:
         ef:61:8d:34:f0:9b:cd:c7:ee:39:1e:fa:83:bf:67:b9:42:84:
         74:ee:7f:70:5a:b6:af:36:61:ad:0e:c0:47:2c:9c:2f:02:72:
         4d:bc:0f:ad:27:3e:f2:24:50:63:7b:0d:08:e8:19:69:2d:57:
         80:eb:1f:9c:5a:0f:9f:05:33:99:92:ef:ed:a7:cf:22:79:49:
         0a:7a:8f:fa:43:6e:c6:82:26:ad:07:00:9c:93:53:4c:b8:9c:
         86:71:b9:be:49:91:5b:22:bb:71:26:7e:ff:98:82:62:e1:d3:
         f0:fe:f9:31:65:bd:5a:d6:6a:76:77:df:b3:c0:17:17:09:0f:
         9f:ab:9f:7b:2f:10:50:0e:b6:ec:74:d7:c3:da:50:d1:6e:79:
         89:08:e8:d4:65:da:71:0c:79:2f:d8:fe:44:33:a5:a8:ab:56:
         c5:e6:08:54:bc:cd:48:08:9f:ab:98:5a:2d:a7:04:9d:fb:ab:
         df:4c:d4:4a:16:da:e9:15:f9:f0:98:6f:a2:da:ba:eb:93:02:
         28:39:90:80
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEHkg0/tauZiE3rNcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwNjE5MDYzOVowLzEtMCsGA1UEAxMk
ZGJlYTM4YWUtYjdmNC00Y2U1LTg2Y2MtMGE4OTZlMjRlYjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz88RncmmI9+UjeqZQfxQd9cjcWcpCyxlbe0j
GBm8wpf4J+ml8yI8eMfHQ8DUX8utA7fkWAZaz+T94cHurOn626RqgKQpiDTo0fx9
0bEW+xOJXsqPrhfVqWlAKNx65P7Ib0mDh4oC4msOAsI+CnmKsuZGkYkZteRNw+UT
pY4GGef1z15vHRjtruOabOcWelVTeYLT1SUlS9aK2LRZzf2d5L6+11m0Bucs9mgn
MPVhmtABkJ2WouvpxNB2XQh15Jq5+25LspaldhtxXZ8pR1qmkt3M08z1Ti14eLa+
4ijkJcQAfT9gHwp/fSRDr14OoUlfY+twDJBgapvANNtSXHzzCQIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFMesQUc2Byw/EmjAq9E+Oc7w/y2zMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k
YmVhMzhhZS1iN2Y0LTRjZTUtODZjYy0wYTg5NmUyNGViMmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RiZWEzOGFlLWI3ZjQtNGNlNS04
NmNjLTBhODk2ZTI0ZWIyYi9kYmVhMzhhZS1iN2Y0LTRjZTUtODZjYy0wYTg5NmUy
NGViMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXqmADBAGeMwAwDgQCAAIwCAMGBCYC/g8AMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAnTcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE0ekEQROel62ewkKwel
Gs3il74s0i9zgZLgBYI1wmMLDIz6+rO0Pm9iPeU4h2Q1QUiyYVImUO9hjTTwm83H
7jke+oO/Z7lChHTuf3Batq82Ya0OwEcsnC8Cck28D60nPvIkUGN7DQjoGWktV4Dr
H5xaD58FM5mS7+2nzyJ5SQp6j/pDbsaCJq0HAJyTU0y4nIZxub5JkVsiu3Emfv+Y
gmLh0/D++TFlvVrWanZ337PAFxcJD5+rn3svEFAOtux018PaUNFueYkI6NRl2nEM
eS/Y/kQzpairVsXmCFS8zUgIn6uYWi2nBJ37q99M1EoW2ukV+fCYb6LauuuTAig5
kIA=
-----END CERTIFICATE-----
Generated at Thu Apr 25 20:27:50 2024 by rpki-client on console-fra.rpki-client.org