Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
File:                     ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer (raw, json)
Hash identifier:          pXab9nfT3kCsApI7M43peDzvc/3I8mTPVTDl+6R1udo=
Subject key identifier:   DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844BDED72221E98D3BB77E2AC8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 01:45:20 +0000
Certificate not after:    Wed 06 May 2026 00:45:20 +0000
Subordinate resources:    AS: 5076
                          AS: 19272
                          AS: 23537
                          AS: 26914
                          IP: 64.127.96.0/19
                          IP: 64.147.160.0/19
                          IP: 69.80.192.0/19
                          IP: 72.172.224.0/19
                          IP: 166.93.0.0/16
                          IP: 199.180.64.0/21
                          IP: 204.56.32.0/19
                          IP: 204.227.0.0/19
                          IP: 2001:1898::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bd:ed:72:22:1e:98:d3:bb:77:e2:ac:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb  1 01:45:20 2024 GMT
            Not After : May  6 00:45:20 2026 GMT
        Subject: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:43:e3:69:5d:54:4f:c4:a9:cb:ab:1a:d0:
                    fb:a7:79:08:f1:ec:c0:09:ae:a8:e1:66:33:1d:e8:
                    b6:a4:18:ef:e1:cd:1c:99:4b:5c:3d:65:c5:d1:71:
                    ee:35:bd:c4:e6:42:43:12:a7:77:85:0a:96:91:b8:
                    38:ff:7d:b7:4e:78:a2:bd:1b:bc:ad:ea:bf:29:bc:
                    27:7f:10:e3:7c:65:29:cf:f6:3f:ec:45:02:29:93:
                    20:ff:29:bb:a5:3d:22:ea:10:cf:27:ba:e9:80:03:
                    1b:83:ac:b4:bf:83:a1:e2:b5:76:45:9b:79:79:da:
                    e3:53:6b:aa:7b:29:83:4a:ca:d3:91:4c:b6:2e:38:
                    03:15:38:76:03:76:56:31:a9:d5:16:9d:f4:f2:bc:
                    da:aa:86:cc:71:c1:fb:4a:c2:07:13:70:87:f1:52:
                    87:40:a5:ed:e5:47:78:a5:be:32:97:4f:ec:66:29:
                    dc:06:11:72:28:41:2d:5e:62:46:be:be:76:e2:c1:
                    21:60:84:2f:b2:84:9e:44:46:f9:81:98:6b:d4:9d:
                    1b:10:ea:84:c7:03:0b:5c:a1:a9:83:8f:27:81:6f:
                    78:ef:81:9c:3b:1c:b3:e7:0c:b3:4f:1c:81:56:bd:
                    9a:79:95:22:3b:2b:35:ea:5c:1b:8d:66:e8:ea:e2:
                    eb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.96.0/19
                  64.147.160.0/19
                  69.80.192.0/19
                  72.172.224.0/19
                  166.93.0.0/16
                  199.180.64.0/21
                  204.56.32.0/19
                  204.227.0.0/19
                IPv6:
                  2001:1898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5076
                  19272
                  23537
                  26914

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:3f:18:5c:b7:1c:ce:47:b6:77:a4:2b:07:ce:ba:3b:26:
         c0:e0:4d:0c:31:fe:bf:b6:e5:04:26:3d:b7:f1:ba:6b:66:d9:
         10:9c:6e:7a:8a:44:b5:a0:ac:96:d0:49:3f:a5:d3:60:75:91:
         fa:2e:58:56:87:86:33:d6:99:da:84:9a:d9:db:92:72:fa:d3:
         21:5e:bc:2e:ab:dc:2a:9c:99:2f:0c:2a:f7:02:d7:f5:9c:0e:
         0b:44:ba:40:f4:0b:4e:74:38:f7:ce:22:d5:d5:6c:87:8e:25:
         8f:bb:85:ef:36:01:bc:d3:db:83:f9:aa:8c:05:81:65:02:9e:
         85:d6:11:94:e0:22:f3:ad:4e:bd:99:03:38:38:1c:e6:e4:59:
         64:24:30:33:22:a8:3b:4d:2a:6b:bf:62:55:41:60:27:41:2d:
         ed:84:d9:06:af:41:c6:df:65:c4:38:8c:e7:26:65:c5:23:74:
         db:6a:02:57:db:15:c0:bb:dc:f8:8a:5f:61:9e:50:20:38:89:
         9a:9c:6f:65:4d:3c:df:31:54:1f:47:8e:15:f1:3e:1a:98:d8:
         d3:cc:c6:fb:83:b5:8b:8c:44:b2:7a:d7:89:79:35:71:8e:e0:
         28:c1:ba:10:ac:2b:ee:84:5a:81:e6:a8:2c:2f:f9:0c:a1:34:
         42:b6:b7:2b
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWES97XIiHpjTu3firIwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MDIwMTAxNDUyMFoXDTI2MDUwNjAwNDUyMFowLzEtMCsGA1UEAxMk
ZWM3MDUzYWItMDczNi00M2JiLWJkZmMtMDE2OWFlOTBiODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkatD42ldVE/EqcurGtD7p3kI8ezACa6o4WYz
Hei2pBjv4c0cmUtcPWXF0XHuNb3E5kJDEqd3hQqWkbg4/323TniivRu8req/Kbwn
fxDjfGUpz/Y/7EUCKZMg/ym7pT0i6hDPJ7rpgAMbg6y0v4Oh4rV2RZt5edrjU2uq
eymDSsrTkUy2LjgDFTh2A3ZWManVFp308rzaqobMccH7SsIHE3CH8VKHQKXt5Ud4
pb4yl0/sZincBhFyKEEtXmJGvr524sEhYIQvsoSeREb5gZhr1J0bEOqExwMLXKGp
g48ngW9474GcOxyz5wyzTxyBVr2aeZUiOys16lwbjWbo6uLriQIDAQABo4IEXjCC
BFowHQYDVR0OBBYEFN6XLm7fz73Iawt8Tqs6Uhtl7pUsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9l
YzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5MGI4MGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2VjNzA1M2FiLTA3MzYtNDNiYi1i
ZGZjLTAxNjlhZTkwYjgwZC9lYzcwNTNhYi0wNzM2LTQzYmItYmRmYy0wMTY5YWU5
MGI4MGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwVwYIKwYBBQUH
AQcBAf8ESDBGMDUEAgABMC8DBAVAf2ADBAVAk6ADBAVFUMADBAVIrOADAwCmXQME
A8e0QAMEBcw4IAMEBczjADANBAIAAjAHAwUAIAEYmDAlBggrBgEFBQcBCAEB/wQW
MBSgEjAQAgIT1AICS0gCAlvxAgJpIjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANUj8YXLcczke2d6QrB866
OybA4E0MMf6/tuUEJj238bprZtkQnG56ikS1oKyW0Ek/pdNgdZH6LlhWh4Yz1pna
hJrZ25Jy+tMhXrwuq9wqnJkvDCr3Atf1nA4LRLpA9AtOdDj3ziLV1WyHjiWPu4Xv
NgG809uD+aqMBYFlAp6F1hGU4CLzrU69mQM4OBzm5FlkJDAzIqg7TSprv2JVQWAn
QS3thNkGr0HG32XEOIznJmXFI3TbagJX2xXAu9z4il9hnlAgOImanG9lTTzfMVQf
R44V8T4amNjTzMb7g7WLjESyeteJeTVxjuAowboQrCvuhFqB5qgsL/kMoTRCtrcr
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:09 2024 by rpki-client on console-fra.rpki-client.org