Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
File:                     ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer (raw, json)
Hash identifier:          UGO1Sb6pNmHtiP1AF9Qej7vhhSBdAot1Mlv7xHWBBdk=
Subject key identifier:   B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584503B88DB1189F0441FD71F200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 01:45:21 +0000
Certificate not after:    Sun 31 May 2026 00:45:21 +0000
Subordinate resources:    AS: 18872
                          AS: 25665
                          IP: 66.218.132.0/23
                          IP: 199.30.224.0/22
                          IP: 199.43.185.0 -- 199.43.187.255
                          IP: 199.43.189.0 -- 199.43.193.255
                          IP: 2620:128:f000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:b8:8d:b1:18:9f:04:41:fd:71:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 26 01:45:21 2024 GMT
            Not After : May 31 00:45:21 2026 GMT
        Subject: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:4f:3f:33:e1:f1:c3:14:b5:e9:c5:4d:57:
                    c9:5b:ab:38:ea:c9:cf:ac:c3:29:93:bc:45:67:56:
                    18:ce:36:98:fc:c0:56:b2:b4:dd:4c:2c:97:2d:ec:
                    97:29:05:f9:7c:c4:50:03:33:cb:5e:0d:b5:14:5f:
                    2f:1b:74:64:60:48:dd:e6:28:16:f4:7f:8e:94:e4:
                    92:3a:42:d0:3e:bd:de:c7:ad:ce:2c:32:c4:f5:74:
                    81:31:24:a9:5c:82:ac:8f:de:6c:59:61:dc:66:01:
                    a2:66:47:f3:a2:8c:f2:c2:19:c0:68:73:3c:c4:45:
                    5a:a3:ac:8d:06:5a:36:ae:90:3f:60:1a:06:df:4c:
                    8a:a4:39:47:38:f7:5f:45:4f:a9:25:e8:13:bb:ff:
                    85:89:fd:ae:90:18:e1:de:d3:18:d3:99:b3:71:e3:
                    a6:18:2b:06:d3:1e:d2:6b:2e:0a:b2:86:c5:1d:20:
                    82:41:86:39:a4:4e:d9:03:7b:7f:8c:e5:ac:ae:f6:
                    4c:d5:6b:3a:b0:3b:e7:0e:67:d8:28:1c:a4:94:66:
                    29:31:9e:f2:38:7e:a1:03:9f:54:0a:54:e4:a1:4f:
                    20:f4:82:02:25:23:37:d8:14:88:e9:1b:41:41:4e:
                    d7:8e:1f:07:47:d7:e1:13:fe:5f:78:3c:16:39:39:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.132.0/23
                  199.30.224.0/22
                  199.43.185.0-199.43.187.255
                  199.43.189.0-199.43.193.255
                IPv6:
                  2620:128:f000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18872
                  25665

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:a5:39:ef:e7:59:54:74:6e:7c:7c:13:9a:43:62:ec:ec:
         ae:c7:4b:40:c8:a4:99:d3:5a:67:d4:fd:fa:a8:2e:06:06:61:
         8b:89:15:6e:0f:98:67:bf:20:f9:8b:4b:9b:45:6c:e3:3c:b3:
         35:36:96:a5:d9:b0:4a:89:e6:4f:cf:fa:48:4d:f1:c4:13:ac:
         5e:b9:86:97:ad:97:c0:88:46:b5:9a:83:0f:ad:49:39:e0:b2:
         a5:ec:e9:0e:8f:2f:10:06:9f:64:47:b3:32:2b:9e:fb:be:a0:
         30:57:83:e4:9f:b2:28:e3:71:b5:09:0b:86:e4:a2:7b:0a:a6:
         fa:ab:0a:50:a2:05:64:d0:57:3e:cc:e5:f8:cd:2b:ef:86:1a:
         0f:12:28:b5:2f:e1:ae:96:5b:3c:ba:f8:c2:f7:5b:f2:4a:b2:
         b8:74:21:b3:e9:ea:aa:1e:3d:31:31:83:c1:91:7c:0e:84:7b:
         0a:d5:86:bb:30:09:f6:72:bc:3d:49:4b:4e:7f:1b:36:30:67:
         35:0b:7f:6c:cc:f4:19:5f:1d:05:2a:a4:db:b4:bd:af:06:6f:
         8e:75:7b:4a:78:e8:45:e0:83:22:d2:8d:c0:70:44:33:0a:25:
         14:ec:f4:b7:df:a0:ee:df:f1:a5:a3:4a:18:ed:59:0e:4c:32:
         b2:d6:9b:5a
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWEUDuI2xGJ8EQf1x8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MDIyNjAxNDUyMVoXDTI2MDUzMTAwNDUyMVowLzEtMCsGA1UEAxMk
ZWNjODdlNGYtN2UzYS00MzdiLTlmNTktMmYyODYzYjk3NGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U9PPzPh8cMUtenFTVfJW6s46snPrMMpk7xF
Z1YYzjaY/MBWsrTdTCyXLeyXKQX5fMRQAzPLXg21FF8vG3RkYEjd5igW9H+OlOSS
OkLQPr3ex63OLDLE9XSBMSSpXIKsj95sWWHcZgGiZkfzoozywhnAaHM8xEVao6yN
Blo2rpA/YBoG30yKpDlHOPdfRU+pJegTu/+Fif2ukBjh3tMY05mzceOmGCsG0x7S
ay4KsobFHSCCQYY5pE7ZA3t/jOWsrvZM1Ws6sDvnDmfYKByklGYpMZ7yOH6hA59U
ClTkoU8g9IICJSM32BSI6RtBQU7Xjh8HR9fhE/5feDwWOTm5HwIDAQABo4IEUDCC
BEwwHQYDVR0OBBYEFLTFGJ1seps8yFt1pm3DiqLw8cDrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9l
Y2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNiOTc0ZGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2VjYzg3ZTRmLTdlM2EtNDM3Yi05
ZjU5LTJmMjg2M2I5NzRkZC9lY2M4N2U0Zi03ZTNhLTQzN2ItOWY1OS0yZjI4NjNi
OTc0ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwUQYIKwYBBQUH
AQcBAf8EQjBAMC4EAgABMCgDBAFC2oQDBALHHuAwDAMEAMcruQMEAscruDAMAwQA
xyu9AwQBxyvAMA4EAgACMAgDBgAmIAEo8DAdBggrBgEFBQcBCAEB/wQOMAygCjAI
AgJJuAICZEEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAbVelOe/nWVR0bnx8E5pDYuzsrsdLQMikmdNaZ9T9
+qguBgZhi4kVbg+YZ78g+YtLm0Vs4zyzNTaWpdmwSonmT8/6SE3xxBOsXrmGl62X
wIhGtZqDD61JOeCypezpDo8vEAafZEezMiue+76gMFeD5J+yKONxtQkLhuSiewqm
+qsKUKIFZNBXPszl+M0r74YaDxIotS/hrpZbPLr4wvdb8kqyuHQhs+nqqh49MTGD
wZF8DoR7CtWGuzAJ9nK8PUlLTn8bNjBnNQt/bMz0GV8dBSqk27S9rwZvjnV7Snjo
ReCDItKNwHBEMwolFOz0t9+g7t/xpaNKGO1ZDkwystabWg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:04:09 2024 by rpki-client on console-fra.rpki-client.org