Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef.cer
File:                     30a6fed9-a752-4874-889d-31c878bbf1ef.cer (raw, json)
Hash identifier:          hjNS4d40clrnOc4JfrFMwTz9qW2bIFaN2TshEOX7WQU=
Subject key identifier:   FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE8745BF6C9688E5C1C15620
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:20 +0000
Certificate not after:    Sun 06 Apr 2025 19:06:39 +0000
Subordinate resources:    AS: 3701
                          IP: 140.211.0.0/16
                          IP: 184.171.0.0/17
                          IP: 199.165.177.0/24
                          IP: 2605:bc80::/32
                          IP: 2607:8400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:45:bf:6c:96:88:e5:c1:c1:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:20 2023 GMT
            Not After : Apr  6 19:06:39 2025 GMT
        Subject: CN=30a6fed9-a752-4874-889d-31c878bbf1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:06:c9:12:66:6c:83:68:c2:7a:a5:2e:d2:
                    96:3e:02:84:f2:a3:ad:20:29:02:6b:a2:b3:14:c4:
                    15:5f:7c:25:a8:4b:a2:f1:d7:7e:a9:cd:54:32:6c:
                    85:52:34:63:76:e2:eb:e9:f0:bf:43:b4:42:65:2d:
                    19:95:a9:1e:e2:8d:33:93:29:0d:81:48:bb:ba:e2:
                    de:af:67:ad:18:0a:fd:42:ff:e7:a9:bf:c0:20:40:
                    de:e9:40:2a:a8:09:35:ff:f3:81:64:ba:94:78:30:
                    b5:2e:77:16:0e:0c:c6:a9:c6:ab:80:c4:13:e5:3d:
                    98:41:cb:a2:74:e3:1c:79:bf:87:cf:77:07:15:14:
                    7d:5f:70:4f:19:e5:35:1e:ba:55:b6:ab:1b:69:14:
                    1e:ab:65:21:04:6d:86:55:2f:24:96:d2:3d:2e:34:
                    f4:19:e7:31:dc:23:2f:32:5e:b8:f6:76:67:01:d4:
                    e0:85:61:50:ca:bb:3b:23:73:d1:8d:2b:2b:50:e8:
                    56:d3:5b:85:fd:64:71:cf:36:f1:f0:28:16:93:25:
                    ee:20:6c:ad:ac:98:05:bf:63:3f:c6:b4:4f:81:5d:
                    cd:82:fc:a9:4f:6d:58:50:81:97:78:04:5b:ad:24:
                    ba:b5:81:48:93:78:43:ed:e3:e4:5c:4c:19:c7:6f:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:62:1F:43:62:30:C1:11:A9:8A:51:8D:1A:E4:D4:16:BE:40:6B:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/30a6fed9-a752-4874-889d-31c878bbf1ef/30a6fed9-a752-4874-889d-31c878bbf1ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.211.0.0/16
                  184.171.0.0/17
                  199.165.177.0/24
                IPv6:
                  2605:bc80::/32
                  2607:8400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3701

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c2:25:29:90:a4:af:65:f8:23:9e:7e:7d:d6:7d:00:ba:0c:
         32:e8:14:18:4a:5e:b2:f2:c2:44:9a:88:a6:f3:d6:9d:b1:0b:
         90:80:8a:86:24:72:12:98:02:5a:2f:fc:c8:3e:72:f8:34:f9:
         86:15:2e:77:89:5a:a8:32:36:0e:d7:56:bd:1c:d0:61:df:e6:
         ef:41:49:fd:f3:bd:4e:fb:9b:77:1a:20:42:04:e6:a3:fe:4e:
         43:69:62:5d:72:45:de:fb:1c:ff:9e:b8:0c:16:bb:f6:c7:24:
         3a:23:01:7c:f1:11:6f:06:5c:ff:c0:eb:8b:c4:4f:14:ea:62:
         da:70:1b:c1:c3:fa:6d:3e:5a:4c:c1:b9:42:8d:2e:2e:19:53:
         4c:80:64:50:e5:dd:dd:63:ad:07:cb:f0:16:53:3b:25:7a:65:
         7e:77:73:84:2c:c1:63:74:58:6f:d6:d3:51:1e:d6:4d:36:75:
         a5:57:88:5f:6f:f5:4a:33:77:bf:3b:bd:40:51:75:1a:7e:98:
         96:d9:59:51:ca:12:11:19:3a:86:17:f7:ca:9a:82:d5:39:0b:
         7d:14:c0:d7:3c:36:ae:a0:46:e6:41:76:14:20:67:17:1f:e6:
         2d:34:22:ad:65:1a:91:66:48:c8:2a:e0:f8:73:91:c3:a7:cf:
         67:1f:91:6a
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWELOh0W/bJaI5cHBViAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDgwNzE0NTQyMFoXDTI1MDQwNjE5MDYzOVowLzEtMCsGA1UEAxMk
MzBhNmZlZDktYTc1Mi00ODc0LTg4OWQtMzFjODc4YmJmMWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sYGyRJmbINownqlLtKWPgKE8qOtICkCa6Kz
FMQVX3wlqEui8dd+qc1UMmyFUjRjduLr6fC/Q7RCZS0Zlake4o0zkykNgUi7uuLe
r2etGAr9Qv/nqb/AIEDe6UAqqAk1//OBZLqUeDC1LncWDgzGqcargMQT5T2YQcui
dOMceb+Hz3cHFRR9X3BPGeU1HrpVtqsbaRQeq2UhBG2GVS8kltI9LjT0Gecx3CMv
Ml649nZnAdTghWFQyrs7I3PRjSsrUOhW01uF/WRxzzbx8CgWkyXuIGytrJgFv2M/
xrRPgV3NgvypT21YUIGXeARbrSS6tYFIk3hD7ePkXEwZx29Z8QIDAQABo4IEOzCC
BDcwHQYDVR0OBBYEFPxiH0NiMMERqYpRjRrk1Ba+QGvdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
MGE2ZmVkOS1hNzUyLTQ4NzQtODg5ZC0zMWM4NzhiYmYxZWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMwYTZmZWQ5LWE3NTItNDg3NC04
ODlkLTMxYzg3OGJiZjFlZi8zMGE2ZmVkOS1hNzUyLTQ4NzQtODg5ZC0zMWM4Nzhi
YmYxZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMBcEAgABMBEDAwCM0wMEB7irAAMEAMelsTAUBAIAAjAOAwUAJgW8
gAMFACYHhAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDnUwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABcIl
KZCkr2X4I55+fdZ9ALoMMugUGEpesvLCRJqIpvPWnbELkICKhiRyEpgCWi/8yD5y
+DT5hhUud4laqDI2DtdWvRzQYd/m70FJ/fO9TvubdxogQgTmo/5OQ2liXXJF3vsc
/564DBa79sckOiMBfPERbwZc/8Dri8RPFOpi2nAbwcP6bT5aTMG5Qo0uLhlTTIBk
UOXd3WOtB8vwFlM7JXplfndzhCzBY3RYb9bTUR7WTTZ1pVeIX2/1SjN3vzu9QFF1
Gn6YltlZUcoSERk6hhf3ypqC1TkLfRTA1zw2rqBG5kF2FCBnFx/mLTQirWUakWZI
yCrg+HORw6fPZx+Rag==
-----END CERTIFICATE-----
Generated at Thu Mar 28 01:56:05 2024 by rpki-client on console-fra.rpki-client.org