Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
File:                     4e08a47f-8ddd-473c-bb7b-011963e78626.cer (raw, json)
Hash identifier:          uyIp54wrUISPfx7v/cXqUxLrh33mVDE2s6aNy8S/Fdg=
Subject key identifier:   5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834BFFCC383B524BE74CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 09 Jun 2025 19:06:39 +0000
Subordinate resources:    IP: 207.66.104.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4b:ff:cc:38:3b:52:4b:e7:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun  9 19:06:39 2025 GMT
        Subject: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:65:08:7a:d3:78:a5:a8:c5:a5:17:0e:e9:
                    6a:a1:da:2f:f7:ab:34:f9:c4:82:45:d3:fe:e2:e1:
                    ca:b2:ee:61:78:f8:21:6c:8d:df:18:3f:23:f8:56:
                    5e:ac:22:ac:69:e5:1b:4c:09:8e:59:60:bb:28:2f:
                    f1:b0:aa:a4:39:c7:25:9c:d6:e4:11:d0:04:27:b8:
                    ed:4b:1a:6c:1b:9e:90:2d:65:ab:ac:fb:ad:16:02:
                    c7:95:67:9a:b0:b3:5c:a2:d2:9b:9c:bc:63:b1:05:
                    a3:2e:43:cb:ab:82:61:37:c4:a2:25:46:40:ad:63:
                    52:b1:2a:e2:06:f8:aa:b9:0e:bf:f0:03:75:bc:8b:
                    73:df:cb:0f:6c:1c:1f:f4:b8:62:c6:33:f7:cd:6b:
                    eb:f5:65:ab:3e:68:78:0e:56:d9:f7:b7:83:5f:9f:
                    eb:ac:f2:d8:c0:3c:67:05:81:96:54:9f:9e:8a:61:
                    80:11:7b:aa:11:4a:ba:ad:53:8d:b9:15:09:a3:b7:
                    a6:02:38:ce:60:fd:52:54:1f:ba:07:ae:15:af:5f:
                    f7:d8:23:78:f8:15:95:f5:b3:54:5e:0b:06:d4:5c:
                    fb:01:04:d3:08:33:89:71:2a:db:de:d4:e4:ae:b9:
                    a2:41:8b:37:4a:23:c4:6a:a5:1b:e6:ad:42:39:7b:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:65:56:79:e1:2f:00:50:f8:cd:f2:0b:e4:ed:29:28:b9:
         e6:6d:05:26:d9:29:28:1f:ea:12:27:17:0c:dd:41:92:c2:f8:
         53:88:57:b5:82:62:6a:d2:34:4d:cc:41:72:42:34:0d:74:13:
         78:c8:de:57:5e:7e:96:4b:60:1a:5d:86:4d:eb:f4:b0:4c:fe:
         6e:63:27:2d:36:2a:d7:75:ee:88:95:2e:8f:3e:e7:43:19:65:
         c2:47:f5:b5:4b:f9:a9:8d:0c:fc:7a:46:b8:7e:44:ba:84:46:
         ad:a0:44:92:0a:56:ff:6f:45:69:b7:3e:40:3d:a7:e4:77:4a:
         56:75:64:0d:84:a0:bf:1d:31:62:02:9f:56:48:53:6b:9f:f8:
         c9:39:5b:be:a0:60:e8:1b:e8:6b:4b:19:b7:6f:d7:43:8e:cd:
         88:c3:1b:21:1c:26:bd:1e:ed:29:ba:c8:33:5d:ff:56:aa:d2:
         2a:fe:be:9d:67:09:be:f3:ed:42:e3:10:f8:01:f0:0c:ff:12:
         0c:da:14:ef:d2:15:7d:59:ee:65:a1:b2:9d:04:07:6a:27:66:
         68:5a:9d:e0:5d:04:83:56:c2:31:40:36:a3:7b:a8:b2:8c:f4:
         b6:d5:8e:70:d2:5a:2b:a8:32:52:20:a6:b3:4a:5d:59:59:5b:
         f2:7d:ab:54
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEHkg0v/zDg7UkvnTMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYwOTE5MDYzOVowLzEtMCsGA1UEAxMk
NGUwOGE0N2YtOGRkZC00NzNjLWJiN2ItMDExOTYzZTc4NjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZRlCHrTeKWoxaUXDulqodov96s0+cSCRdP+
4uHKsu5hePghbI3fGD8j+FZerCKsaeUbTAmOWWC7KC/xsKqkOcclnNbkEdAEJ7jt
SxpsG56QLWWrrPutFgLHlWeasLNcotKbnLxjsQWjLkPLq4JhN8SiJUZArWNSsSri
BviquQ6/8AN1vItz38sPbBwf9LhixjP3zWvr9WWrPmh4DlbZ97eDX5/rrPLYwDxn
BYGWVJ+eimGAEXuqEUq6rVONuRUJo7emAjjOYP1SVB+6B64Vr1/32CN4+BWV9bNU
XgsG1Fz7AQTTCDOJcSrb3tTkrrmiQYs3SiPEaqUb5q1COXvctwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFFsrkh8KkRiTVHny+O5qrMzr5vZjMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80
ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNlNzg2MjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRlMDhhNDdmLThkZGQtNDczYy1i
YjdiLTAxMTk2M2U3ODYyNi80ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNl
Nzg2MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPPQmgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqt9lVnnhLwBQ+M3yC+Tt
KSi55m0FJtkpKB/qEicXDN1BksL4U4hXtYJiatI0TcxBckI0DXQTeMjeV15+lktg
Gl2GTev0sEz+bmMnLTYq13XuiJUujz7nQxllwkf1tUv5qY0M/HpGuH5EuoRGraBE
kgpW/29Fabc+QD2n5HdKVnVkDYSgvx0xYgKfVkhTa5/4yTlbvqBg6Bvoa0sZt2/X
Q47NiMMbIRwmvR7tKbrIM13/VqrSKv6+nWcJvvPtQuMQ+AHwDP8SDNoU79IVfVnu
ZaGynQQHaidmaFqd4F0Eg1bCMUA2o3uosoz0ttWOcNJaK6gyUiCms0pdWVlb8n2r
VA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 00:33:21 2024 by rpki-client on console-fra.rpki-client.org