Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251.cer
File:                     559253fe-8b4f-48f6-9fe1-109df6bb3251.cer (raw, json)
Hash identifier:          cUn/2mZFRWzDZEg1QAHVQMgrg5OPPjJROrw199BA9kA=
Subject key identifier:   F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858437F8DA20A2F883D3190489320
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Oct 2023 00:45:14 +0000
Certificate not after:    Mon 12 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 36131
                          IP: 78.138.49.0/24
                          IP: 83.229.88.0/22
                          IP: 83.229.96.0/22
                          IP: 104.36.224.0/24
                          IP: 192.12.31.0/24
                          IP: 2620:e2:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7f:8d:a2:0a:2f:88:3d:31:90:48:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 10 00:45:14 2023 GMT
            Not After : Jan 12 01:45:14 2026 GMT
        Subject: CN=559253fe-8b4f-48f6-9fe1-109df6bb3251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:1f:dd:eb:9b:9e:59:b8:67:c9:b0:9c:81:
                    c3:82:c6:c8:c5:27:19:24:e2:33:c5:25:8c:2e:e7:
                    dc:fc:3a:68:00:5a:a6:20:a3:a2:fd:8b:d4:51:d2:
                    0a:86:f9:3e:53:01:c8:3b:32:9c:12:5f:b4:1c:cf:
                    1b:c2:07:e6:39:14:15:36:7a:8b:c6:72:b3:d9:4c:
                    95:98:98:fc:dc:66:9a:8e:3a:3f:ce:69:bd:34:c4:
                    58:8f:f7:d4:c6:b1:c2:c0:c1:55:00:f6:4e:f7:f5:
                    80:f3:33:a0:2c:39:65:b6:1c:01:23:32:19:24:fc:
                    07:4e:a9:ad:36:92:8c:92:6d:13:c1:ed:21:a4:88:
                    10:cd:ba:f1:d0:e4:bd:bf:27:39:be:81:57:1a:69:
                    af:d9:a6:67:38:da:f8:a2:32:58:83:4a:05:29:0d:
                    ac:07:25:2c:4b:b5:ed:c4:ce:16:3c:95:6c:64:99:
                    1a:79:20:34:72:46:db:94:8c:1c:38:06:8c:a3:75:
                    91:b8:fe:ab:4a:f5:a1:46:23:38:80:c4:a9:81:79:
                    32:07:09:3d:26:21:f6:cf:7d:2a:36:08:45:87:0e:
                    f2:aa:93:20:d4:11:23:f7:bb:32:d1:7e:cd:8c:55:
                    a9:40:90:e7:41:18:ba:f8:e6:f8:f1:d7:d9:84:1e:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:AA:04:E7:49:4F:99:FF:61:B0:9D:59:8B:71:B9:00:F1:53:0B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/559253fe-8b4f-48f6-9fe1-109df6bb3251/559253fe-8b4f-48f6-9fe1-109df6bb3251.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.138.49.0/24
                  83.229.88.0/22
                  83.229.96.0/22
                  104.36.224.0/24
                  192.12.31.0/24
                IPv6:
                  2620:e2:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36131

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:66:0d:c6:4e:b4:f6:21:f8:89:99:38:4c:80:c7:88:1c:
         bb:6d:64:dd:f9:cd:aa:77:1e:fb:05:8a:aa:fc:41:88:73:87:
         a8:60:1e:94:ab:3a:fc:72:ec:57:49:99:bb:aa:c5:ab:7c:98:
         2d:b0:9d:07:93:d8:30:b1:85:d0:76:ab:62:89:97:06:66:39:
         d1:9c:7b:34:dc:2d:ab:27:8c:1c:b3:09:de:d5:68:1e:28:af:
         7b:96:e5:c2:f1:48:61:30:a4:cd:a0:d0:0a:b7:42:d9:32:3a:
         05:83:67:7b:55:19:df:21:4d:29:79:09:1c:d2:c6:71:ba:d4:
         5f:58:71:72:63:d8:40:8b:ff:05:0e:af:db:c4:d1:a8:1f:d8:
         f8:be:6b:5a:c6:1c:70:48:07:de:54:db:e0:99:f0:5d:32:02:
         a4:ef:41:fc:45:6b:5a:ec:7a:f3:2d:a3:6f:b5:37:d3:21:8a:
         9d:b3:31:73:b8:5e:c8:7d:e0:c0:0a:aa:ff:e7:98:0c:83:f7:
         a7:c8:be:fc:ae:68:75:7e:8d:40:f2:36:ee:a2:a1:e4:68:87:
         c3:11:66:4d:69:ef:6c:94:06:54:30:6a:70:29:13:de:f5:06:
         23:a6:c4:8f:eb:76:12:ba:be:50:0e:b1:7b:0a:30:e1:9c:27:
         68:45:90:5c
-----BEGIN CERTIFICATE-----
MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEN/jaIKL4g9MZBIkyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTAxMDAwNDUxNFoXDTI2MDExMjAxNDUxNFowLzEtMCsGA1UEAxMk
NTU5MjUzZmUtOGI0Zi00OGY2LTlmZTEtMTA5ZGY2YmIzMjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEf3eubnlm4Z8mwnIHDgsbIxScZJOIzxSWM
Lufc/DpoAFqmIKOi/YvUUdIKhvk+UwHIOzKcEl+0HM8bwgfmORQVNnqLxnKz2UyV
mJj83Gaajjo/zmm9NMRYj/fUxrHCwMFVAPZO9/WA8zOgLDllthwBIzIZJPwHTqmt
NpKMkm0Twe0hpIgQzbrx0OS9vyc5voFXGmmv2aZnONr4ojJYg0oFKQ2sByUsS7Xt
xM4WPJVsZJkaeSA0ckbblIwcOAaMo3WRuP6rSvWhRiM4gMSpgXkyBwk9JiH2z30q
NghFhw7yqpMg1BEj97sy0X7NjFWpQJDnQRi6+Ob48dfZhB51ewIDAQABo4IERDCC
BEAwHQYDVR0OBBYEFPnTqgTnSU+Z/2GwnVmLcbkA8VMLMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81
NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZiYjMyNTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU1OTI1M2ZlLThiNGYtNDhmNi05
ZmUxLTEwOWRmNmJiMzI1MS81NTkyNTNmZS04YjRmLTQ4ZjYtOWZlMS0xMDlkZjZi
YjMyNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSAYIKwYBBQUH
AQcBAf8EOTA3MCQEAgABMB4DBABOijEDBAJT5VgDBAJT5WADBABoJOADBADADB8w
DwQCAAIwCQMHACYgAOLAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAjSMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnklmDcZOtPYh+ImZOEyAx4gcu21k3fnNqnce+wWKqvxBiHOHqGAelKs6
/HLsV0mZu6rFq3yYLbCdB5PYMLGF0HarYomXBmY50Zx7NNwtqyeMHLMJ3tVoHiiv
e5blwvFIYTCkzaDQCrdC2TI6BYNne1UZ3yFNKXkJHNLGcbrUX1hxcmPYQIv/BQ6v
28TRqB/Y+L5rWsYccEgH3lTb4JnwXTICpO9B/EVrWux68y2jb7U30yGKnbMxc7he
yH3gwAqq/+eYDIP3p8i+/K5odX6NQPI27qKh5GiHwxFmTWnvbJQGVDBqcCkT3vUG
I6bEj+t2Erq+UA6xewow4ZwnaEWQXA==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:26 2024 by rpki-client on console-fra.rpki-client.org