Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
File:                     590468a2-be81-410c-b887-a35157322fb1.cer (raw, json)
Hash identifier:          t/d3y0VaeTqwMK+EMVRbS1WyK/TvMM26SGDB7aSzeS0=
Subject key identifier:   CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858455A25FEA21F3E867F4BC57100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Mar 2024 00:45:22 +0000
Certificate not after:    Wed 01 Jul 2026 00:45:22 +0000
Subordinate resources:    AS: 13487
                          AS: 23358
                          AS: 393891
                          IP: 66.103.152.0/22
                          IP: 67.206.186.0/23
                          IP: 104.232.41.0/24
                          IP: 192.103.117.0 -- 192.103.119.255
                          IP: 198.169.6.0/24
                          IP: 207.229.98.0/24
                          IP: 207.229.110.0/23
                          IP: 2620:135:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:25:fe:a2:1f:3e:86:7f:4b:c5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 28 00:45:22 2024 GMT
            Not After : Jul  1 00:45:22 2026 GMT
        Subject: CN=590468a2-be81-410c-b887-a35157322fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:c2:a3:0d:58:a1:e1:94:c5:6a:10:e3:5c:
                    1b:c4:61:93:c6:cd:87:5f:67:2c:ab:6c:3b:67:61:
                    a7:6c:fe:04:01:e6:b3:0e:c0:68:3c:c7:8e:9d:7c:
                    e0:40:75:1f:d0:bd:65:cd:be:55:ae:78:2c:be:b0:
                    e5:74:8f:8c:fe:e7:d7:7d:3f:2d:b0:c0:4f:5a:df:
                    73:73:49:18:fd:44:51:56:de:69:22:47:6a:1e:5c:
                    3f:86:de:d6:55:c3:ca:49:08:53:85:99:48:55:e1:
                    09:2f:46:d6:3a:f1:36:aa:f6:ec:5b:da:c1:c4:6e:
                    21:67:a3:6b:8a:9d:b4:29:f5:98:21:fe:d9:43:be:
                    39:bb:be:b3:56:4a:5f:64:c6:9c:71:34:cf:dc:3d:
                    ef:1f:63:db:f8:55:68:ae:a8:6c:f6:78:86:27:77:
                    ce:81:46:bd:13:25:d2:a7:4a:cd:0d:21:c7:0a:01:
                    b2:88:f0:ff:b4:3f:56:a0:6d:36:42:9e:f5:cd:68:
                    e7:9f:9d:95:70:38:f4:69:e6:c0:26:ee:f7:09:06:
                    56:fa:54:d3:28:b4:54:c1:d8:3f:72:b8:c3:bf:87:
                    9a:b9:72:72:14:fc:bc:a5:1d:9b:90:cd:7e:70:46:
                    33:f8:05:da:5b:d0:ba:69:f0:f3:20:2e:63:15:56:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.103.152.0/22
                  67.206.186.0/23
                  104.232.41.0/24
                  192.103.117.0-192.103.119.255
                  198.169.6.0/24
                  207.229.98.0/24
                  207.229.110.0/23
                IPv6:
                  2620:135:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13487
                  23358
                  393891

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:85:39:c8:a7:97:dd:5c:39:03:29:a4:3b:24:d3:e6:0e:29:
         34:08:2b:7c:80:8d:42:16:b2:a7:0d:b9:38:80:d5:5f:c8:8d:
         fc:12:40:b5:c9:a3:21:d1:a1:48:39:71:8c:3e:2d:ba:f7:57:
         df:9e:8a:80:36:d8:25:10:44:56:4e:b0:d1:cc:47:4d:ce:e4:
         a0:55:5c:7f:33:3a:b8:90:d5:ca:e4:75:e4:99:45:2e:d7:88:
         43:27:28:e4:9c:b9:de:87:27:4e:a1:be:73:3b:0a:7e:94:c8:
         a7:35:46:72:b0:12:fd:16:3d:ba:57:bd:49:e4:d3:6c:04:3a:
         27:43:90:3f:92:1f:7e:fc:15:74:c5:96:fa:d6:02:6e:94:ed:
         3b:67:97:c9:95:81:8a:b6:0e:d8:4c:7d:38:17:fd:e0:d0:b3:
         6a:65:3f:8c:34:67:fc:1b:6b:75:a8:e9:af:f3:9b:19:1a:50:
         6e:c9:34:fd:ac:7e:c4:72:83:68:b3:11:fb:9e:08:f0:aa:02:
         fb:c6:14:8e:07:36:31:4d:c4:5c:47:bf:9d:72:67:af:4d:3f:
         86:af:c3:ee:96:c0:c8:06:57:08:a7:86:c2:96:fa:2c:62:72:
         e3:05:9b:db:da:6e:21:84:98:7d:0d:44:6e:db:3b:76:1c:46:
         68:18:97:a6
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUAQ0Mn0MoWEVaJf6iHz6Gf0vFcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDMyODAwNDUyMloXDTI2MDcwMTAwNDUyMlowLzEtMCsGA1UEAxMk
NTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIyZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5XCow1YoeGUxWoQ41wbxGGTxs2HX2csq2w7
Z2GnbP4EAeazDsBoPMeOnXzgQHUf0L1lzb5VrngsvrDldI+M/ufXfT8tsMBPWt9z
c0kY/URRVt5pIkdqHlw/ht7WVcPKSQhThZlIVeEJL0bWOvE2qvbsW9rBxG4hZ6Nr
ip20KfWYIf7ZQ745u76zVkpfZMaccTTP3D3vH2Pb+FVorqhs9niGJ3fOgUa9EyXS
p0rNDSHHCgGyiPD/tD9WoG02Qp71zWjnn52VcDj0aebAJu73CQZW+lTTKLRUwdg/
crjDv4eauXJyFPy8pR2bkM1+cEYz+AXaW9C6afDzIC5jFVaR1wIDAQABo4IEYDCC
BFwwHQYDVR0OBBYEFM/fnL9dJ/1pQQjgpMC8wtqp6A6JMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81
OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU5MDQ2OGEyLWJlODEtNDEwYy1i
ODg3LWEzNTE1NzMyMmZiMS81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTcz
MjJmYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwXAYIKwYBBQUH
AQcBAf8ETTBLMDgEAgABMDIDBAJCZ5gDBAFDzroDBABo6CkwDAMEAMBndQMEA8Bn
cAMEAMapBgMEAM/lYgMEAc/lbjAPBAIAAjAJAwcEJiABNUAAMCIGCCsGAQUFBwEI
AQH/BBMwEaAPMA0CAjSvAgJbPgIDBgKjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFiFOcinl91cOQMppDsk
0+YOKTQIK3yAjUIWsqcNuTiA1V/IjfwSQLXJoyHRoUg5cYw+Lbr3V9+eioA22CUQ
RFZOsNHMR03O5KBVXH8zOriQ1crkdeSZRS7XiEMnKOScud6HJ06hvnM7Cn6UyKc1
RnKwEv0WPbpXvUnk02wEOidDkD+SH378FXTFlvrWAm6U7Ttnl8mVgYq2DthMfTgX
/eDQs2plP4w0Z/wba3Wo6a/zmxkaUG7JNP2sfsRyg2izEfueCPCqAvvGFI4HNjFN
xFxHv51yZ69NP4avw+6WwMgGVwinhsKW+ixicuMFm9vabiGEmH0NRG7bO3YcRmgY
l6Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:04 2024 by rpki-client on console-ams.rpki-client.org