Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
File:                     6c6981fd-28f4-4238-8558-d3d7498f0af2.cer (raw, json)
Hash identifier:          9u10HwV6NTYEBTasG/7EY4l78xPRWnyUfbrUCkdQEpE=
Subject key identifier:   B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE87425A74380074ACEC9F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:19 +0000
Certificate not after:    Sat 31 May 2025 19:06:39 +0000
Subordinate resources:    AS: 6364
                          AS: 11041
                          IP: 45.58.32.0/20
                          IP: 69.28.64.0/19
                          IP: 69.87.216.0/21
                          IP: 96.126.72.0 -- 96.126.95.255
                          IP: 104.219.52.0/22
                          IP: 104.245.32.0/21
                          IP: 199.198.214.0/23
                          IP: 208.117.80.0/21
                          IP: 208.117.93.0 -- 208.117.94.255
                          IP: 209.23.0.0/19
                          IP: 209.208.0.0/17
                          IP: 216.98.0.0/20
                          IP: 2607:f170::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:42:5a:74:38:00:74:ac:ec:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:19 2023 GMT
            Not After : May 31 19:06:39 2025 GMT
        Subject: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:43:2f:3c:6c:d4:df:90:42:65:08:95:96:
                    3c:4f:10:74:57:a6:f7:b2:88:36:16:8f:bc:72:c0:
                    b4:34:06:a0:e7:ff:d1:68:ca:27:2a:36:9f:6a:e1:
                    d6:80:3f:e7:d0:56:3b:0c:fe:07:92:3d:1d:59:42:
                    43:4d:84:0f:e7:72:65:dd:14:36:30:b8:4a:dd:8c:
                    6d:4b:91:03:f9:33:b6:32:f6:02:74:8c:36:5c:00:
                    45:53:6f:75:36:4a:13:b8:98:3f:21:21:2d:28:88:
                    e5:3e:3f:b2:3e:89:c0:08:2b:8d:f6:c9:a5:a2:28:
                    3d:ab:36:b3:6d:fc:3b:a1:a5:36:77:fa:49:7f:44:
                    e4:3f:58:65:29:5d:9a:6b:2b:cd:80:9f:82:e9:ee:
                    0d:58:59:bd:b5:a5:b7:11:2e:00:7a:eb:8e:8e:90:
                    e3:79:b2:c3:0d:41:d2:16:56:68:ff:90:39:aa:52:
                    bf:01:d4:82:a9:12:d3:3a:db:0f:1d:49:b0:b1:5e:
                    31:fb:be:4c:8c:5c:9b:2f:2b:c9:8f:31:0e:29:7e:
                    2a:7d:ae:8f:c2:45:a6:c0:77:0b:69:e5:f7:f7:eb:
                    7b:20:7b:40:b2:da:b0:2c:84:67:78:dd:80:7e:4d:
                    7d:48:4b:78:8e:17:84:08:cf:e5:68:af:f6:aa:20:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.32.0/20
                  69.28.64.0/19
                  69.87.216.0/21
                  96.126.72.0-96.126.95.255
                  104.219.52.0/22
                  104.245.32.0/21
                  199.198.214.0/23
                  208.117.80.0/21
                  208.117.93.0-208.117.94.255
                  209.23.0.0/19
                  209.208.0.0/17
                  216.98.0.0/20
                IPv6:
                  2607:f170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6364
                  11041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:64:c9:64:00:66:bc:be:ec:a5:e1:7e:50:27:41:ba:fc:b6:
         24:65:8e:2b:3e:79:32:9e:ac:b7:63:8f:df:1f:e6:b8:f1:e1:
         7e:86:f2:f0:68:75:ae:be:f6:55:d9:0d:5c:c5:0d:07:be:fd:
         2d:90:77:70:61:07:97:d1:bc:cf:50:60:90:06:73:7e:ec:e9:
         0b:60:d0:3d:3b:40:ea:9d:71:03:c1:5e:27:2f:15:97:a4:9a:
         e6:3b:06:4c:52:ad:09:a6:86:d5:15:7e:aa:bf:81:ab:29:7f:
         a6:aa:fc:93:fe:64:e3:40:8b:fa:46:48:2d:eb:f7:39:8d:e3:
         1e:b9:ce:fe:c4:dd:06:1a:02:f5:ad:dc:48:bf:13:d0:d6:18:
         32:c0:87:a5:be:db:55:3b:68:f8:b6:4f:ad:d4:aa:75:88:4f:
         d4:f4:f7:06:6d:00:a4:31:e4:53:4b:2f:91:29:b7:2b:8c:70:
         c5:e4:88:88:df:44:7d:10:58:2c:01:9d:e3:88:be:2a:55:1a:
         12:59:eb:0e:59:8a:2c:36:d5:8c:29:d4:e0:c8:2b:75:b4:81:
         45:ae:c9:6a:c1:58:bb:07:35:42:5f:2c:ff:7f:32:77:c1:fd:
         22:1c:9f:8a:5f:22:bc:d5:1a:b2:f7:41:ba:88:30:56:05:60:
         e8:e8:a8:ed
-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgIUAQ0Mn0MoWELOh0JadDgAdKzsn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDgwNzE0NTQxOVoXDTI1MDUzMTE5MDYzOVowLzEtMCsGA1UEAxMk
NmM2OTgxZmQtMjhmNC00MjM4LTg1NTgtZDNkNzQ5OGYwYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLJDLzxs1N+QQmUIlZY8TxB0V6b3sog2Fo+8
csC0NAag5//RaMonKjafauHWgD/n0FY7DP4Hkj0dWUJDTYQP53Jl3RQ2MLhK3Yxt
S5ED+TO2MvYCdIw2XABFU291NkoTuJg/ISEtKIjlPj+yPonACCuN9smloig9qzaz
bfw7oaU2d/pJf0TkP1hlKV2aayvNgJ+C6e4NWFm9taW3ES4AeuuOjpDjebLDDUHS
FlZo/5A5qlK/AdSCqRLTOtsPHUmwsV4x+75MjFybLyvJjzEOKX4qfa6PwkWmwHcL
aeX39+t7IHtAstqwLIRneN2Afk19SEt4jheECM/laK/2qiAXzwIDAQABo4IEgDCC
BHwwHQYDVR0OBBYEFLl258wQs9ssypcqFdvtNGDqgeU0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4ZjBhZjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzZjNjk4MWZkLTI4ZjQtNDIzOC04
NTU4LWQzZDc0OThmMGFmMi82YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4
ZjBhZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYAGCCsGAQUF
BwEHAQH/BHEwbzBeBAIAATBYAwQELTogAwQFRRxAAwQDRVfYMAwDBANgfkgDBAVg
fkADBAJo2zQDBANo9SADBAHHxtYDBAPQdVAwDAMEANB1XQMEANB1XgMEBdEXAAME
B9HQAAMEBNhiADANBAIAAjAHAwUAJgfxcDAdBggrBgEFBQcBCAEB/wQOMAygCjAI
AgIY3AICKyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAg2TJZABmvL7speF+UCdBuvy2JGWOKz55Mp6st2OP
3x/muPHhfoby8Gh1rr72VdkNXMUNB779LZB3cGEHl9G8z1BgkAZzfuzpC2DQPTtA
6p1xA8FeJy8Vl6Sa5jsGTFKtCaaG1RV+qr+Bqyl/pqr8k/5k40CL+kZILev3OY3j
HrnO/sTdBhoC9a3cSL8T0NYYMsCHpb7bVTto+LZPrdSqdYhP1PT3Bm0ApDHkU0sv
kSm3K4xwxeSIiN9EfRBYLAGd44i+KlUaElnrDlmKLDbVjCnU4MgrdbSBRa7JasFY
uwc1Ql8s/38yd8H9Ihyfil8ivNUasvdBuogwVgVg6Oio7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:16:10 2024 by rpki-client on console-ams.rpki-client.org