Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
File:                     7981ca6b-952a-4908-a513-7b300be24271.cer (raw, json)
Hash identifier:          OO8vDYyBo87MTb/SBxlgbhGPcXtSHDVfzeUlDcO0OrM=
Subject key identifier:   89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48349DCD18BEDB4EBA87480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 25 May 2025 19:06:39 +0000
Subordinate resources:    AS: 886 -- 887
                          AS: 396950
                          IP: 23.136.248.0/24
                          IP: 149.112.32.0/24
                          IP: 185.212.75.0/24
                          IP: 2001:504:118::/48
                          IP: 2602:fb62::/36
                          IP: 2620:139:7000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:49:dc:d1:8b:ed:b4:eb:a8:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 25 19:06:39 2025 GMT
        Subject: CN=7981ca6b-952a-4908-a513-7b300be24271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:1c:e4:0f:40:ae:75:12:c3:38:58:51:66:
                    c4:41:77:75:a3:5d:f6:16:3d:d5:c8:25:43:d2:c4:
                    3a:9a:13:34:4f:51:32:5c:ae:c6:0c:c8:7b:73:33:
                    bd:ad:ff:7c:df:da:93:43:43:7e:35:04:ce:12:f8:
                    e6:4c:8b:63:08:ea:44:e5:4a:49:80:8f:c3:38:c0:
                    26:aa:1e:ba:6d:e7:81:08:f3:f7:90:dd:51:be:ee:
                    fe:90:79:df:35:df:5e:4a:d3:b4:b0:38:37:03:e4:
                    c2:0d:5e:f2:71:8e:fe:11:05:8c:2c:12:9f:68:90:
                    7e:e4:ad:de:1e:18:30:ff:99:c0:46:57:33:67:b2:
                    cd:d3:06:98:3e:a8:93:93:63:25:a3:09:82:4a:d3:
                    78:ab:1a:02:d8:9b:20:e1:e9:32:e5:1c:be:bf:a0:
                    cf:bb:4c:7d:9b:28:5b:da:d3:12:ea:9b:96:b6:55:
                    6e:f4:ac:a3:c0:b2:2c:51:81:df:83:08:c1:38:d8:
                    5f:d0:07:7f:0f:a1:b3:6a:9b:ce:4e:01:b7:92:37:
                    ff:88:ed:60:4f:0e:3f:a8:b1:93:d8:eb:3e:05:40:
                    9d:39:1b:9d:9d:9c:bb:6a:0c:a7:bb:a4:4c:e5:c6:
                    72:cc:43:b7:3c:6f:25:6b:ad:13:b4:a4:f7:22:be:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.248.0/24
                  149.112.32.0/24
                  185.212.75.0/24
                IPv6:
                  2001:504:118::/48
                  2602:fb62::/36
                  2620:139:7000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  886-887
                  396950

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:1b:c9:91:9c:dc:ad:dc:c6:10:9a:31:43:6c:7f:1b:9a:
         60:d3:89:b1:ef:f0:27:01:85:80:f5:63:0c:c9:83:6c:f2:55:
         96:a2:b5:af:ee:eb:a1:e0:77:cd:38:91:44:16:e9:53:9c:a4:
         f8:5e:42:c6:60:62:f1:4d:86:e7:b3:d9:12:cf:d0:23:95:c7:
         43:60:55:25:df:63:33:cc:59:1c:ec:0d:b4:ba:c0:d3:7b:8f:
         10:d6:31:83:e7:53:e1:9c:98:67:37:76:3d:5c:3f:90:85:a9:
         90:d2:7a:83:de:37:1c:03:61:b9:90:23:b2:7b:e0:72:19:4e:
         fa:fa:67:85:26:26:7c:ac:3f:a1:18:6f:f1:dd:ac:8d:49:3c:
         04:8a:47:f9:d9:9b:f1:58:f8:1d:02:19:e1:38:7e:09:81:d6:
         cc:54:c4:3d:af:ec:5e:f8:94:a0:29:78:09:f3:a3:01:56:5c:
         7e:50:63:a3:62:e6:40:0d:4f:ca:55:b4:41:64:91:5a:96:9c:
         33:1c:d7:fe:89:db:21:27:a0:60:ad:b7:b0:9d:f0:09:9b:bf:
         56:3e:cf:64:ce:37:ef:b5:a8:ba:3e:f6:ad:81:70:22:83:bd:
         20:a4:50:84:6f:6a:ba:13:e2:8d:d8:0c:3b:27:3d:5a:ce:0b:
         bb:1a:b1:68
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWEHkg0nc0YvttOuodIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNTE5MDYzOVowLzEtMCsGA1UEAxMk
Nzk4MWNhNmItOTUyYS00OTA4LWE1MTMtN2IzMDBiZTI0MjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Uc5A9ArnUSwzhYUWbEQXd1o132Fj3VyCVD
0sQ6mhM0T1EyXK7GDMh7czO9rf9839qTQ0N+NQTOEvjmTItjCOpE5UpJgI/DOMAm
qh66beeBCPP3kN1Rvu7+kHnfNd9eStO0sDg3A+TCDV7ycY7+EQWMLBKfaJB+5K3e
Hhgw/5nARlczZ7LN0waYPqiTk2MlowmCStN4qxoC2Jsg4eky5Ry+v6DPu0x9myhb
2tMS6puWtlVu9KyjwLIsUYHfgwjBONhf0Ad/D6GzapvOTgG3kjf/iO1gTw4/qLGT
2Os+BUCdORudnZy7agynu6RM5cZyzEO3PG8la60TtKT3Ir7CAwIDAQABo4IEUjCC
BE4wHQYDVR0OBBYEFIk2MHbbuWUab8FfhN2dKXx6DdTWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83
OTgxY2E2Yi05NTJhLTQ5MDgtYTUxMy03YjMwMGJlMjQyNzEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc5ODFjYTZiLTk1MmEtNDkwOC1h
NTEzLTdiMzAwYmUyNDI3MS83OTgxY2E2Yi05NTJhLTQ5MDgtYTUxMy03YjMwMGJl
MjQyNzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwTAYIKwYBBQUH
AQcBAf8EPTA7MBgEAgABMBIDBAAXiPgDBACVcCADBAC51EswHwQCAAIwGQMHACAB
BQQBGAMGBCYC+2IAAwYAJiABOXAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDzAIAgID
dgICA3cCAwYOljBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBxtRvJkZzcrdzGEJoxQ2x/G5pg04mx7/AnAYWA
9WMMyYNs8lWWorWv7uuh4HfNOJFEFulTnKT4XkLGYGLxTYbns9kSz9AjlcdDYFUl
32MzzFkc7A20usDTe48Q1jGD51PhnJhnN3Y9XD+QhamQ0nqD3jccA2G5kCOye+By
GU76+meFJiZ8rD+hGG/x3ayNSTwEikf52ZvxWPgdAhnhOH4JgdbMVMQ9r+xe+JSg
KXgJ86MBVlx+UGOjYuZADU/KVbRBZJFalpwzHNf+idshJ6BgrbewnfAJm79WPs9k
zjfvtai6PvatgXAig70gpFCEb2q6E+KN2Aw7Jz1azgu7GrFo
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:49:56 2024 by rpki-client on console-fra.rpki-client.org