Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer
File:                     0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer (raw, json)
Hash identifier:          B+ZuNmgY9W5UuStWONLc4K9zVFDR2VqYZlM+2ahVGQA=
Subject key identifier:   B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584238EB9DE47ABBFD07F4D41900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Jun 2023 00:45:16 +0000
Certificate not after:    Wed 17 Sep 2025 00:45:16 +0000
Subordinate resources:    IP: 207.167.92.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:38:eb:9d:e4:7a:bb:fd:07:f4:d4:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 15 00:45:16 2023 GMT
            Not After : Sep 17 00:45:16 2025 GMT
        Subject: CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:e8:b1:74:3b:c0:88:31:3d:a2:1c:28:8e:
                    ea:b8:1a:a7:a7:31:0a:17:7d:5f:ab:46:5f:34:4d:
                    00:fc:2d:45:20:b1:e0:ad:dc:6e:28:33:84:ed:2d:
                    1d:21:6d:a0:6e:a5:50:aa:76:85:c1:1d:5e:da:31:
                    45:e3:e5:08:88:6a:52:ac:67:78:96:88:30:30:68:
                    a4:12:0a:d5:74:6a:d6:d3:3d:ea:d2:61:6a:60:9a:
                    bf:3b:82:c3:35:14:23:07:d0:d4:a5:bb:09:bf:6c:
                    d3:31:10:24:12:d8:b6:03:cf:8f:b3:32:36:4a:44:
                    75:2b:60:c2:f4:19:0d:36:a4:4e:77:72:92:f3:b6:
                    89:51:3c:d4:71:49:92:ed:4f:b7:fe:3c:b1:0c:f9:
                    70:98:97:c3:cb:c1:b1:3c:fd:e2:1c:24:c5:32:b0:
                    39:f9:5c:00:1f:9a:5e:1e:bc:24:0e:0b:e4:43:b4:
                    27:c7:8a:78:a3:a6:b4:c2:7d:7d:ac:14:4c:17:d7:
                    9b:2d:d4:68:23:71:68:53:38:40:34:a8:a2:3b:8c:
                    d2:e5:67:e0:44:1c:21:40:50:bf:f5:f7:dd:73:d7:
                    41:4d:e2:06:1f:b9:9c:92:4c:cc:b6:4c:16:78:4a:
                    32:ad:39:e4:d7:93:be:88:6e:79:4b:b9:2c:28:03:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:51:19:92:2c:59:b5:0b:df:bf:7e:87:01:dc:c8:d4:c6:
         25:9a:cc:d8:3d:00:94:de:ad:92:86:4b:b9:ca:ac:5f:31:3f:
         70:51:58:b0:0b:c0:43:2b:0d:c7:ad:88:25:24:f7:bc:5c:6a:
         20:9c:da:0f:55:0a:d1:86:58:0f:13:a6:e0:c1:02:53:3e:3b:
         57:31:6c:11:e8:52:98:67:e9:6a:e0:ae:02:c7:f9:4e:21:bd:
         0d:05:25:c4:88:dd:87:05:4d:b1:bf:02:5a:cf:6d:39:65:cb:
         bd:70:71:da:19:7a:d2:6b:94:e0:09:a2:64:22:e6:fb:e8:ce:
         b3:47:77:10:23:45:b1:a2:b6:29:7b:23:7e:2f:22:f4:95:fb:
         25:9c:3b:ab:7f:5e:0f:1a:5e:6d:93:b3:b3:46:17:c4:8c:65:
         46:6f:8a:80:6d:1f:4c:be:59:4b:3d:9a:1f:88:b1:17:99:3b:
         95:bd:a6:1b:e7:16:74:53:fd:23:cf:04:af:b0:b0:6c:a0:e8:
         92:c0:e8:4c:64:fc:ca:8a:e8:09:5f:cb:d0:6c:42:0e:32:b4:
         6d:d5:91:e8:cc:1d:70:c2:6f:9a:4b:84:9e:64:90:0c:51:39:
         ea:52:09:7b:40:32:a2:04:2f:b6:2e:30:c4:2a:3e:4f:99:9d:
         10:6e:20:be
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEI4653kerv9B/TUGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDYxNTAwNDUxNloXDTI1MDkxNzAwNDUxNlowLzEtMCsGA1UEAxMk
MGM3MTViMWEtNDliMC00NGRhLTkyNDQtMGU4ZGNiYjY3YjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tDosXQ7wIgxPaIcKI7quBqnpzEKF31fq0Zf
NE0A/C1FILHgrdxuKDOE7S0dIW2gbqVQqnaFwR1e2jFF4+UIiGpSrGd4logwMGik
EgrVdGrW0z3q0mFqYJq/O4LDNRQjB9DUpbsJv2zTMRAkEti2A8+PszI2SkR1K2DC
9BkNNqROd3KS87aJUTzUcUmS7U+3/jyxDPlwmJfDy8GxPP3iHCTFMrA5+VwAH5pe
HrwkDgvkQ7Qnx4p4o6a0wn19rBRMF9ebLdRoI3FoUzhANKiiO4zS5WfgRBwhQFC/
9ffdc9dBTeIGH7mckkzMtkwWeEoyrTnk15O+iG55S7ksKAPZlQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFLgmneMjqCrF2GFIO+RgwGzRJsXAMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w
YzcxNWIxYS00OWIwLTQ0ZGEtOTI0NC0wZThkY2JiNjdiNmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBjNzE1YjFhLTQ5YjAtNDRkYS05
MjQ0LTBlOGRjYmI2N2I2Yi8wYzcxNWIxYS00OWIwLTQ0ZGEtOTI0NC0wZThkY2Ji
NjdiNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALPp1wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa1hRGZIsWbUL379+hwHc
yNTGJZrM2D0AlN6tkoZLucqsXzE/cFFYsAvAQysNx62IJST3vFxqIJzaD1UK0YZY
DxOm4MECUz47VzFsEehSmGfpauCuAsf5TiG9DQUlxIjdhwVNsb8CWs9tOWXLvXBx
2hl60muU4AmiZCLm++jOs0d3ECNFsaK2KXsjfi8i9JX7JZw7q39eDxpebZOzs0YX
xIxlRm+KgG0fTL5ZSz2aH4ixF5k7lb2mG+cWdFP9I88Er7CwbKDoksDoTGT8yoro
CV/L0GxCDjK0bdWR6MwdcMJvmkuEnmSQDFE56lIJe0AyogQvti4wxCo+T5mdEG4g
vg==
-----END CERTIFICATE-----
Generated at Thu Mar 28 19:47:48 2024 by rpki-client on console-fra.rpki-client.org