Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
File:                     0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer (raw, json)
Hash identifier:          KYuHEYHUZfiCA+GtufbjKc+anqRAjrzG/WHX8wR7OJI=
Subject key identifier:   57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858469F8955638CC7C0F00BAAFDC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jul 2024 14:03:15 +0000
Certificate not after:    Sat 11 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 10667
                          AS: 11583
                          AS: 13384
                          AS: 14033
                          AS: 14376
                          AS: 15016
                          AS: 18434
                          AS: 18594
                          AS: 18659
                          AS: 22410
                          AS: 25681
                          AS: 25685
                          AS: 26435
                          AS: 26460
                          AS: 30680
                          AS: 32483
                          AS: 32944
                          AS: 32970
                          AS: 42172
                          AS: 46203
                          AS: 46372
                          AS: 53556
                          AS: 54586
                          AS: 395099
                          AS: 397705
                          IP: 63.141.160.0/19
                          IP: 64.57.144.0/20
                          IP: 66.97.167.0/24
                          IP: 69.36.16.0/20
                          IP: 70.34.64.0/20
                          IP: 74.120.156.0/22
                          IP: 74.122.176.0/22
                          IP: 147.249.0.0/16
                          IP: 156.55.0.0/16
                          IP: 162.251.208.0/22
                          IP: 168.162.0.0/16
                          IP: 170.132.0.0/16
                          IP: 192.82.228.0/24
                          IP: 192.88.5.0/24
                          IP: 192.88.51.0 -- 192.88.79.255
                          IP: 192.112.217.0/24
                          IP: 192.225.28.0/22
                          IP: 195.110.224.0/19
                          IP: 198.62.209.0 -- 198.62.211.255
                          IP: 198.84.8.0 -- 198.84.12.255
                          IP: 199.38.140.0/24
                          IP: 199.74.216.0/22
                          IP: 199.181.218.0/24
                          IP: 199.200.16.0 -- 199.200.27.255
                          IP: 199.249.154.0/24
                          IP: 199.254.202.0/24
                          IP: 204.90.0.0 -- 204.90.9.255
                          IP: 204.124.95.0/24
                          IP: 204.130.32.0/19
                          IP: 205.141.240.0/20
                          IP: 206.71.16.0/20
                          IP: 206.197.39.0/24
                          IP: 208.70.176.0/22
                          IP: 208.74.144.0/22
                          IP: 208.74.164.0/22
                          IP: 208.75.4.0/22
                          IP: 216.189.224.0/19
                          IP: 2607:7400::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9f:89:55:63:8c:c7:c0:f0:0b:aa:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 22 14:03:15 2024 GMT
            Not After : Jul 11 00:45:20 2026 GMT
        Subject: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:a0:df:3c:cb:88:5b:a6:ab:f5:02:79:95:
                    63:3e:61:25:77:c8:2d:2e:05:a2:56:97:49:ca:f2:
                    27:8e:61:bc:d8:92:7c:f6:f4:7e:01:19:1e:ae:b7:
                    cf:bc:06:16:ea:72:a7:f3:2c:0e:df:e9:ce:86:52:
                    39:73:b2:ee:e7:5b:66:ab:af:52:3f:94:a0:1b:42:
                    03:93:30:f3:3e:83:47:11:b5:cb:81:37:f4:99:36:
                    32:b9:6b:26:fe:77:39:ad:a8:d9:d0:20:ce:0f:dd:
                    a6:06:62:d2:f1:0f:5f:d3:68:d9:42:2f:07:d9:5f:
                    8f:35:9f:ec:1a:17:69:84:dc:6e:59:cd:2f:93:0e:
                    62:4b:bd:a5:86:5b:56:5e:10:e8:8a:9b:15:45:cf:
                    5b:09:4c:c0:d6:d0:04:90:ba:ef:cf:f2:a4:e5:8b:
                    9d:92:01:49:9e:de:93:47:b4:36:20:6d:5c:a1:28:
                    32:93:b0:96:38:be:5f:98:87:dc:a2:6b:a1:83:11:
                    3b:76:55:20:63:d7:23:e7:f6:9d:72:cb:bb:61:50:
                    93:0d:a1:79:7d:6b:3e:a9:70:e8:52:7b:95:f2:ad:
                    d6:7d:19:96:1d:86:60:98:d5:12:78:ea:48:20:c4:
                    8d:34:dd:b4:52:6a:73:5d:9a:a6:37:ac:81:57:5e:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.160.0/19
                  64.57.144.0/20
                  66.97.167.0/24
                  69.36.16.0/20
                  70.34.64.0/20
                  74.120.156.0/22
                  74.122.176.0/22
                  147.249.0.0/16
                  156.55.0.0/16
                  162.251.208.0/22
                  168.162.0.0/16
                  170.132.0.0/16
                  192.82.228.0/24
                  192.88.5.0/24
                  192.88.51.0-192.88.79.255
                  192.112.217.0/24
                  192.225.28.0/22
                  195.110.224.0/19
                  198.62.209.0-198.62.211.255
                  198.84.8.0-198.84.12.255
                  199.38.140.0/24
                  199.74.216.0/22
                  199.181.218.0/24
                  199.200.16.0-199.200.27.255
                  199.249.154.0/24
                  199.254.202.0/24
                  204.90.0.0-204.90.9.255
                  204.124.95.0/24
                  204.130.32.0/19
                  205.141.240.0/20
                  206.71.16.0/20
                  206.197.39.0/24
                  208.70.176.0/22
                  208.74.144.0/22
                  208.74.164.0/22
                  208.75.4.0/22
                  216.189.224.0/19
                IPv6:
                  2607:7400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10667
                  11583
                  13384
                  14033
                  14376
                  15016
                  18434
                  18594
                  18659
                  22410
                  25681
                  25685
                  26435
                  26460
                  30680
                  32483
                  32944
                  32970
                  42172
                  46203
                  46372
                  53556
                  54586
                  395099
                  397705

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:07:ad:aa:9b:93:5a:5f:f8:07:2b:ea:f9:1f:60:f0:db:
         12:3a:82:95:50:a8:3d:e0:fd:24:1c:e6:c2:eb:ec:34:0c:aa:
         f9:5f:86:dc:dc:62:d6:63:dc:6d:27:e0:ab:2b:fb:05:ca:e9:
         6b:aa:e2:ec:91:49:e8:d8:b0:08:49:99:37:2c:7f:bc:c3:c2:
         07:11:52:d3:c9:3e:15:18:1f:e7:2c:21:bc:0b:d3:55:2e:b6:
         2d:a2:b1:1e:cc:19:3d:56:df:ae:df:bc:71:f4:b1:bb:04:d2:
         ed:c4:80:76:c6:bb:56:bc:30:7e:9f:e6:f5:ee:2d:e1:e3:37:
         39:ef:96:e8:00:e3:ef:a3:5c:a6:6b:e9:a2:d5:5c:86:a6:7d:
         e8:80:47:09:97:35:3b:6e:55:86:f8:ef:2b:14:2f:90:56:83:
         ae:d8:56:6b:08:c4:41:6a:e1:88:67:c6:40:84:ed:56:2c:1f:
         1a:9a:48:f2:1d:14:b8:a1:96:26:67:12:a6:39:8a:fd:5c:ef:
         4e:95:7a:5d:ff:03:2a:89:4a:9f:0c:b2:3c:7b:4e:8c:89:d9:
         1c:86:eb:3a:3c:5d:6e:d4:4b:f0:50:25:a9:dc:01:2a:cd:13:
         85:d2:4e:f3:53:e6:33:7a:49:b9:ee:6d:8a:91:22:9c:fc:5d:
         74:48:02:8a
-----BEGIN CERTIFICATE-----
MIIIhjCCB26gAwIBAgIUAQ0Mn0MoWEafiVVjjMfA8Auq/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDcyMjE0MDMxNVoXDTI2MDcxMTAwNDUyMFowLzEtMCsGA1UEAxMk
MGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTliOTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzKg3zzLiFumq/UCeZVjPmEld8gtLgWiVpdJ
yvInjmG82JJ89vR+ARkerrfPvAYW6nKn8ywO3+nOhlI5c7Lu51tmq69SP5SgG0ID
kzDzPoNHEbXLgTf0mTYyuWsm/nc5rajZ0CDOD92mBmLS8Q9f02jZQi8H2V+PNZ/s
GhdphNxuWc0vkw5iS72lhltWXhDoipsVRc9bCUzA1tAEkLrvz/Kk5YudkgFJnt6T
R7Q2IG1coSgyk7CWOL5fmIfcomuhgxE7dlUgY9cj5/adcsu7YVCTDaF5fWs+qXDo
UnuV8q3WfRmWHYZgmNUSeOpIIMSNNN20UmpzXZqmN6yBV14L3wIDAQABo4IFmDCC
BZQwHQYDVR0OBBYEFFcapSfsF5F3jHF5A3NiccVTF2RmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w
ZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBkM2E1Njk5LTNlYjgtNGVjYi04
MGE1LWU4NzYxYTE5Yjk3MS8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWEx
OWI5NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwggExBggrBgEF
BQcBBwEB/wSCASAwggEcMIIBCQQCAAEwggEBAwQFP42gAwQEQDmQAwQAQmGnAwQE
RSQQAwQERiJAAwQCSnicAwQCSnqwAwMAk/kDAwCcNwMEAqL70AMDAKiiAwMAqoQD
BADAUuQDBADAWAUwDAMEAMBYMwMEBMBYQAMEAMBw2QMEAsDhHAMEBcNu4DAMAwQA
xj7RAwQCxj7QMAwDBAPGVAgDBADGVAwDBADHJowDBALHStgDBADHtdowDAMEBMfI
EAMEAsfIGAMEAMf5mgMEAMf+yjALAwMBzFoDBAHMWggDBADMfF8DBAXMgiADBATN
jfADBATORxADBADOxScDBALQRrADBALQSpADBALQSqQDBALQSwQDBAXYveAwDQQC
AAIwBwMFACYHdAAwgYIGCCsGAQUFBwEIAQH/BHMwcaBvMG0CAimrAgItPwICNEgC
AjbRAgI4KAICOqgCAkgCAgJIogICSOMCAleKAgJkUQICZFUCAmdDAgJnXAICd9gC
An7jAgMAgLACAwCAygIDAKS8AgMAtHsCAwC1JAIDANE0AgMA1ToCAwYHWwIDBhGJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAE7B62qm5NaX/gHK+r5H2Dw2xI6gpVQqD3g/SQc5sLr7DQMqvlf
htzcYtZj3G0n4Ksr+wXK6Wuq4uyRSejYsAhJmTcsf7zDwgcRUtPJPhUYH+csIbwL
01Uuti2isR7MGT1W367fvHH0sbsE0u3EgHbGu1a8MH6f5vXuLeHjNznvlugA4++j
XKZr6aLVXIamfeiARwmXNTtuVYb47ysUL5BWg67YVmsIxEFq4YhnxkCE7VYsHxqa
SPIdFLihliZnEqY5iv1c706Vel3/AyqJSp8Msjx7ToyJ2RyG6zo8XW7US/BQJanc
ASrNE4XSTvNT5jN6SbnubYqRIpz8XXRIAoo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:20 2024 by rpki-client on console-ams.rpki-client.org