Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
File:                     35a72605-99bc-4c4b-995e-c01a3684dcbf.cer (raw, json)
Hash identifier:          ykldUnuwSQCLTT1bq+eaaWHjNNl3rpaPdOv4tsDJ6Oc=
Subject key identifier:   9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285842CE874610391952F030494200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:21 +0000
Certificate not after:    Tue 13 May 2025 19:06:39 +0000
Subordinate resources:    AS: 965
                          IP: 23.129.248.0/21
                          IP: 208.66.92.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:46:10:39:19:52:f0:30:49:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug  7 14:54:21 2023 GMT
            Not After : May 13 19:06:39 2025 GMT
        Subject: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:0e:6f:27:c2:f7:d8:1f:25:a1:34:cf:00:
                    23:10:01:f6:f1:9c:17:97:1d:a7:fc:bb:5b:02:0e:
                    03:33:31:a3:65:54:9b:a9:d6:33:c2:ac:77:b8:47:
                    32:4a:fc:0f:d4:ee:c5:7a:b9:34:52:72:76:30:e6:
                    97:7b:fe:8a:64:6c:81:35:ed:72:11:93:f2:b0:4a:
                    7e:06:fe:2d:d4:c8:24:57:7b:7c:7b:ae:ea:04:44:
                    31:73:af:99:a5:9f:46:e7:6e:c0:fb:89:88:03:df:
                    ba:a1:41:79:59:58:0f:b1:b7:22:da:d2:f3:f2:08:
                    ea:18:f0:cb:6a:a8:e1:fc:f5:f9:85:27:91:c6:fe:
                    85:b2:10:21:3d:69:b6:47:4c:6d:43:0b:e8:7b:b2:
                    b3:31:52:fb:f7:62:95:45:8c:ac:b1:35:36:8d:79:
                    27:e1:bc:c8:78:19:b1:fe:c4:a5:eb:4e:ee:a9:20:
                    4d:41:0c:5e:77:4f:59:07:95:8b:41:1c:d0:53:c4:
                    bb:71:15:39:77:ec:33:ec:4d:a0:f2:a4:d5:dd:d5:
                    cd:81:37:84:43:79:5f:b7:f6:e7:de:7d:8e:22:bb:
                    75:ac:16:d8:e7:df:12:b4:28:05:89:80:4d:0c:9b:
                    f1:72:ee:fe:66:a3:19:fe:22:99:04:cd:26:15:b7:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.248.0/21
                  208.66.92.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  965

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e5:ca:3d:44:39:ab:2a:d1:9a:63:4f:d5:b1:cd:5d:e5:67:
         88:cd:cb:01:af:4c:9d:ed:49:40:c6:46:43:9a:e8:38:3b:82:
         85:22:22:fb:7f:45:e9:86:8c:2f:5c:bd:4a:f6:b5:1e:fd:c0:
         51:9a:e9:45:9b:40:74:e4:f6:43:7b:f5:a5:a8:ef:71:6c:26:
         fb:f1:c8:41:6d:6b:ee:c1:a8:04:e1:f9:ef:cd:33:82:4b:2b:
         e5:40:c5:7b:d4:d2:ab:d9:60:e2:da:4a:8b:47:05:e0:4c:2f:
         ee:bc:bf:82:11:ad:68:66:8c:d0:62:8e:db:0e:fb:60:60:c1:
         32:16:9f:d9:de:e4:55:28:d4:ab:5a:b3:25:7b:c7:c8:13:7f:
         a2:db:81:dd:bd:c0:42:93:a3:3b:98:84:95:9a:39:75:8f:b0:
         31:93:af:bd:26:d3:cb:79:c3:5a:36:4d:53:b4:ce:58:e9:8a:
         72:7c:f3:d6:58:f5:e0:c0:29:1f:05:40:99:21:ae:9c:ca:d5:
         53:80:d6:0b:03:5e:e8:29:61:45:a4:d8:8f:69:63:a0:c0:22:
         a0:0e:71:e8:d2:b8:5f:01:4b:27:bf:8e:1c:01:ef:d9:8a:f6:
         8d:3f:14:02:2c:07:d6:51:89:29:65:5e:d3:0d:3a:75:ca:0e:
         2a:45:26:34
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWELOh0YQORlS8DBJQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDgwNzE0NTQyMVoXDTI1MDUxMzE5MDYzOVowLzEtMCsGA1UEAxMk
MzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRkY2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoUObyfC99gfJaE0zwAjEAH28ZwXlx2n/Ltb
Ag4DMzGjZVSbqdYzwqx3uEcySvwP1O7Ferk0UnJ2MOaXe/6KZGyBNe1yEZPysEp+
Bv4t1MgkV3t8e67qBEQxc6+ZpZ9G527A+4mIA9+6oUF5WVgPsbci2tLz8gjqGPDL
aqjh/PX5hSeRxv6FshAhPWm2R0xtQwvoe7KzMVL792KVRYyssTU2jXkn4bzIeBmx
/sSl607uqSBNQQxed09ZB5WLQRzQU8S7cRU5d+wz7E2g8qTV3dXNgTeEQ3lft/bn
3n2OIrt1rBbY598StCgFiYBNDJvxcu7+ZqMZ/iKZBM0mFbfQGQIDAQABo4IEIDCC
BBwwHQYDVR0OBBYEFJ0nnWZXxMYo1w4TvpXNOn/XK4RQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z
NWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzM1YTcyNjA1LTk5YmMtNGM0Yi05
OTVlLWMwMWEzNjg0ZGNiZi8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4
NGRjYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAMXgfgDBALQQlwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICA8UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAIOXKPUQ5qyrRmmNP1bHNXeVniM3LAa9Mne1JQMZG
Q5roODuChSIi+39F6YaML1y9Sva1Hv3AUZrpRZtAdOT2Q3v1pajvcWwm+/HIQW1r
7sGoBOH5780zgksr5UDFe9TSq9lg4tpKi0cF4Ewv7ry/ghGtaGaM0GKO2w77YGDB
Mhaf2d7kVSjUq1qzJXvHyBN/otuB3b3AQpOjO5iElZo5dY+wMZOvvSbTy3nDWjZN
U7TOWOmKcnzz1lj14MApHwVAmSGunMrVU4DWCwNe6ClhRaTYj2ljoMAioA5x6NK4
XwFLJ7+OHAHv2Yr2jT8UAiwH1lGJKWVe0w06dcoOKkUmNA==
-----END CERTIFICATE-----
Generated at Fri Apr 19 01:53:37 2024 by rpki-client on console-ams.rpki-client.org