Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
File:                     51dcdcba-3766-4509-a479-bbf02514719f.cer (download)
Hash identifier:          q8tIY+hUrvZcPpDEYC3Xaq7mqBbQWL+OA4mzrIaNLWA=
Subject key identifier:   ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583CB343E3C1C45E7D250CACFB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Mon 12 Jan 2032 15:40:08 +0000
Subordinate resources:
    1: IP: 207.90.204.0/22
    2: IP: 2602:fbd7::/36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b3:43:e3:c1:c4:5e:7d:25:0c:ac:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 12 15:40:08 2022 GMT
            Not After : Jan 12 15:40:08 2032 GMT
        Subject: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:f0:20:91:14:8a:7c:e0:aa:6b:0b:74:62:
                    d4:50:9c:05:29:7f:2f:aa:17:7a:f5:76:55:44:a3:
                    0f:3d:c8:0a:9e:32:70:84:e1:8b:92:11:e9:97:8d:
                    f6:08:a7:83:54:d1:d6:8d:85:3f:d1:6f:24:79:c7:
                    ae:93:f6:94:d1:5c:b3:63:5e:9c:25:83:a9:28:bc:
                    92:73:23:0f:3c:02:92:29:9e:15:34:15:86:30:98:
                    a3:35:28:2b:cf:eb:cb:ed:e5:4f:32:35:98:33:1d:
                    92:5c:dd:d0:43:65:98:3a:bd:5e:d2:3e:a1:96:60:
                    d0:de:8a:6c:df:f6:cb:f4:3b:2c:9e:0a:d0:57:12:
                    4f:00:5d:f3:b2:e4:96:75:60:6b:cc:06:c4:0a:59:
                    e3:b5:2b:1f:7e:e6:73:d2:8a:36:6a:80:63:dc:b2:
                    24:53:a3:1c:25:26:12:22:75:7f:cb:06:60:25:10:
                    cc:84:51:44:73:d5:99:8c:26:d8:79:14:94:2e:a2:
                    d8:88:8c:53:5b:44:51:df:a4:92:90:f4:a1:83:57:
                    42:27:f0:26:20:c1:14:80:71:38:28:95:b2:de:14:
                    c7:4a:c9:08:3b:6e:63:f6:df:2d:9e:ff:c4:04:e6:
                    de:5f:49:78:43:73:b7:68:3a:49:87:9e:a2:e6:fb:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.204.0/22
                IPv6:
                  2602:fbd7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:8d:1c:ef:03:0b:a8:54:3c:64:d2:34:e2:09:a3:ca:3c:
         0d:22:b7:b0:fa:f1:5c:f9:8a:54:e2:e2:5f:b8:89:a2:01:c9:
         9f:3a:70:04:98:20:54:5a:99:f3:ac:2c:7a:e7:16:0f:2c:b4:
         a2:d1:6c:d3:7a:b9:c2:d8:f7:61:4f:b3:53:61:00:c8:2e:a2:
         df:ee:2e:bf:0b:d0:84:13:56:4e:96:b6:75:a8:f0:2c:d8:62:
         36:1c:92:e9:d6:33:2b:c0:63:00:c6:96:81:bb:a7:6f:ec:c9:
         e0:3e:fe:21:94:d5:c1:9c:5a:ea:20:a2:e3:c0:f2:f7:83:1a:
         5d:f6:f6:36:b5:66:b5:6a:f9:26:72:e5:36:8f:ac:17:60:7a:
         09:8b:4c:48:bd:98:e3:e0:9d:40:02:11:e0:ae:50:ad:01:8d:
         81:96:37:a6:ea:c1:d7:26:01:80:fa:54:c2:18:29:8c:2f:6e:
         77:8a:3b:fa:3d:70:a9:4b:80:15:58:bf:4d:f2:03:3a:9f:d7:
         e6:35:03:be:11:b3:a7:89:09:f0:e5:09:6b:01:ad:8e:03:18:
         08:14:6d:db:b1:07:bb:2e:32:fd:6a:e4:99:1e:fb:33:f8:52:
         9a:74:31:ac:a9:b7:7c:d0:45:29:94:b8:35:75:e8:4c:54:be:
         55:ad:10:97
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWDyzQ+PBxF59JQys+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIyMDExMjE1NDAwOFoXDTMyMDExMjE1NDAwOFowLzEtMCsGA1UEAxMk
NTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3MTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1PwIJEUinzgqmsLdGLUUJwFKX8vqhd69XZV
RKMPPcgKnjJwhOGLkhHpl432CKeDVNHWjYU/0W8keceuk/aU0VyzY16cJYOpKLyS
cyMPPAKSKZ4VNBWGMJijNSgrz+vL7eVPMjWYMx2SXN3QQ2WYOr1e0j6hlmDQ3ops
3/bL9DssngrQVxJPAF3zsuSWdWBrzAbEClnjtSsffuZz0oo2aoBj3LIkU6McJSYS
InV/ywZgJRDMhFFEc9WZjCbYeRSULqLYiIxTW0RR36SSkPShg1dCJ/AmIMEUgHE4
KJWy3hTHSskIO25j9t8tnv/EBObeX0l4Q3O3aDpJh56i5vuyXQIDAQABo4IEDzCC
BAswHQYDVR0OBBYEFO257PMcEk1oendzuvAhdo3nLfJvMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81
MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUxZGNkY2JhLTM3NjYtNDUwOS1h
NDc5LWJiZjAyNTE0NzE5Zi81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUx
NDcxOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBALPWswwDgQCAAIwCAMGBCYC+9cAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AH0+jRzvAwuoVDxk0jTiCaPKPA0it7D68Vz5ilTi4l+4iaIByZ86cASYIFRamfOs
LHrnFg8stKLRbNN6ucLY92FPs1NhAMguot/uLr8L0IQTVk6WtnWo8CzYYjYckunW
MyvAYwDGloG7p2/syeA+/iGU1cGcWuogouPA8veDGl329ja1ZrVq+SZy5TaPrBdg
egmLTEi9mOPgnUACEeCuUK0BjYGWN6bqwdcmAYD6VMIYKYwvbneKO/o9cKlLgBVY
v03yAzqf1+Y1A74Rs6eJCfDlCWsBrY4DGAgUbduxB7suMv1q5Jke+zP4Upp0Mayp
t3zQRSmUuDV16ExUvlWtEJc=
-----END CERTIFICATE-----
Generated at Sat Feb 4 02:16:16 2023 by rpki-client.