Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer
File:                     67b004e8-3b23-4f9d-9325-beac85825fe1.cer (raw, json)
Hash identifier:          Gpy8gaqL4p04n9Xktgn0+tsJ0EimtPqLoysiMm9/Bm4=
Subject key identifier:   40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858431577BF0E8E2325031D110B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Sep 2023 00:45:26 +0000
Certificate not after:    Fri 05 Dec 2025 01:45:26 +0000
Subordinate resources:    AS: 22224
                          IP: 23.187.128.0/24
                          IP: 207.174.168.0/22
                          IP: 2602:fed6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:15:77:bf:0e:8e:23:25:03:1d:11:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep  2 00:45:26 2023 GMT
            Not After : Dec  5 01:45:26 2025 GMT
        Subject: CN=67b004e8-3b23-4f9d-9325-beac85825fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:e5:e7:ea:93:bc:f8:75:5d:a2:4c:b5:bc:
                    b9:af:a4:01:a9:79:60:d6:1d:40:43:60:91:36:ed:
                    96:6a:75:e5:fe:5b:04:6d:e0:a9:ce:31:6e:f6:3c:
                    d7:43:e9:c9:26:20:49:1b:6b:43:fb:08:24:d0:0c:
                    76:3b:d6:05:e1:f3:46:ce:9c:f1:2b:dc:72:80:6b:
                    41:25:49:9f:34:77:a8:64:2e:d1:e6:ac:a1:59:3f:
                    19:77:a0:43:34:5e:a2:69:c8:e7:5c:05:b9:21:20:
                    d0:0e:0b:b5:53:d1:a4:cf:60:a6:c6:54:a0:f6:57:
                    40:e9:05:a6:b1:fe:2d:40:dd:53:e9:c9:bd:ac:d2:
                    66:97:43:ce:73:54:3e:ef:29:43:ab:99:ed:58:e0:
                    4d:24:82:31:28:5c:97:ec:84:9e:48:81:91:86:06:
                    83:86:0d:6e:a6:24:d3:0b:d7:eb:1b:1b:e6:f1:44:
                    f3:fb:d5:c2:38:c4:ee:95:3c:4b:64:f2:a3:06:c4:
                    88:6d:1a:94:bb:67:32:02:82:82:26:28:3e:dd:dd:
                    93:ca:b2:01:53:ae:b5:88:a5:3d:cc:e8:dd:b8:3a:
                    79:f9:1c:f4:c6:1e:2b:e6:2b:2d:03:9a:76:1b:5b:
                    37:50:cb:91:49:1c:9a:bb:4d:4b:02:e0:99:72:d3:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.128.0/24
                  207.174.168.0/22
                IPv6:
                  2602:fed6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22224

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:48:7f:57:74:6a:58:75:c2:c0:70:85:fe:d9:31:2f:00:
         a9:5a:cb:10:e4:ff:bf:51:c7:b4:59:ea:74:b5:fc:91:4a:cb:
         9d:79:83:44:01:95:8b:f3:55:e1:64:1e:fc:73:02:b3:04:b4:
         1f:4f:42:e3:77:cc:15:a2:8a:cc:fa:88:34:2e:ef:3b:43:20:
         24:f2:3c:7f:6b:6d:6c:a8:6e:73:fa:c5:4d:5c:fc:b2:5a:9e:
         54:3a:f2:dd:68:69:ca:0d:dd:e3:6d:00:e8:52:dc:dc:2f:28:
         e5:e7:54:d6:bc:08:6d:88:70:88:42:23:ab:06:67:5c:82:74:
         05:a8:5b:97:7c:50:9c:fd:fa:fe:55:c2:00:bd:13:c3:d5:b1:
         55:69:ac:51:57:de:ba:16:9d:ef:eb:8b:f8:ed:28:26:ca:32:
         b7:8d:a5:cd:ce:4a:d7:bf:a1:d0:1e:4e:71:02:c2:4d:8b:d4:
         58:aa:93:f1:46:da:74:ad:d4:6f:4e:ce:b3:39:a4:91:a0:7e:
         11:c5:26:d8:57:da:5d:6f:2d:05:29:f5:c2:60:03:16:0b:f1:
         b3:55:c4:dc:30:00:0a:4e:12:6c:9d:73:f2:4b:10:8b:cf:f7:
         9d:83:81:b4:5e:ac:2c:c3:9e:50:de:4f:73:dd:dc:16:10:c0:
         a5:06:91:c0
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEMVd78OjiMlAx0RCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDkwMjAwNDUyNloXDTI1MTIwNTAxNDUyNlowLzEtMCsGA1UEAxMk
NjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtbl5+qTvPh1XaJMtby5r6QBqXlg1h1AQ2CR
Nu2WanXl/lsEbeCpzjFu9jzXQ+nJJiBJG2tD+wgk0Ax2O9YF4fNGzpzxK9xygGtB
JUmfNHeoZC7R5qyhWT8Zd6BDNF6iacjnXAW5ISDQDgu1U9Gkz2CmxlSg9ldA6QWm
sf4tQN1T6cm9rNJml0POc1Q+7ylDq5ntWOBNJIIxKFyX7ISeSIGRhgaDhg1upiTT
C9frGxvm8UTz+9XCOMTulTxLZPKjBsSIbRqUu2cyAoKCJig+3d2TyrIBU661iKU9
zOjduDp5+Rz0xh4r5istA5p2G1s3UMuRSRyau01LAuCZctPJjwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFEBckPrArXstfrbF9LNVkPJlHP6uMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82
N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY3YjAwNGU4LTNiMjMtNGY5ZC05
MzI1LWJlYWM4NTgyNWZlMS82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4
MjVmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBAAXu4ADBALPrqgwDgQCAAIwCAMGBCYC/tYAMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAlbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEWeSH9XdGpYdcLAcIX+
2TEvAKlayxDk/79Rx7RZ6nS1/JFKy515g0QBlYvzVeFkHvxzArMEtB9PQuN3zBWi
isz6iDQu7ztDICTyPH9rbWyobnP6xU1c/LJanlQ68t1oacoN3eNtAOhS3NwvKOXn
VNa8CG2IcIhCI6sGZ1yCdAWoW5d8UJz9+v5VwgC9E8PVsVVprFFX3roWne/ri/jt
KCbKMreNpc3OSte/odAeTnECwk2L1Fiqk/FG2nSt1G9OzrM5pJGgfhHFJthX2l1v
LQUp9cJgAxYL8bNVxNwwAApOEmydc/JLEIvP952DgbRerCzDnlDeT3Pd3BYQwKUG
kcA=
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:18:41 2024 by rpki-client on console-ams.rpki-client.org