Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer
File:                     ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer (download)
Hash identifier:          6Z13CGtcXZtE4R8yCnbIbG93TV/maBCvZaiFx5ZLAK4=
Subject key identifier:   0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328583D8A1D923E1BF6E034D9264A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Tue 09 Sep 2031 21:04:10 +0000
Subordinate resources:
    1: AS: 399668
    2: IP: 172.98.26.0/23
    3: IP: 198.206.157.0/24
    4: IP: 2620:98:a000::/44

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:1d:92:3e:1b:f6:e0:34:d9:26:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep  9 21:04:10 2021 GMT
            Not After : Sep  9 21:04:10 2031 GMT
        Subject: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:3e:c5:27:00:2d:ab:67:fc:2e:aa:4a:8e:
                    c8:38:30:7f:5c:9b:71:98:00:20:cf:75:de:ec:5b:
                    db:d3:db:5c:c3:2d:d1:47:44:87:b7:c6:9c:0f:1e:
                    f5:4c:f6:e7:23:fe:78:ba:68:92:54:bf:2a:ba:97:
                    63:4a:48:2a:66:44:61:85:c5:8b:5e:44:df:0c:e0:
                    4e:32:07:3c:3e:ab:f9:b2:67:24:7c:01:a5:05:7b:
                    48:2e:a3:cc:0f:1d:81:cd:7d:a5:d1:cb:93:e4:11:
                    04:a0:55:ff:32:01:be:96:ff:66:ca:2d:f7:53:8f:
                    fa:b7:2b:f6:99:2b:22:50:da:5f:7c:b6:93:8a:5c:
                    64:3c:21:09:0c:91:5a:f0:2a:91:2f:5c:af:78:43:
                    a2:a5:97:f2:46:a8:83:f3:d9:59:f8:39:8d:a0:10:
                    ea:fd:2e:d1:d2:6e:53:e2:77:57:62:30:96:1e:6c:
                    a2:9d:3d:4c:75:94:26:a7:22:32:e3:3f:08:b1:f6:
                    f3:ed:d4:25:75:33:ca:ae:c1:60:69:e4:2c:87:23:
                    d0:ba:73:fe:9e:15:2f:81:db:44:86:32:1e:7d:c4:
                    ca:97:78:8e:df:41:2c:ba:eb:2b:27:e9:5f:58:fe:
                    10:70:77:36:7f:fc:be:02:3a:11:a9:3c:70:ed:f9:
                    4e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.26.0/23
                  198.206.157.0/24
                IPv6:
                  2620:98:a000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399668

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:09:86:f3:38:ef:e2:8d:1c:7c:11:e6:11:6d:8a:f2:73:9d:
         59:22:51:04:a3:d5:29:eb:e2:8e:36:c2:b0:d2:a9:0b:10:48:
         62:29:19:68:c6:47:5b:bc:a0:f1:6a:32:9d:a0:dc:5c:11:ca:
         79:b4:5f:fc:c6:84:c0:59:df:59:5b:d3:b0:e0:e4:15:93:64:
         7e:ae:5c:7d:53:31:aa:74:24:a4:0f:41:d5:2f:8f:86:81:e7:
         54:cb:97:a5:53:70:ae:66:0f:64:b4:e3:bc:e3:b3:eb:14:e2:
         90:2a:25:e2:a0:23:62:27:62:8c:2b:dd:57:24:cb:f7:18:2f:
         c5:92:6b:cf:97:18:0b:fc:22:fd:f7:08:36:fb:00:63:c5:91:
         66:b0:a1:68:a6:f3:57:8f:14:9c:fc:a0:05:aa:95:4b:ba:f8:
         05:42:92:6d:39:21:3a:af:87:cc:1e:d0:a8:51:90:29:ac:a6:
         9d:c9:bf:ef:3f:4c:8b:5b:30:1c:db:65:cd:8d:d5:df:f2:ac:
         92:5c:70:70:ed:69:78:bf:b1:2b:ff:a4:7e:fb:70:0a:22:47:
         5f:1f:a7:b2:dc:71:18:16:63:36:ab:9c:af:03:04:90:3d:48:
         5d:75:a5:23:b0:2c:ea:a6:ab:47:23:bc:cb:3a:5a:ee:13:93:
         7c:de:a4:35
-----BEGIN CERTIFICATE-----
MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWD2KHZI+G/bgNNkmSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIxMDkwOTIxMDQxMFoXDTMxMDkwOTIxMDQxMFowLzEtMCsGA1UEAxMk
YWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBiYzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH0+xScALatn/C6qSo7IODB/XJtxmAAgz3Xe
7Fvb09tcwy3RR0SHt8acDx71TPbnI/54umiSVL8qupdjSkgqZkRhhcWLXkTfDOBO
Mgc8Pqv5smckfAGlBXtILqPMDx2BzX2l0cuT5BEEoFX/MgG+lv9myi33U4/6tyv2
mSsiUNpffLaTilxkPCEJDJFa8CqRL1yveEOipZfyRqiD89lZ+DmNoBDq/S7R0m5T
4ndXYjCWHmyinT1MdZQmpyIy4z8Isfbz7dQldTPKrsFgaeQshyPQunP+nhUvgdtE
hjIefcTKl3iO30EsuusrJ+lfWP4QcHc2f/y+AjoRqTxw7flOIwIDAQABo4IEMjCC
BC4wHQYDVR0OBBYEFA5e9j6n/0LAhFwY7ZYZt22K2Ya+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h
Yjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FiODU2ODZiLWJhYzMtNDBkMi1i
NDZlLWYyNTkzZmIwYmM2Yi9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2Zi
MGJjNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBAGsYhoDBADGzp0wDwQCAAIwCQMHBCYgAJigADAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGGTQwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYAmG8zjv4o0cfBHm
EW2K8nOdWSJRBKPVKevijjbCsNKpCxBIYikZaMZHW7yg8WoynaDcXBHKebRf/MaE
wFnfWVvTsODkFZNkfq5cfVMxqnQkpA9B1S+PhoHnVMuXpVNwrmYPZLTjvOOz6xTi
kCol4qAjYidijCvdVyTL9xgvxZJrz5cYC/wi/fcINvsAY8WRZrChaKbzV48UnPyg
BaqVS7r4BUKSbTkhOq+HzB7QqFGQKaymncm/7z9Mi1swHNtlzY3V3/KsklxwcO1p
eL+xK/+kfvtwCiJHXx+nstxxGBZjNqucrwMEkD1IXXWlI7As6qarRyO8yzpa7hOT
fN6kNQ==
-----END CERTIFICATE-----
Generated at Sat Feb 4 00:25:44 2023 by rpki-client.