Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
File:                     c0311fc7-1b9e-4472-8780-7822d83e32fc.cer (raw, json)
Hash identifier:          GXrbETnVgm6HG5cUz7udS1yK4vERS7M7gCrvapOwBsg=
Subject key identifier:   24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843DE96AD123CB2A44A6C691F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Nov 2023 01:45:15 +0000
Certificate not after:    Sun 15 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 400519
                          IP: 23.133.216.0/24
                          IP: 147.185.221.0/24
                          IP: 209.25.140.0/22
                          IP: 2602:fbaf::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:de:96:ad:12:3c:b2:a4:4a:6c:69:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 13 01:45:15 2023 GMT
            Not After : Feb 15 01:45:15 2026 GMT
        Subject: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:6f:44:08:d2:d3:0a:95:f8:16:7b:dd:63:
                    6e:1b:2c:17:3e:f7:5e:2b:09:7f:4b:ba:5e:42:ad:
                    52:de:15:5b:6b:2d:51:3a:eb:9f:26:d9:88:9b:e3:
                    8e:28:89:8d:20:98:1f:1d:13:0e:9f:69:90:44:79:
                    05:ac:90:2b:40:31:a6:c1:16:83:d8:2e:30:a1:08:
                    c4:29:bd:ee:14:21:58:4b:04:81:79:f1:64:7d:cc:
                    21:f5:14:fe:7a:4b:ca:6b:6f:2e:2f:ca:17:e7:ef:
                    a9:c0:2f:9d:ac:30:86:19:c3:a2:66:dd:8a:b7:5d:
                    40:23:03:78:54:06:44:ac:0f:7f:de:2e:28:38:2d:
                    f6:df:49:d3:17:69:18:7c:1a:ca:95:bb:96:85:98:
                    ae:34:5f:27:d9:48:c8:cb:1a:8f:99:82:ec:c0:c8:
                    20:b0:67:6b:93:27:88:e4:a1:3f:37:12:f7:f4:88:
                    e5:01:45:6f:f4:68:c2:67:f0:dc:c9:a5:bf:35:50:
                    e6:61:40:18:50:ee:cf:27:64:5d:2b:51:b7:04:47:
                    1d:cd:f5:80:f3:05:91:9c:82:2b:cc:e4:9c:34:f2:
                    59:51:e3:fd:e1:98:7d:bf:80:bf:dd:f3:84:fa:25:
                    f1:17:cd:a9:9f:1d:30:f9:6d:2e:3b:26:da:96:ea:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.216.0/24
                  147.185.221.0/24
                  209.25.140.0/22
                IPv6:
                  2602:fbaf::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400519

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:58:40:73:12:39:53:23:80:78:58:f2:c2:f1:52:ea:1f:
         11:76:16:1d:21:57:80:e7:48:13:70:2c:f9:c7:92:9c:35:38:
         29:ff:ff:cd:09:7f:11:5e:ad:8a:08:0f:2d:a2:02:5a:fd:b6:
         99:cd:41:eb:50:31:6a:12:fc:8c:27:85:d1:5b:0a:ea:f2:3c:
         88:f9:50:2a:77:7a:06:ff:e1:f1:64:43:0f:f9:35:07:79:ea:
         a4:7b:fa:6d:d0:f1:3d:d3:b2:b0:bd:42:e1:e7:3b:16:76:e4:
         67:d3:3c:af:94:9c:d1:3d:c4:bb:4c:4f:7d:cf:e0:5a:05:b3:
         94:fa:4f:7e:55:e1:c8:c6:9e:1f:b3:28:aa:26:ab:b5:ee:60:
         2d:01:38:4f:54:61:91:31:1d:57:40:a6:2f:4d:d3:99:77:9e:
         f6:36:13:53:fb:57:ae:dc:2b:20:44:82:5f:96:a8:d4:50:21:
         4e:36:fd:42:3c:b2:05:e5:c7:82:3d:2a:ad:e2:f9:c0:9f:c3:
         5b:f2:71:da:8c:00:51:b1:9b:c4:22:54:4c:19:4a:ba:d2:8d:
         78:93:01:ba:d8:8c:4a:3a:9e:c7:e7:94:44:3e:be:a7:8a:c4:
         52:e3:f0:45:79:27:0d:ab:00:c8:73:9d:77:a6:8a:d7:0d:fb:
         4e:ad:7a:ed
-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEPelq0SPLKkSmxpHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMTExMzAxNDUxNVoXDTI2MDIxNTAxNDUxNVowLzEtMCsGA1UEAxMk
YzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2UzMmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvJvRAjS0wqV+BZ73WNuGywXPvdeKwl/S7pe
Qq1S3hVbay1ROuufJtmIm+OOKImNIJgfHRMOn2mQRHkFrJArQDGmwRaD2C4woQjE
Kb3uFCFYSwSBefFkfcwh9RT+ekvKa28uL8oX5++pwC+drDCGGcOiZt2Kt11AIwN4
VAZErA9/3i4oOC3230nTF2kYfBrKlbuWhZiuNF8n2UjIyxqPmYLswMggsGdrkyeI
5KE/NxL39IjlAUVv9GjCZ/DcyaW/NVDmYUAYUO7PJ2RdK1G3BEcdzfWA8wWRnIIr
zOScNPJZUeP94Zh9v4C/3fOE+iXxF82pnx0w+W0uOybalurV0QIDAQABo4IENzCC
BDMwHQYDVR0OBBYEFCRvgvSteIWcbGw/e/nx+hcS/A4wMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j
MDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MwMzExZmM3LTFiOWUtNDQ3Mi04
NzgwLTc4MjJkODNlMzJmYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgz
ZTMyZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXhdgDBACTud0DBALRGYwwDgQCAAIwCAMGBCYC
+68AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYchzBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCOUFhAcxI5
UyOAeFjywvFS6h8RdhYdIVeA50gTcCz5x5KcNTgp///NCX8RXq2KCA8togJa/baZ
zUHrUDFqEvyMJ4XRWwrq8jyI+VAqd3oG/+HxZEMP+TUHeeqke/pt0PE907KwvULh
5zsWduRn0zyvlJzRPcS7TE99z+BaBbOU+k9+VeHIxp4fsyiqJqu17mAtAThPVGGR
MR1XQKYvTdOZd572NhNT+1eu3CsgRIJflqjUUCFONv1CPLIF5ceCPSqt4vnAn8Nb
8nHajABRsZvEIlRMGUq60o14kwG62IxKOp7H55REPr6nisRS4/BFeScNqwDIc513
porXDftOrXrt
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:51:45 2024 by rpki-client on console-fra.rpki-client.org