Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
File:                     c22717c6-604d-4453-a20f-3430af557f6e.cer (raw, json)
Hash identifier:          275KsGiolu9QrK3v5IaAY3sW4kg8EPizRHgUeoFce8s=
Subject key identifier:   EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584582CC03D73034A08A784166E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Apr 2024 14:12:14 +0000
Certificate not after:    Mon 13 Jul 2026 20:12:27 +0000
Subordinate resources:    AS: 400977
                          IP: 72.42.251.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:cc:03:d7:30:34:a0:8a:78:41:66:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 11 14:12:14 2024 GMT
            Not After : Jul 13 20:12:27 2026 GMT
        Subject: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:3e:1a:06:70:ba:e0:02:33:77:23:c8:49:
                    71:77:98:94:e6:e5:ef:33:0e:25:18:b7:f9:a3:e7:
                    3d:3b:cf:c7:72:ef:e2:4e:b4:8d:e3:8c:44:eb:0d:
                    63:6c:16:32:15:fb:6b:88:6c:08:74:39:e8:f4:a3:
                    39:16:cc:21:e4:64:d7:1d:8c:39:fb:4d:86:1f:2c:
                    7d:74:f7:ef:dd:c1:11:95:6e:ad:f6:1b:d0:67:db:
                    63:7f:48:a0:e9:27:b5:48:34:b7:45:49:9f:95:18:
                    f9:4d:f7:9d:51:64:71:3e:3c:13:2e:34:51:1f:5d:
                    06:22:88:81:34:c7:63:94:e1:40:b1:49:e3:22:1b:
                    2d:2e:a3:f4:54:4c:cd:6a:28:a4:b4:04:00:02:d8:
                    65:b8:fa:e0:6f:ce:28:d0:63:13:2b:2b:45:40:e6:
                    cf:20:b7:cf:7e:d5:ca:10:87:6d:18:30:39:f4:c9:
                    9a:2a:a8:5b:d5:fe:44:27:9b:64:7c:34:30:f5:14:
                    13:ef:01:de:ba:e6:5e:be:af:ad:61:43:37:bc:f8:
                    1d:1a:84:7a:50:9c:91:4e:e6:e3:64:c7:76:f2:34:
                    8c:0b:56:99:f0:c1:e2:b0:c7:55:9c:69:e6:f1:40:
                    4f:18:32:98:32:54:c6:e1:04:ef:4f:f7:8f:80:bd:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400977

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:58:cb:23:00:4b:3b:61:e3:72:72:7f:e9:0b:bb:38:c5:
         a0:74:8f:1c:05:f8:f8:97:4a:d1:9b:72:79:52:19:4c:bb:b3:
         75:32:c4:ee:46:ab:97:e1:54:58:d9:14:14:c6:85:bd:df:da:
         da:6b:af:a6:b9:06:49:2b:fd:b3:8a:d9:2d:1f:50:dc:92:24:
         8b:dc:8d:57:62:09:9d:2b:f7:ba:71:e7:3f:cb:ef:7c:81:ea:
         07:82:a1:c2:40:99:58:04:18:05:5b:7e:f0:5d:73:16:81:7a:
         6f:ab:a5:7f:b3:a3:4c:9a:df:07:91:fc:50:3d:0e:08:f2:85:
         b2:ec:de:90:3f:c0:05:0b:10:20:15:bc:21:33:ed:6d:c1:cf:
         9f:c7:94:19:77:94:6e:d7:33:bd:66:ab:8c:a1:c4:0f:ff:05:
         33:5a:37:c4:52:37:c7:14:25:6c:81:fb:7b:54:db:85:08:80:
         51:09:41:8f:b3:31:08:5b:18:b4:b4:af:9c:2a:3d:7b:4d:12:
         20:f5:1d:c8:83:cf:7c:40:a0:57:60:58:22:c4:14:b4:94:f5:
         42:47:a7:75:73:8e:a6:92:83:a5:e3:1b:0c:b1:31:ed:82:d2:
         16:f4:2e:1f:0c:c7:81:b6:65:ed:81:fb:d4:c9:98:31:03:11:
         e9:df:92:4d
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEWCzAPXMDSginhBZuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDQxMTE0MTIxNFoXDTI2MDcxMzIwMTIyN1owLzEtMCsGA1UEAxMk
YzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3ZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56w+GgZwuuACM3cjyElxd5iU5uXvMw4lGLf5
o+c9O8/Hcu/iTrSN44xE6w1jbBYyFftriGwIdDno9KM5Fswh5GTXHYw5+02GHyx9
dPfv3cERlW6t9hvQZ9tjf0ig6Se1SDS3RUmflRj5TfedUWRxPjwTLjRRH10GIoiB
NMdjlOFAsUnjIhstLqP0VEzNaiiktAQAAthluPrgb84o0GMTKytFQObPILfPftXK
EIdtGDA59MmaKqhb1f5EJ5tkfDQw9RQT7wHeuuZevq+tYUM3vPgdGoR6UJyRTubj
ZMd28jSMC1aZ8MHisMdVnGnm8UBPGDKYMlTG4QTvT/ePgL0UswIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFO6jK880U6s+8aARRmR3i95EllZhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j
MjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MyMjcxN2M2LTYwNGQtNDQ1My1h
MjBmLTM0MzBhZjU1N2Y2ZS9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1
NTdmNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABIKvswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
Bh5RMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIJcWMsjAEs7YeNycn/pC7s4xaB0jxwF+PiXStGbcnlSGUy7
s3UyxO5Gq5fhVFjZFBTGhb3f2tprr6a5Bkkr/bOK2S0fUNySJIvcjVdiCZ0r97px
5z/L73yB6geCocJAmVgEGAVbfvBdcxaBem+rpX+zo0ya3weR/FA9DgjyhbLs3pA/
wAULECAVvCEz7W3Bz5/HlBl3lG7XM71mq4yhxA//BTNaN8RSN8cUJWyB+3tU24UI
gFEJQY+zMQhbGLS0r5wqPXtNEiD1HciDz3xAoFdgWCLEFLSU9UJHp3VzjqaSg6Xj
GwyxMe2C0hb0Lh8Mx4G2Ze2B+9TJmDEDEenfkk0=
-----END CERTIFICATE-----