Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
File:                     d370c49e-f70c-46fb-a30f-df2475852cc2.cer (download)
Hash identifier:          vAMd93N7nDjxvMOLH1xMnAEYsWAQK1/yj6NNGNEjztc=
Subject key identifier:   A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285840B49FED2BD08DCEB36ADB5440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Mon 11 Aug 2031 20:57:14 +0000
Subordinate resources:
    1: AS: 1239 -- 1240
    2: AS: 1799 -- 1808
    3: AS: 3643
    4: AS: 4999
    5: AS: 6174 -- 6177
    6: AS: 8106 -- 8110
    7: IP: 144.223.0.0 -- 144.224.255.255
    8: IP: 144.226.0.0/16
    9: IP: 144.228.0.0 -- 144.230.255.255
   10: IP: 144.232.0.0/16
   11: IP: 192.157.38.0/24
   12: IP: 198.67.0.0 -- 198.70.255.255
   13: IP: 198.232.8.0/21
   14: IP: 199.0.0.0/14
   15: IP: 199.11.0.0 -- 199.14.255.255
   16: IP: 199.160.0.0/14
   17: IP: 204.94.0.0 -- 204.97.255.255
   18: IP: 204.117.0.0 -- 204.120.255.255
   19: IP: 204.180.0.0/14
   20: IP: 204.204.0.0/14
   21: IP: 204.212.0.0/14
   22: IP: 204.248.0.0/14
   23: IP: 205.160.0.0/14
   24: IP: 205.240.0.0/13
   25: IP: 206.61.0.0/16
   26: IP: 206.104.0.0/14
   27: IP: 206.158.0.0 -- 206.160.255.255
   28: IP: 206.228.0.0/14
   29: IP: 207.12.0.0/14
   30: IP: 207.40.0.0/14
   31: IP: 208.0.0.0 -- 208.35.255.255
   32: IP: 209.120.0.0/17

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:b4:9f:ed:2b:d0:8d:ce:b3:6a:db:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 26 22:39:07 2023 GMT
            Not After : Aug 11 20:57:14 2031 GMT
        Subject: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:7a:bb:23:9f:20:88:6d:5b:c8:f2:70:4e:
                    1f:7d:23:dc:0d:4f:71:f2:64:85:16:e3:0a:68:fd:
                    d1:37:da:bf:9f:66:0a:ba:0f:5e:47:21:46:c9:2f:
                    5f:67:88:e4:3e:c1:7c:34:85:ff:27:71:a2:d6:d0:
                    5a:c3:8a:b2:8b:24:2b:02:d9:d7:98:41:6e:57:8b:
                    ae:72:76:3c:83:41:53:50:7e:1e:da:70:f1:14:c1:
                    3f:91:fe:5a:9b:d8:da:81:f4:08:04:fc:11:d8:eb:
                    ed:f3:c0:e9:84:9c:de:71:f9:64:17:ff:8e:9a:b1:
                    ca:b1:07:cd:e3:e6:01:34:78:b3:2d:38:19:f3:74:
                    8a:0b:c5:ce:a5:6e:e3:f0:30:f7:98:1c:f4:64:35:
                    9a:d5:91:2d:01:9f:0b:7d:30:4d:3e:78:7e:92:87:
                    58:11:09:f4:38:03:8d:29:ba:e6:04:ab:34:d8:46:
                    6f:99:5b:29:a7:7d:3b:d3:13:71:b3:78:25:54:11:
                    3a:fa:12:18:66:77:98:cd:4f:8a:e5:06:0c:ac:85:
                    85:e3:54:75:01:f5:2c:c1:b1:6d:31:29:0d:e1:68:
                    00:ea:26:8b:ce:6f:93:a4:8a:af:e4:6a:d1:19:4d:
                    b4:f6:41:ab:0f:c3:8f:eb:42:70:7c:13:90:2a:ef:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier: 
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.223.0.0-144.224.255.255
                  144.226.0.0/16
                  144.228.0.0-144.230.255.255
                  144.232.0.0/16
                  192.157.38.0/24
                  198.67.0.0-198.70.255.255
                  198.232.8.0/21
                  199.0.0.0/14
                  199.11.0.0-199.14.255.255
                  199.160.0.0/14
                  204.94.0.0-204.97.255.255
                  204.117.0.0-204.120.255.255
                  204.180.0.0/14
                  204.204.0.0/14
                  204.212.0.0/14
                  204.248.0.0/14
                  205.160.0.0/14
                  205.240.0.0/13
                  206.61.0.0/16
                  206.104.0.0/14
                  206.158.0.0-206.160.255.255
                  206.228.0.0/14
                  207.12.0.0/14
                  207.40.0.0/14
                  208.0.0.0-208.35.255.255
                  209.120.0.0/17

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1239-1240
                  1799-1808
                  3643
                  4999
                  6174-6177
                  8106-8110

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:57:8b:59:4f:73:42:fc:20:2d:7c:e5:d2:c7:6f:8c:f9:
         6c:8f:e0:4c:a9:20:5e:d8:e3:4b:e9:38:00:1e:9b:b1:6a:fa:
         6b:f2:e7:7f:de:f9:2e:68:90:82:ec:c9:34:2b:2e:c2:67:96:
         70:fb:18:b5:66:03:91:95:11:de:f2:0e:7c:76:8c:99:38:f1:
         f2:cd:1b:7c:0e:75:34:34:05:ad:b6:54:01:71:76:b1:80:63:
         6a:03:37:a4:6d:c9:87:7d:72:4d:2b:a6:ad:f0:65:65:72:ed:
         36:98:7c:78:d4:72:bc:ac:63:3e:7a:8e:1d:92:f8:d0:59:98:
         13:e0:e2:7d:6c:89:d2:e4:7b:6c:2d:6e:7a:01:45:14:3d:7e:
         06:5b:f0:e4:02:d5:9c:fa:52:b8:3a:8c:5d:55:63:5c:e5:75:
         84:63:ab:57:4f:f6:78:27:99:a5:93:3d:2a:c7:77:d9:6b:a9:
         c0:04:d9:7b:b5:56:b5:d0:89:cd:76:28:e7:93:f1:85:f8:f7:
         ef:1a:ae:9b:ed:00:12:18:fe:9d:e7:8e:38:25:85:5d:85:f6:
         c6:7b:64:7c:ad:1f:b6:78:c4:96:24:fe:77:8d:00:38:0e:cb:
         2a:f9:b7:8c:fd:c7:c8:00:47:2a:4a:fd:e0:13:3d:c9:01:fb:
         3c:cc:15:50
-----BEGIN CERTIFICATE-----
MIIH7zCCBtegAwIBAgIUAQ0Mn0MoWEC0n+0r0I3Os2rbVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDEyNjIyMzkwN1oXDTMxMDgxMTIwNTcxNFowLzEtMCsGA1UEAxMk
ZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUyY2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnN6uyOfIIhtW8jycE4ffSPcDU9x8mSFFuMK
aP3RN9q/n2YKug9eRyFGyS9fZ4jkPsF8NIX/J3Gi1tBaw4qyiyQrAtnXmEFuV4uu
cnY8g0FTUH4e2nDxFME/kf5am9jagfQIBPwR2Ovt88DphJzecflkF/+OmrHKsQfN
4+YBNHizLTgZ83SKC8XOpW7j8DD3mBz0ZDWa1ZEtAZ8LfTBNPnh+kodYEQn0OAON
KbrmBKs02EZvmVspp3070xNxs3glVBE6+hIYZneYzU+K5QYMrIWF41R1AfUswbFt
MSkN4WgA6iaLzm+TpIqv5GrRGU209kGrD8OP60JwfBOQKu9vsQIDAQABo4IFATCC
BP0wHQYDVR0OBBYEFKKGtRBBYg2Oy8/NsfMeqqolXGeRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
MzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QzNzBjNDllLWY3MGMtNDZmYi1h
MzBmLWRmMjQ3NTg1MmNjMi9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4
NTJjYzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgdkGCCsGAQUF
BwEHAQH/BIHJMIHGMIHDBAIAATCBvDAKAwMAkN8DAwCQ4AMDAJDiMAoDAwKQ5AMD
AJDmAwMAkOgDBADAnSYwCgMDAMZDAwMAxkYDBAPG6AgDAwLHADAKAwMAxwsDAwDH
DgMDAsegMAoDAwHMXgMDAcxgMAoDAwDMdQMDAMx4AwMCzLQDAwLMzAMDAszUAwMC
zPgDAwLNoAMDA83wAwMAzj0DAwLOaDAKAwMBzp4DAwDOoAMDAs7kAwMCzwwDAwLP
KDAJAwIE0AMDAtAgAwQH0XgAMEUGCCsGAQUFBwEIAQH/BDYwNKAyMDAwCAICBNcC
AgTYMAgCAgcHAgIHEAICDjsCAhOHMAgCAhgeAgIYITAIAgIfqgICH64wVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEANnpXi1lPc0L8IC185dLHb4z5bI/gTKkgXtjjS+k4AB6bsWr6a/Lnf975LmiQ
guzJNCsuwmeWcPsYtWYDkZUR3vIOfHaMmTjx8s0bfA51NDQFrbZUAXF2sYBjagM3
pG3Jh31yTSumrfBlZXLtNph8eNRyvKxjPnqOHZL40FmYE+DifWyJ0uR7bC1uegFF
FD1+Blvw5ALVnPpSuDqMXVVjXOV1hGOrV0/2eCeZpZM9Ksd32WupwATZe7VWtdCJ
zXYo55Pxhfj37xqum+0AEhj+neeOOCWFXYX2xntkfK0ftnjEliT+d40AOA7LKvm3
jP3HyABHKkr94BM9yQH7PMwVUA==
-----END CERTIFICATE-----
Generated at Mon Jan 30 11:41:14 2023 by rpki-client.