Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer
File:                     eaf7df35-c67f-440d-9799-461e7a809ef3.cer (raw, json)
Hash identifier:          SUUZ1JgzGG+Sd9lo5LKDsBn7Rqc5IJ+0YbnwMqePc/4=
Subject key identifier:   D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584336F7EAA39A55A24FCBCFAE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 00:45:22 +0000
Certificate not after:    Wed 17 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 19633
                          AS: 54630
                          AS: 62856
                          IP: 64.207.216.0/22
                          IP: 162.248.184.0/22
                          IP: 192.103.120.0/22
                          IP: 209.112.104.0/22
                          IP: 2620:130:f000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:f7:ea:a3:9a:55:a2:4f:cb:cf:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 14 00:45:22 2023 GMT
            Not After : Dec 17 01:45:22 2025 GMT
        Subject: CN=eaf7df35-c67f-440d-9799-461e7a809ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:92:70:a9:51:ce:0c:1f:87:20:a2:eb:41:0b:
                    eb:64:2c:37:87:d6:49:f2:7d:71:3f:78:a7:e4:a1:
                    32:3a:52:6e:80:57:8d:6a:a8:4d:ab:8c:4a:0a:a5:
                    42:52:a7:1b:d9:40:ef:48:d7:d2:b6:5f:99:b1:82:
                    f9:1f:14:ab:3a:fd:87:04:23:34:a5:e1:97:a3:aa:
                    c6:d1:e3:7b:1b:54:d1:bc:3c:e7:40:c0:ec:76:72:
                    92:38:a2:30:28:72:de:0e:31:1e:d1:77:86:22:84:
                    40:07:a9:f6:54:72:03:42:d4:a6:49:fc:92:e1:2e:
                    c5:0f:fc:59:b2:f2:d3:31:a0:3e:11:08:e7:06:6f:
                    0a:da:22:89:98:f1:e7:46:c1:15:f8:f7:b6:ca:50:
                    69:a2:46:3a:1d:7f:09:a1:d9:18:89:f4:fe:b3:76:
                    b4:96:52:18:f0:6b:0e:55:41:ab:5a:fd:e4:3f:27:
                    c2:ca:10:f2:38:2e:c1:8f:91:2f:9c:4f:35:69:c2:
                    91:c3:20:05:04:a5:df:5d:35:40:af:f4:ec:4f:ca:
                    d4:31:fa:a6:3f:cf:a4:2b:a0:b3:b6:ff:d2:68:fc:
                    64:10:ec:06:2b:94:fc:f6:85:4f:0b:72:1c:5c:f3:
                    38:7a:9e:5e:4d:5a:79:c9:a5:b0:10:28:c6:fb:28:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.207.216.0/22
                  162.248.184.0/22
                  192.103.120.0/22
                  209.112.104.0/22
                IPv6:
                  2620:130:f000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19633
                  54630
                  62856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:fe:d9:62:64:d6:dc:ee:ef:cb:d7:1d:df:30:d5:36:2a:
         7d:59:f6:d0:a6:9b:07:4e:32:f7:16:bd:63:e7:55:a3:36:06:
         b5:91:bf:df:66:62:a6:4a:f6:b1:97:3b:1e:10:d5:7e:fe:63:
         61:26:2b:27:10:b5:5d:7f:c9:31:8c:cc:dc:b5:c7:fb:22:3e:
         e3:13:70:f9:32:f2:4c:05:4f:3b:ea:06:6b:fe:f4:28:6f:68:
         b2:7d:f6:3c:bd:cb:e5:a7:d3:b3:ba:f1:27:78:7a:ae:73:ab:
         5b:5e:61:6a:76:0b:1d:7f:f9:20:53:cf:f7:88:b8:51:88:e8:
         3d:71:9c:2e:4a:d8:bd:5f:ce:94:5e:e7:4d:f2:78:2b:b4:02:
         79:22:5d:ec:9a:b6:39:f9:c7:4c:6c:f5:fa:ac:f8:c5:96:40:
         5f:fa:9a:83:ed:5f:5b:63:7c:38:71:48:8a:67:1f:c3:94:77:
         65:e6:08:91:d4:de:d9:e2:e7:32:a6:fa:4c:87:9e:c9:c8:6c:
         3f:df:e5:b8:68:c8:a3:74:1d:1a:2c:2d:91:ff:3c:2c:b4:a4:
         11:a1:48:34:a6:cd:0a:57:35:e9:3a:ea:64:78:c0:be:0a:ed:
         82:de:32:40:a7:8c:0b:31:0c:ba:88:e0:6e:3d:0b:c1:86:6b:
         2c:66:a5:c4
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEM29+qjmlWiT8vProAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDkxNDAwNDUyMloXDTI1MTIxNzAxNDUyMlowLzEtMCsGA1UEAxMk
ZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5ZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZJwqVHODB+HIKLrQQvrZCw3h9ZJ8n1xP3in
5KEyOlJugFeNaqhNq4xKCqVCUqcb2UDvSNfStl+ZsYL5HxSrOv2HBCM0peGXo6rG
0eN7G1TRvDznQMDsdnKSOKIwKHLeDjEe0XeGIoRAB6n2VHIDQtSmSfyS4S7FD/xZ
svLTMaA+EQjnBm8K2iKJmPHnRsEV+Pe2ylBpokY6HX8JodkYifT+s3a0llIY8GsO
VUGrWv3kPyfCyhDyOC7Bj5EvnE81acKRwyAFBKXfXTVAr/TsT8rUMfqmP8+kK6Cz
tv/SaPxkEOwGK5T89oVPC3IcXPM4ep5eTVp5yaWwECjG+yhL1wIDAQABo4IERzCC
BEMwHQYDVR0OBBYEFNls49288AZUzykyKiMv/OESwls6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
YWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VhZjdkZjM1LWM2N2YtNDQwZC05
Nzk5LTQ2MWU3YTgwOWVmMy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4
MDllZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQgYIKwYBBQUH
AQcBAf8EMzAxMB4EAgABMBgDBAJAz9gDBAKi+LgDBALAZ3gDBALRcGgwDwQCAAIw
CQMHBCYgATDwADAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJMsQIDANVmAgMA9Ygw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOgL+2WJk1tzu78vXHd8w1TYqfVn20KabB04y9xa9Y+dVozYGtZG/
32Zipkr2sZc7HhDVfv5jYSYrJxC1XX/JMYzM3LXH+yI+4xNw+TLyTAVPO+oGa/70
KG9osn32PL3L5afTs7rxJ3h6rnOrW15hanYLHX/5IFPP94i4UYjoPXGcLkrYvV/O
lF7nTfJ4K7QCeSJd7Jq2OfnHTGz1+qz4xZZAX/qag+1fW2N8OHFIimcfw5R3ZeYI
kdTe2eLnMqb6TIeeychsP9/luGjIo3QdGiwtkf88LLSkEaFINKbNClc16TrqZHjA
vgrtgt4yQKeMCzEMuojgbj0LwYZrLGalxA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:31 2024 by rpki-client on console-fra.rpki-client.org