Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
File:                     b4586964-3c8b-4441-8b8a-b2d07721f346.cer (raw, json)
Hash identifier:          633YgNirbJ2glfZJom7gwLaIUbnCfDAEyCsSId+hzUk=
Subject key identifier:   8E:1F:BF:22:67:35:B1:E5:85:72:69:B2:4C:B4:14:FB:98:19:AC:66
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584275744C34057BFB60D65FC680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Jul 2023 17:09:10 +0000
Certificate not after:    Wed 08 Oct 2025 17:09:10 +0000
Subordinate resources:    AS: 22363
                          IP: 69.80.96.0/20
                          IP: 192.64.4.0/22
                          IP: 199.48.240.0/21
                          IP: 2607:b200::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:75:74:4c:34:05:7b:fb:60:d6:5f:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul  6 17:09:10 2023 GMT
            Not After : Oct  8 17:09:10 2025 GMT
        Subject: CN=b4586964-3c8b-4441-8b8a-b2d07721f346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:1b:9b:a2:7a:31:0c:7c:e1:bc:48:ce:09:
                    db:99:d1:e1:04:ff:75:8d:af:5c:56:5d:08:94:9d:
                    d4:3c:d6:1d:f7:8c:64:59:c3:2a:3f:2a:b7:0f:9b:
                    d7:07:68:33:e5:53:08:66:8b:85:2b:f8:17:67:ff:
                    dd:ab:76:d4:32:e9:1d:5b:7c:46:06:a9:d0:f6:f5:
                    a1:e4:42:9f:f3:9c:99:97:cc:c2:ed:6a:1c:6f:1e:
                    75:2f:db:4c:33:46:b3:3c:0a:f9:5a:ef:a8:2c:df:
                    0a:1c:4c:09:dd:1f:11:2b:f4:6e:4a:04:95:21:44:
                    1b:11:c8:b5:80:bd:cf:74:91:1e:9e:f8:72:b8:72:
                    82:68:d3:47:01:f1:0f:10:94:78:c8:9c:3e:00:c7:
                    e0:32:7d:40:1e:17:2e:e8:7c:7b:27:1e:f8:8c:45:
                    77:5e:5c:a5:4c:12:91:02:c0:36:0e:a8:bc:33:26:
                    0d:f7:72:7d:aa:8c:69:28:5a:29:ae:0e:1f:8e:02:
                    11:94:4f:ce:24:0b:1f:f0:ba:2d:7d:c4:08:c8:00:
                    ee:52:60:04:10:d6:33:44:60:c9:72:ba:eb:c7:b6:
                    68:09:aa:60:f5:1f:ff:00:0e:1c:ad:8c:bf:31:cc:
                    c1:0f:ec:7d:16:98:7a:1c:46:f5:b4:62:9c:db:e2:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:BF:22:67:35:B1:E5:85:72:69:B2:4C:B4:14:FB:98:19:AC:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.96.0/20
                  192.64.4.0/22
                  199.48.240.0/21
                IPv6:
                  2607:b200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:eb:34:31:fc:60:6c:0b:e8:85:58:99:a0:09:8b:fb:fe:
         c2:a7:60:b5:41:fc:d0:b5:48:1d:41:71:32:2a:41:38:1c:f1:
         79:3c:61:85:d8:f9:9e:4d:a7:e9:90:ca:0b:ed:6f:06:6d:f3:
         6a:e6:c7:82:ad:ca:f5:48:a8:e8:69:bb:40:e6:e1:11:b4:93:
         c7:b8:58:69:33:34:c8:45:55:38:8f:d7:a9:c2:f0:b4:e4:08:
         22:76:d1:bc:03:1c:03:2f:72:9d:fe:9f:fe:db:a8:06:43:4b:
         06:ac:86:cd:45:fa:7a:7d:4f:16:b4:98:34:00:0e:91:de:5d:
         47:00:6e:89:01:26:17:ca:9f:ad:a9:cb:44:2c:bd:3e:71:9d:
         40:26:f3:2e:89:f5:2c:ad:7e:71:9d:8e:39:74:bd:6e:61:cf:
         c3:2b:93:51:f9:4c:55:44:95:16:0a:5b:2a:d2:c3:c5:19:8a:
         69:40:af:c7:74:46:0f:fd:72:11:e4:66:82:8d:60:22:a0:67:
         ba:b9:82:9d:4c:e9:30:53:c0:14:33:d1:46:57:25:3b:0e:83:
         9c:b3:28:cb:59:89:4f:eb:82:c9:ed:83:93:00:68:fc:8f:ac:
         e5:a6:e4:72:45:21:08:7e:2f:91:ae:c9:e7:aa:ae:ff:e6:71:
         7e:6c:5e:1d
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEJ1dEw0BXv7YNZfxoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcwNjE3MDkxMFoXDTI1MTAwODE3MDkxMFowLzEtMCsGA1UEAxMk
YjQ1ODY5NjQtM2M4Yi00NDQxLThiOGEtYjJkMDc3MjFmMzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Ubm6J6MQx84bxIzgnbmdHhBP91ja9cVl0I
lJ3UPNYd94xkWcMqPyq3D5vXB2gz5VMIZouFK/gXZ//dq3bUMukdW3xGBqnQ9vWh
5EKf85yZl8zC7Wocbx51L9tMM0azPAr5Wu+oLN8KHEwJ3R8RK/RuSgSVIUQbEci1
gL3PdJEenvhyuHKCaNNHAfEPEJR4yJw+AMfgMn1AHhcu6Hx7Jx74jEV3XlylTBKR
AsA2Dqi8MyYN93J9qoxpKFoprg4fjgIRlE/OJAsf8LotfcQIyADuUmAEENYzRGDJ
crrrx7ZoCapg9R//AA4crYy/MczBD+x9Fph6HEb1tGKc2+JG7wIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFI4fvyJnNbHlhXJpsky0FPuYGaxmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i
NDU4Njk2NC0zYzhiLTQ0NDEtOGI4YS1iMmQwNzcyMWYzNDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I0NTg2OTY0LTNjOGItNDQ0MS04
YjhhLWIyZDA3NzIxZjM0Ni9iNDU4Njk2NC0zYzhiLTQ0NDEtOGI4YS1iMmQwNzcy
MWYzNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBARFUGADBALAQAQDBAPHMPAwDQQCAAIwBwMFACYH
sgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICV1swVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACIvrNDH8YGwL
6IVYmaAJi/v+wqdgtUH80LVIHUFxMipBOBzxeTxhhdj5nk2n6ZDKC+1vBm3zaubH
gq3K9Uio6Gm7QObhEbSTx7hYaTM0yEVVOI/XqcLwtOQIInbRvAMcAy9ynf6f/tuo
BkNLBqyGzUX6en1PFrSYNAAOkd5dRwBuiQEmF8qfranLRCy9PnGdQCbzLon1LK1+
cZ2OOXS9bmHPwyuTUflMVUSVFgpbKtLDxRmKaUCvx3RGD/1yEeRmgo1gIqBnurmC
nUzpMFPAFDPRRlclOw6DnLMoy1mJT+uCye2DkwBo/I+s5abkckUhCH4vka7J56qu
/+ZxfmxeHQ==
-----END CERTIFICATE-----
Generated at Thu May 9 20:34:26 2024 by rpki-client on console-ams.rpki-client.org