Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92.cer
File:                     221fa56a-4e00-462c-9583-3f6493cb4c92.cer (raw, json)
Hash identifier:          LCqZdT/yelZuBw1b2UBMlAx+378JoT1JNA7PRUit5Ho=
Subject key identifier:   59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E48353B0B7FBF8700284A6C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 01 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 15020
                          IP: 216.73.160.0/22
                          IP: 2602:fc2a::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:b0:b7:fb:f8:70:02:84:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  1 19:06:39 2025 GMT
        Subject: CN=221fa56a-4e00-462c-9583-3f6493cb4c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:36:e1:55:93:f4:33:c2:f6:39:45:5b:f9:
                    cd:12:c9:6e:1e:96:7f:65:3a:c8:0a:30:b8:75:bd:
                    6b:a3:eb:97:e8:a6:2d:5c:e8:5f:f5:5b:9c:18:f3:
                    bf:a8:4f:55:2f:9c:8f:bb:c0:82:8b:22:b9:cf:25:
                    d0:b0:e7:4c:c8:21:78:88:2f:3b:6f:f9:46:cc:01:
                    f9:cc:b2:bd:b3:3e:c5:bb:9d:af:0a:de:bd:9f:a7:
                    6f:c2:3a:bd:7f:f0:64:e4:63:a4:40:5d:ea:e3:4d:
                    3f:c8:cc:0f:b6:8c:70:0d:7a:60:9f:8d:7f:63:26:
                    67:c4:f5:c0:9d:7b:4a:26:47:9d:c9:68:7e:3f:03:
                    56:d8:00:1d:e8:3b:9d:fb:34:2e:6e:bc:ce:d1:8a:
                    3a:70:1b:4b:8b:13:45:17:70:86:c8:01:4d:85:cd:
                    75:a0:8e:57:3e:fc:f5:23:a0:bb:8b:72:da:9d:d1:
                    4e:56:cb:83:d5:5c:5d:a5:fe:92:ec:f9:41:99:4c:
                    6f:79:11:27:72:fc:7e:15:67:cd:f3:b5:10:bf:47:
                    42:4f:91:90:4c:fc:33:7d:2f:61:f6:bc:70:bc:ba:
                    75:ce:d9:8b:b5:13:cb:02:63:62:a3:5c:74:b6:c4:
                    14:f8:1a:55:43:18:f5:83:79:88:62:f4:66:fe:c2:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:B5:0D:05:57:36:D2:A5:CC:44:F1:5A:C8:20:FD:12:8F:B7:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/221fa56a-4e00-462c-9583-3f6493cb4c92/221fa56a-4e00-462c-9583-3f6493cb4c92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.160.0/22
                IPv6:
                  2602:fc2a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15020

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:de:62:e5:03:72:97:d0:d2:3d:c2:06:03:e9:28:64:15:
         cc:b4:81:05:09:0d:a4:d6:0a:e9:c9:91:aa:3b:54:61:9e:68:
         d2:b5:51:ac:e8:77:d8:21:42:f0:13:6e:e6:1e:d5:74:65:4f:
         f8:8c:1d:71:e3:38:49:af:33:fc:a3:fd:14:79:b7:f7:49:95:
         02:4f:d8:a6:a4:f1:dd:27:73:40:70:78:04:bc:dc:3a:0f:8b:
         59:69:95:46:45:66:f6:ca:bb:87:4a:22:52:fc:94:17:a6:ae:
         3b:34:8a:20:ce:1c:b3:c6:e2:78:05:e4:f9:e5:dd:42:fb:d2:
         66:54:57:0f:22:d4:c1:0d:73:fd:33:7e:fe:ac:ee:c4:8c:21:
         fa:ba:4e:75:a9:ed:f8:ce:05:04:63:d0:69:fa:b5:87:a8:95:
         79:d6:cb:01:78:87:de:25:72:ba:c8:ec:ad:fd:70:af:46:04:
         f5:23:42:80:8a:e0:81:54:1b:63:3b:c5:d3:82:ed:45:f2:9e:
         f5:cc:12:f4:7e:c0:e8:6c:39:4f:06:0c:af:85:d1:74:06:b7:
         37:38:c1:8e:27:7e:d9:e5:92:61:9e:22:28:f0:7f:c2:f3:fc:
         14:c6:a5:64:19:10:0d:85:0b:bb:35:05:45:99:b5:c8:69:f7:
         45:1b:d4:19
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEHkg1Owt/v4cAKEpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMTE5MDYzOVowLzEtMCsGA1UEAxMk
MjIxZmE1NmEtNGUwMC00NjJjLTk1ODMtM2Y2NDkzY2I0YzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqow24VWT9DPC9jlFW/nNEsluHpZ/ZTrICjC4
db1ro+uX6KYtXOhf9VucGPO/qE9VL5yPu8CCiyK5zyXQsOdMyCF4iC87b/lGzAH5
zLK9sz7Fu52vCt69n6dvwjq9f/Bk5GOkQF3q400/yMwPtoxwDXpgn41/YyZnxPXA
nXtKJkedyWh+PwNW2AAd6Dud+zQubrzO0Yo6cBtLixNFF3CGyAFNhc11oI5XPvz1
I6C7i3LandFOVsuD1Vxdpf6S7PlBmUxveREncvx+FWfN87UQv0dCT5GQTPwzfS9h
9rxwvLp1ztmLtRPLAmNio1x0tsQU+BpVQxj1g3mIYvRm/sKyYwIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFFnMtQ0FVzbSpcxE8VrIIP0Sj7drMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8y
MjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNjYjRjOTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzIyMWZhNTZhLTRlMDAtNDYyYy05
NTgzLTNmNjQ5M2NiNGM5Mi8yMjFmYTU2YS00ZTAwLTQ2MmMtOTU4My0zZjY0OTNj
YjRjOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBALYSaAwDgQCAAIwCAMGBCYC/CoAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjqsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADKP3mLlA3KX0NI9wgYD6ShkFcy0
gQUJDaTWCunJkao7VGGeaNK1Uazod9ghQvATbuYe1XRlT/iMHXHjOEmvM/yj/RR5
t/dJlQJP2Kak8d0nc0BweAS83DoPi1lplUZFZvbKu4dKIlL8lBemrjs0iiDOHLPG
4ngF5Pnl3UL70mZUVw8i1MENc/0zfv6s7sSMIfq6TnWp7fjOBQRj0Gn6tYeolXnW
ywF4h94lcrrI7K39cK9GBPUjQoCK4IFUG2M7xdOC7UXynvXMEvR+wOhsOU8GDK+F
0XQGtzc4wY4nftnlkmGeIijwf8Lz/BTGpWQZEA2FC7s1BUWZtchp90Ub1Bk=
-----END CERTIFICATE-----
Generated at Fri Mar 29 02:54:14 2024 by rpki-client on console-fra.rpki-client.org