Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
File:                     9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer (raw, json)
Hash identifier:          SOWgFoSTVghbG+1ujUCbpXQk7tWaTFUr/4h0yjEfesI=
Subject key identifier:   D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E7F5C75D62418388F84FF800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 May 2023 00:45:16 +0000
Certificate not after:    Tue 19 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 20205
                          IP: 64.246.96.0/19
                          IP: 104.37.52.0/22
                          IP: 137.83.84.0/23
                          IP: 158.247.72.0/22
                          IP: 168.245.180.0/22
                          IP: 192.211.11.0/24
                          IP: 2001:4950::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:f5:c7:5d:62:41:83:88:f8:4f:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 17 00:45:16 2023 GMT
            Not After : Aug 19 00:45:16 2025 GMT
        Subject: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:11:8b:de:75:7a:d0:fe:7a:d2:d2:9c:ab:
                    d0:77:a2:bf:04:a9:57:f3:ae:5f:6d:6f:e6:7f:37:
                    44:3c:16:43:4c:b5:50:ec:c1:54:93:be:e8:74:db:
                    dc:b9:a1:63:17:4d:1c:bf:20:55:59:54:31:09:d4:
                    fb:a6:4c:a0:9a:8a:3e:7a:e7:b4:ac:c0:94:ea:7d:
                    2e:ff:87:fe:fd:ab:f0:ff:15:ac:4e:2c:10:ce:ec:
                    24:29:18:fd:c2:78:73:d7:32:9c:68:a7:54:09:0c:
                    b7:70:5c:1d:5b:bc:fe:57:39:f9:35:37:76:0d:41:
                    fa:48:de:03:d9:a4:c6:ad:d0:ae:10:3b:a3:00:ef:
                    57:01:d9:cf:22:59:50:7f:49:24:30:5b:7d:d3:86:
                    49:ed:cd:44:c6:3d:c6:a8:e5:ff:38:7f:47:a7:b0:
                    60:24:6f:d9:1a:0f:33:57:81:c4:26:b0:0c:d4:bf:
                    01:8e:04:dd:8e:8d:c3:c1:a2:76:0a:23:95:d8:7b:
                    bc:e1:c7:d7:9d:09:89:df:4f:5a:93:c0:d0:82:b9:
                    c3:e9:ac:08:be:82:5c:a4:d1:f5:02:dd:c8:16:fc:
                    4d:f2:42:71:36:5d:83:f3:c7:e0:7c:bf:6d:4e:1f:
                    9a:66:f2:12:60:80:91:50:bb:e2:eb:f4:b4:fa:e0:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19
                  104.37.52.0/22
                  137.83.84.0/23
                  158.247.72.0/22
                  168.245.180.0/22
                  192.211.11.0/24
                IPv6:
                  2001:4950::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20205

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:25:14:d2:8e:ea:22:85:96:b2:af:a8:b8:7c:e9:41:54:
         d9:1a:b6:e9:30:8a:7f:c3:20:a1:ca:4a:3e:c1:47:49:ab:87:
         0a:22:e0:4a:ac:f4:5c:b7:48:d7:ca:36:f0:46:98:9c:27:6b:
         52:51:c4:7b:00:74:dd:8f:e3:d2:86:f6:b0:05:74:bb:a4:bd:
         71:99:b9:14:b2:6d:e3:f6:55:39:4c:e4:67:20:a9:f2:d1:ad:
         02:5f:28:3f:1d:25:81:b5:ac:8a:85:ca:e0:df:3f:7d:0e:46:
         bc:82:b1:42:c9:36:ad:6c:e2:f3:fb:9c:57:7a:a8:8d:82:3d:
         0f:44:59:3b:dc:be:28:68:c9:e5:7b:2d:58:8d:8b:dd:2a:e3:
         65:9c:5c:89:15:25:1b:30:63:51:d2:10:92:f0:a4:4f:ee:9c:
         7b:84:be:55:62:20:35:77:04:9c:ac:df:f0:90:aa:ce:6f:18:
         fe:78:2b:92:2f:5a:68:d8:47:0f:4a:30:c0:35:27:90:82:2f:
         71:ae:d0:93:d1:56:50:2e:66:30:6c:fd:07:aa:7c:5b:14:ee:
         04:b0:29:88:43:a9:b1:be:84:dc:c0:bb:de:2f:38:7f:a2:71:
         aa:86:10:4f:89:5f:f5:a5:17:3c:ac:47:f4:03:b8:ec:51:4b:
         e7:0d:db:e4
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEHn9cddYkGDiPhP+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDUxNzAwNDUxNloXDTI1MDgxOTAwNDUxNlowLzEtMCsGA1UEAxMk
OWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2NmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi38Ri951etD+etLSnKvQd6K/BKlX865fbW/m
fzdEPBZDTLVQ7MFUk77odNvcuaFjF00cvyBVWVQxCdT7pkygmoo+eue0rMCU6n0u
/4f+/avw/xWsTiwQzuwkKRj9wnhz1zKcaKdUCQy3cFwdW7z+Vzn5NTd2DUH6SN4D
2aTGrdCuEDujAO9XAdnPIllQf0kkMFt904ZJ7c1Exj3GqOX/OH9Hp7BgJG/ZGg8z
V4HEJrAM1L8BjgTdjo3DwaJ2CiOV2Hu84cfXnQmJ309ak8DQgrnD6awIvoJcpNH1
At3IFvxN8kJxNl2D88fgfL9tTh+aZvISYICRULvi6/S0+uBY4wIDAQABo4IERzCC
BEMwHQYDVR0OBBYEFNjWvze1tk7UHXlVzZN+pl4AiZ/4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzllZDQ1ZTk3LTkwYzItNDgzZC1h
NjhiLTJkZDJjODMyNjZhMi85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgz
MjY2YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwTAYIKwYBBQUH
AQcBAf8EPTA7MCoEAgABMCQDBAVA9mADBAJoJTQDBAGJU1QDBAKe90gDBAKo9bQD
BADA0wswDQQCAAIwBwMFACABSVAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICTu0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWiklFNKO6iKFlrKvqLh86UFU2Rq26TCKf8MgocpKPsFHSauHCiLg
Sqz0XLdI18o28EaYnCdrUlHEewB03Y/j0ob2sAV0u6S9cZm5FLJt4/ZVOUzkZyCp
8tGtAl8oPx0lgbWsioXK4N8/fQ5GvIKxQsk2rWzi8/ucV3qojYI9D0RZO9y+KGjJ
5XstWI2L3SrjZZxciRUlGzBjUdIQkvCkT+6ce4S+VWIgNXcEnKzf8JCqzm8Y/ngr
ki9aaNhHD0owwDUnkIIvca7Qk9FWUC5mMGz9B6p8WxTuBLApiEOpsb6E3MC73i84
f6JxqoYQT4lf9aUXPKxH9AO47FFL5w3b5A==
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:16:03 2024 by rpki-client on console-ams.rpki-client.org