Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a.cer
File:                     de018715-dccc-4fe7-9768-b7eddacc397a.cer (raw, json)
Hash identifier:          NWDB5AAjWe7OU2CQZdyJJHfOJO1bJ+N01niC0d/7jDg=
Subject key identifier:   4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845094DEA715501D26C4121DD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/de018715-dccc-4fe7-9768-b7eddacc397a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Feb 2024 01:45:20 +0000
Certificate not after:    Tue 02 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 22837
                          IP: 66.220.32.0 -- 66.220.36.255
                          IP: 66.220.40.0/23
                          IP: 66.220.44.0/23
                          IP: 66.220.62.0/23
                          IP: 2607:2f40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:4d:ea:71:55:01:d2:6c:41:21:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 28 01:45:20 2024 GMT
            Not After : Jun  2 00:45:20 2026 GMT
        Subject: CN=de018715-dccc-4fe7-9768-b7eddacc397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:fe:ed:26:fd:f4:24:1e:2c:1b:13:30:87:
                    bf:95:35:61:e3:04:93:67:a1:9c:0c:7c:c6:f0:7d:
                    9d:60:6e:9a:ed:be:65:f5:a4:91:4a:43:ac:28:7d:
                    75:a7:08:9f:72:ee:8b:ef:02:c1:10:3e:c6:d0:04:
                    c5:ca:ae:ab:d8:3c:2b:d5:f1:2f:5c:2c:24:59:66:
                    1d:72:d6:92:5e:a4:37:ce:74:67:23:db:90:21:19:
                    b0:58:35:ed:ac:ab:4d:2b:77:8c:81:47:ee:b2:b5:
                    90:48:ed:0f:90:0a:ea:13:d0:86:a5:90:ec:01:e6:
                    d3:2b:c2:fe:26:f7:97:e1:0c:20:0d:d3:e2:84:e3:
                    8f:de:98:37:6f:c3:56:d4:c9:ed:81:8f:80:8c:13:
                    d7:42:91:61:7c:46:a9:0c:6d:3d:cb:f3:ab:20:26:
                    cf:d1:7f:50:8d:05:83:2c:a2:b1:49:71:a8:c8:8a:
                    56:28:75:52:47:b8:b8:35:58:9a:88:33:a8:f8:33:
                    d3:a3:8a:8d:0f:96:dc:eb:ad:3a:ab:67:57:32:9e:
                    e0:a7:6a:9a:1c:41:9e:b7:ed:21:a2:9d:7e:8e:79:
                    24:d2:7f:b5:83:5b:3f:66:d2:c3:b5:a8:af:93:a2:
                    43:68:43:98:4b:c0:bf:ff:aa:d0:37:4c:1e:c3:f4:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:91:46:45:F1:7C:5E:1F:94:4C:09:2B:64:09:11:67:3F:25:67
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/de018715-dccc-4fe7-9768-b7eddacc397a/de018715-dccc-4fe7-9768-b7eddacc397a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.220.32.0-66.220.36.255
                  66.220.40.0/23
                  66.220.44.0/23
                  66.220.62.0/23
                IPv6:
                  2607:2f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22837

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:d0:1c:67:44:d6:c5:0f:46:b4:f8:be:59:5a:ae:1e:a4:bd:
         09:46:44:a4:25:18:89:9c:3f:12:34:ae:73:31:a2:18:b9:21:
         35:02:20:b2:d3:90:d7:61:50:3f:ec:f0:65:56:71:e6:4b:5f:
         c7:f9:82:9b:58:b8:7b:a7:f5:6f:2d:d7:1e:ba:28:06:1c:3e:
         f7:8a:cb:b2:2c:09:b3:2a:2c:4a:e9:2b:22:60:d1:ef:89:1a:
         ee:a3:1e:aa:4f:ef:02:f2:97:5f:09:c6:8c:c7:b7:40:d0:c6:
         7e:8b:78:06:5a:1b:b6:b7:ef:75:c9:39:86:de:be:78:cc:a8:
         db:c8:3b:ec:9e:2b:f8:17:99:3a:8c:32:99:af:4b:03:8c:af:
         60:96:fe:dc:53:f3:67:28:51:00:de:a5:f8:a6:eb:94:17:fe:
         12:cd:12:e1:49:cc:8c:e5:14:ee:58:a5:6f:68:d4:5d:6d:49:
         1c:2d:1e:53:70:4c:9e:c0:8e:aa:b3:49:5f:71:fa:1a:16:aa:
         44:92:55:a4:2d:11:43:87:5b:d7:f0:8b:aa:f1:e3:91:a4:92:
         2d:0c:3c:f2:5b:f5:e6:c3:66:d6:ea:2b:05:91:05:b8:a7:19:
         a6:b3:45:92:be:05:5e:53:b4:8f:b4:c3:41:7a:0b:83:7b:3e:
         03:d2:1e:35
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEUJTepxVQHSbEEh3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDIyODAxNDUyMFoXDTI2MDYwMjAwNDUyMFowLzEtMCsGA1UEAxMk
ZGUwMTg3MTUtZGNjYy00ZmU3LTk3NjgtYjdlZGRhY2MzOTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TP+7Sb99CQeLBsTMIe/lTVh4wSTZ6GcDHzG
8H2dYG6a7b5l9aSRSkOsKH11pwifcu6L7wLBED7G0ATFyq6r2Dwr1fEvXCwkWWYd
ctaSXqQ3znRnI9uQIRmwWDXtrKtNK3eMgUfusrWQSO0PkArqE9CGpZDsAebTK8L+
JveX4QwgDdPihOOP3pg3b8NW1MntgY+AjBPXQpFhfEapDG09y/OrICbP0X9QjQWD
LKKxSXGoyIpWKHVSR7i4NViaiDOo+DPTo4qND5bc6606q2dXMp7gp2qaHEGet+0h
op1+jnkk0n+1g1s/ZtLDtaivk6JDaEOYS8C//6rQN0wew/TcPQIDAQABo4IEQzCC
BD8wHQYDVR0OBBYEFE7ekUZF8XxeH5RMCStkCRFnPyVnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9k
ZTAxODcxNS1kY2NjLTRmZTctOTc2OC1iN2VkZGFjYzM5N2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2RlMDE4NzE1LWRjY2MtNGZlNy05
NzY4LWI3ZWRkYWNjMzk3YS9kZTAxODcxNS1kY2NjLTRmZTctOTc2OC1iN2VkZGFj
YzM5N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwSAYIKwYBBQUH
AQcBAf8EOTA3MCYEAgABMCAwDAMEBULcIAMEAELcJAMEAULcKAMEAULcLAMEAULc
PjANBAIAAjAHAwUAJgcvQDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJZNTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQBC0BxnRNbFD0a0+L5ZWq4epL0JRkSkJRiJnD8SNK5zMaIYuSE1AiCy05DX
YVA/7PBlVnHmS1/H+YKbWLh7p/VvLdceuigGHD73isuyLAmzKixK6SsiYNHviRru
ox6qT+8C8pdfCcaMx7dA0MZ+i3gGWhu2t+91yTmG3r54zKjbyDvsniv4F5k6jDKZ
r0sDjK9glv7cU/NnKFEA3qX4puuUF/4SzRLhScyM5RTuWKVvaNRdbUkcLR5TcEye
wI6qs0lfcfoaFqpEklWkLRFDh1vX8Iuq8eORpJItDDzyW/Xmw2bW6isFkQW4pxmm
s0WSvgVeU7SPtMNBeguDez4D0h41
-----END CERTIFICATE-----
Generated at Thu Apr 18 22:04:51 2024 by rpki-client on console-fra.rpki-client.org