Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.cer
File:                     f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.cer (download)
Hash identifier:          5NHFuoGwVro6kseSQTSNS/JJ1Co4u6waolrjULx659E=
Subject key identifier:   DE:83:76:8A:63:DC:E1:CE:46:B2:03:F8:FC:30:17:BB:EC:A9:C0:3B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328583A8790731DE6B5A7966BE1D080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate valid until:  Wed 09 Jul 2031 14:34:56 +0000
Subordinate resources:
    1: AS: 399780
    2: IP: 172.98.16.0/22
    3: IP: 2602:80a:f000::/40

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:87:90:73:1d:e6:b5:a7:96:6b:e1:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  9 14:34:56 2021 GMT
            Not After : Jul  9 14:34:56 2031 GMT
        Subject: CN=f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1b:79:da:db:11:0a:92:91:98:3f:64:ea:32:
                    32:50:da:22:8f:60:1e:b3:7b:ed:da:04:e4:41:4a:
                    4c:93:da:1f:0f:b8:52:37:16:b3:d8:70:00:b6:ca:
                    09:ef:8a:17:e6:d6:ea:11:b8:fa:61:07:ad:74:5e:
                    0e:42:74:e2:39:98:64:a9:2e:5f:96:d5:6b:e4:90:
                    f0:84:27:7e:bd:46:fa:e5:67:cb:bd:fb:c0:70:dc:
                    a0:20:fe:72:1e:68:39:72:09:6f:05:fb:ff:ab:95:
                    d7:cb:fb:b8:3c:35:ec:f1:ff:1c:a4:75:78:fb:71:
                    03:23:0e:e5:3f:9a:3c:bc:fb:98:9a:5e:25:43:09:
                    6e:1f:74:75:f8:8b:14:97:40:e7:d8:b7:a3:ab:fb:
                    01:0b:48:fc:e1:d5:fc:d5:37:c8:b4:3d:8a:a8:59:
                    f0:4a:0b:47:6b:ea:cd:c7:70:3e:9d:04:23:6d:41:
                    0a:02:cc:a9:fa:72:09:ba:6d:b4:20:29:68:da:14:
                    dc:47:7e:21:66:95:f5:65:a6:42:5b:e8:70:a5:28:
                    ce:5c:b2:ba:7f:35:5f:2a:d7:71:13:aa:f4:2a:08:
                    ba:57:25:86:be:da:d6:a0:02:ea:9e:47:1e:ff:7b:
                    57:9a:29:ca:10:ac:ec:e3:47:10:26:c6:90:66:4c:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:83:76:8A:63:DC:E1:CE:46:B2:03:F8:FC:30:17:BB:EC:A9:C0:3B
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c/f2ed18ad-0960-4b9e-96e8-4feb99b6ec0c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier: 
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.16.0/22
                IPv6:
                  2602:80a:f000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399780

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:f8:6c:8a:06:bf:ec:e3:5f:79:d8:fc:b8:9c:e4:9b:22:
         08:61:2d:64:d8:64:7a:bc:ca:62:fa:e6:22:52:24:24:d5:c3:
         cc:70:6b:f1:df:38:f1:3e:95:b7:f3:e2:f9:9a:03:2c:99:e3:
         7b:12:8c:1d:fe:24:2b:f5:de:be:76:5e:a5:19:6a:5c:b0:71:
         8e:cd:22:cc:70:07:9b:0f:ca:0b:a1:b6:89:6b:12:b5:a0:c9:
         0c:64:56:04:7e:c0:95:3b:e8:37:a6:8b:2d:06:6e:e5:ba:65:
         ca:04:ff:c8:e2:06:ce:72:48:25:56:37:3b:85:f6:0a:b1:e0:
         d1:43:95:a3:ae:1d:37:d9:bb:98:9e:c9:86:8a:75:62:ff:9e:
         c9:83:32:6c:45:33:b9:02:d2:0d:35:3f:90:12:18:72:17:78:
         9f:8d:e1:c0:4e:15:ec:05:34:70:01:c1:79:fa:29:21:ba:d5:
         d9:aa:57:7b:74:68:2a:36:50:70:58:ab:fd:e3:26:fb:4e:3a:
         c6:4e:49:79:2c:43:6a:09:0b:69:29:25:af:b0:3f:c1:27:0a:
         88:7f:5d:2b:4d:7e:2a:1c:0c:63:75:8a:7e:58:d0:53:01:44:
         88:a9:3a:8c:54:1c:08:d4:6a:54:da:c2:d2:27:30:b2:5e:58:
         6a:e9:6d:cf
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWDqHkHMd5rWnlmvh0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIxMDcwOTE0MzQ1NloXDTMxMDcwOTE0MzQ1NlowLzEtMCsGA1UEAxMk
ZjJlZDE4YWQtMDk2MC00YjllLTk2ZTgtNGZlYjk5YjZlYzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Bt52tsRCpKRmD9k6jIyUNoij2Aes3vt2gTk
QUpMk9ofD7hSNxaz2HAAtsoJ74oX5tbqEbj6YQetdF4OQnTiOZhkqS5fltVr5JDw
hCd+vUb65WfLvfvAcNygIP5yHmg5cglvBfv/q5XXy/u4PDXs8f8cpHV4+3EDIw7l
P5o8vPuYml4lQwluH3R1+IsUl0Dn2Lejq/sBC0j84dX81TfItD2KqFnwSgtHa+rN
x3A+nQQjbUEKAsyp+nIJum20IClo2hTcR34hZpX1ZaZCW+hwpSjOXLK6fzVfKtdx
E6r0Kgi6VyWGvtrWoALqnkce/3tXminKEKzs40cQJsaQZkw90QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFN6Ddopj3OHORrID+PwwF7vsqcA7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m
MmVkMThhZC0wOTYwLTRiOWUtOTZlOC00ZmViOTliNmVjMGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2YyZWQxOGFkLTA5NjAtNGI5ZS05
NmU4LTRmZWI5OWI2ZWMwYy9mMmVkMThhZC0wOTYwLTRiOWUtOTZlOC00ZmViOTli
NmVjMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKsYhAwDgQCAAIwCAMGACYCCArwMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYZpDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD8/hsiga/7ONfedj8uJzkmyII
YS1k2GR6vMpi+uYiUiQk1cPMcGvx3zjxPpW38+L5mgMsmeN7Eowd/iQr9d6+dl6l
GWpcsHGOzSLMcAebD8oLobaJaxK1oMkMZFYEfsCVO+g3postBm7lumXKBP/I4gbO
ckglVjc7hfYKseDRQ5Wjrh032buYnsmGinVi/57JgzJsRTO5AtINNT+QEhhyF3if
jeHAThXsBTRwAcF5+ikhutXZqld7dGgqNlBwWKv94yb7TjrGTkl5LENqCQtpKSWv
sD/BJwqIf10rTX4qHAxjdYp+WNBTAUSIqTqMVBwI1GpU2sLSJzCyXlhq6W3P
-----END CERTIFICATE-----
Generated at Sat Feb 4 00:27:56 2023 by rpki-client.