Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175.cer
File:                     141d1fb1-9841-4771-b75f-7e85f1329175.cer (raw, json)
Hash identifier:          PaA1S3+D6+oS2KYy5EgAgnEOODvrvVSZ89QybG1CF7M=
Subject key identifier:   32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843AD959F4BBFFFC321A5CFE500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 12:28:31 +0000
Certificate not after:    Wed 28 Jan 2026 13:28:31 +0000
Subordinate resources:    AS: 603
                          AS: 12085
                          AS: 12188
                          AS: 13531
                          AS: 14609
                          AS: 16553
                          AS: 18928
                          AS: 19930
                          AS: 22232
                          AS: 25658
                          AS: 27224
                          AS: 27272
                          AS: 27315
                          AS: 27330
                          AS: 27354
                          AS: 27407
                          AS: 27433
                          AS: 27438
                          AS: 27444
                          AS: 27466
                          AS: 27566
                          AS: 29884
                          AS: 30157
                          AS: 30159
                          AS: 30715
                          AS: 32007
                          AS: 32323
                          AS: 32550
                          AS: 33109
                          AS: 33157
                          AS: 36030 -- 36031
                          AS: 36641
                          AS: 40052
                          AS: 40341
                          AS: 40957
                          AS: 54588
                          AS: 64275
                          AS: 64292
                          AS: 394255
                          AS: 394749
                          AS: 398811
                          AS: 398814
                          AS: 398975
                          IP: 50.100.0.0/21
                          IP: 50.100.12.0/22
                          IP: 50.100.18.0 -- 50.100.22.255
                          IP: 64.191.192.0/18
                          IP: 65.110.160.0/19
                          IP: 66.38.144.0/24
                          IP: 66.38.146.0/24
                          IP: 67.210.208.0/20
                          IP: 67.223.176.0/20
                          IP: 69.46.96.0/19
                          IP: 72.28.77.0/24
                          IP: 74.121.160.0/21
                          IP: 74.200.0.0/19
                          IP: 98.158.80.0/20
                          IP: 142.134.175.0/24
                          IP: 142.134.209.0/24
                          IP: 142.134.245.0/24
                          IP: 142.215.0.0/16
                          IP: 149.97.128.0/17
                          IP: 173.205.192.0/21
                          IP: 184.150.220.0/24
                          IP: 184.150.231.0 -- 184.150.239.255
                          IP: 198.32.99.0 -- 198.32.119.255
                          IP: 198.32.133.0 -- 198.32.135.255
                          IP: 198.32.175.0 -- 198.32.177.255
                          IP: 198.32.181.0 -- 198.32.183.255
                          IP: 198.32.190.0 -- 198.32.192.255
                          IP: 198.32.241.0 -- 198.32.243.255
                          IP: 204.136.12.0/22
                          IP: 206.47.42.0/24
                          IP: 206.51.36.0/22
                          IP: 206.126.236.0/22
                          IP: 206.197.169.0/24
                          IP: 206.223.115.0 -- 206.223.119.255
                          IP: 206.223.123.0/24
                          IP: 206.223.131.0 -- 206.223.135.255
                          IP: 206.223.137.0 -- 206.223.138.255
                          IP: 206.223.142.0/24
                          IP: 208.92.132.0/22
                          IP: 208.115.128.0/20
                          IP: 216.55.208.0/21
                          IP: 216.220.32.0/19
                          IP: 216.221.224.0/20
                          IP: 2001:504::/48
                          IP: 2001:504:d:: -- 2001:504:12:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:4818::/32
                          IP: 2605:a800::/32
                          IP: 2606:5c80::/32
                          IP: 2607:f6f0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ad:95:9f:4b:bf:ff:c3:21:a5:cf:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct 26 12:28:31 2023 GMT
            Not After : Jan 28 13:28:31 2026 GMT
        Subject: CN=141d1fb1-9841-4771-b75f-7e85f1329175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:40:f3:d9:43:55:80:65:1a:b1:06:f4:91:
                    b5:f1:68:f0:bc:74:c0:f6:00:76:f5:cd:3c:03:90:
                    5b:4b:5e:e0:cf:a3:b3:ef:82:ed:bc:12:c6:53:d3:
                    42:02:37:81:3c:8f:ab:bc:7c:9a:2d:00:99:1d:f6:
                    70:c2:01:48:93:38:07:dc:50:b5:59:23:7c:c5:bf:
                    b0:9e:5e:b3:a7:bd:03:86:aa:38:00:f9:2c:5b:ef:
                    82:62:a3:a7:e9:b5:bd:db:c8:09:46:93:88:52:42:
                    b4:4f:3c:f0:62:c3:d3:bb:01:e0:11:5d:ba:8f:45:
                    c3:3e:72:3b:02:4c:f3:c6:9a:18:05:e1:cf:71:19:
                    8e:70:21:07:cf:e6:c6:f9:b6:60:54:d9:bd:43:86:
                    60:b5:82:64:c6:d5:4d:dd:6f:52:7a:78:5b:dc:b5:
                    7e:a4:b3:ca:a5:9e:94:61:21:75:a7:c8:9c:f5:4e:
                    d0:1a:d1:1c:75:16:36:f6:86:1f:9a:13:3a:92:2b:
                    e3:8c:a9:fb:04:32:01:f8:61:b6:7a:ea:40:85:9b:
                    2d:49:5a:c8:4d:2e:44:db:1b:6d:71:5d:7e:21:29:
                    89:4b:b3:84:02:3a:5d:de:3b:50:0c:c4:09:7c:3e:
                    95:8f:92:81:97:4f:c5:c9:8b:34:c0:d3:31:e7:b5:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:5B:FA:D4:1D:B4:2F:67:4A:39:86:40:97:21:08:A4:FB:86:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/141d1fb1-9841-4771-b75f-7e85f1329175/141d1fb1-9841-4771-b75f-7e85f1329175.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.0.0/21
                  50.100.12.0/22
                  50.100.18.0-50.100.22.255
                  64.191.192.0/18
                  65.110.160.0/19
                  66.38.144.0/24
                  66.38.146.0/24
                  67.210.208.0/20
                  67.223.176.0/20
                  69.46.96.0/19
                  72.28.77.0/24
                  74.121.160.0/21
                  74.200.0.0/19
                  98.158.80.0/20
                  142.134.175.0/24
                  142.134.209.0/24
                  142.134.245.0/24
                  142.215.0.0/16
                  149.97.128.0/17
                  173.205.192.0/21
                  184.150.220.0/24
                  184.150.231.0-184.150.239.255
                  198.32.99.0-198.32.119.255
                  198.32.133.0-198.32.135.255
                  198.32.175.0-198.32.177.255
                  198.32.181.0-198.32.183.255
                  198.32.190.0-198.32.192.255
                  198.32.241.0-198.32.243.255
                  204.136.12.0/22
                  206.47.42.0/24
                  206.51.36.0/22
                  206.126.236.0/22
                  206.197.169.0/24
                  206.223.115.0-206.223.119.255
                  206.223.123.0/24
                  206.223.131.0-206.223.135.255
                  206.223.137.0-206.223.138.255
                  206.223.142.0/24
                  208.92.132.0/22
                  208.115.128.0/20
                  216.55.208.0/21
                  216.220.32.0/19
                  216.221.224.0/20
                IPv6:
                  2001:504::/48
                  2001:504:d::-2001:504:12:ffff:ffff:ffff:ffff:ffff
                  2001:4818::/32
                  2605:a800::/32
                  2606:5c80::/32
                  2607:f6f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  603
                  12085
                  12188
                  13531
                  14609
                  16553
                  18928
                  19930
                  22232
                  25658
                  27224
                  27272
                  27315
                  27330
                  27354
                  27407
                  27433
                  27438
                  27444
                  27466
                  27566
                  29884
                  30157
                  30159
                  30715
                  32007
                  32323
                  32550
                  33109
                  33157
                  36030-36031
                  36641
                  40052
                  40341
                  40957
                  54588
                  64275
                  64292
                  394255
                  394749
                  398811
                  398814
                  398975

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:b5:18:4f:2f:7c:d3:12:e4:e3:fb:b5:9b:85:25:a3:5a:
         05:71:c0:03:0b:a6:c5:9c:6b:b6:1d:04:d5:73:42:74:60:c3:
         a5:65:25:82:55:6a:56:13:78:c0:4d:2a:9b:2c:e6:c5:63:28:
         21:59:e8:48:6f:be:64:cc:a3:53:f3:7b:14:8f:3a:d7:f9:1a:
         0f:20:01:0b:31:91:07:46:45:c2:e8:dc:1a:0a:cc:f3:fa:34:
         e0:63:8c:ed:a9:29:9a:c9:50:20:4d:d4:17:3e:ed:a0:b9:7b:
         99:02:fc:ef:fb:f0:ae:a9:24:3a:a2:79:d0:ff:d3:bd:98:bc:
         46:a6:46:91:64:f6:4a:e6:54:55:be:44:cb:28:dc:a5:2b:df:
         bf:91:6f:7c:94:7c:3a:c3:66:e1:9c:03:b3:71:a6:bb:50:e0:
         8c:f4:19:8a:70:12:67:32:de:01:95:ad:cc:76:51:b9:b1:39:
         cd:53:69:43:2c:15:45:99:f1:c6:b6:4b:24:8a:57:07:7a:86:
         27:d4:e3:a5:c6:3e:df:64:19:b7:c2:20:6b:df:17:92:c5:19:
         70:87:98:72:36:2b:27:4c:13:7a:90:c3:c6:c4:51:00:c9:19:
         09:c5:39:e7:6f:61:c3:87:93:d2:b3:57:6d:29:5e:a8:e4:1a:
         66:28:a3:0b
-----BEGIN CERTIFICATE-----
MIIJaTCCCFGgAwIBAgIUAQ0Mn0MoWEOtlZ9Lv//DIaXP5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAyNjEyMjgzMVoXDTI2MDEyODEzMjgzMVowLzEtMCsGA1UEAxMk
MTQxZDFmYjEtOTg0MS00NzcxLWI3NWYtN2U4NWYxMzI5MTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1epA89lDVYBlGrEG9JG18WjwvHTA9gB29c08
A5BbS17gz6Oz74LtvBLGU9NCAjeBPI+rvHyaLQCZHfZwwgFIkzgH3FC1WSN8xb+w
nl6zp70Dhqo4APksW++CYqOn6bW928gJRpOIUkK0TzzwYsPTuwHgEV26j0XDPnI7
AkzzxpoYBeHPcRmOcCEHz+bG+bZgVNm9Q4ZgtYJkxtVN3W9Senhb3LV+pLPKpZ6U
YSF1p8ic9U7QGtEcdRY29oYfmhM6kivjjKn7BDIB+GG2eupAhZstSVrITS5E2xtt
cV1+ISmJS7OEAjpd3jtQDMQJfD6Vj5KBl0/FyYs0wNMx57U6/QIDAQABo4IGezCC
BncwHQYDVR0OBBYEFDL3W/rUHbQvZ0o5hkCXIQik+4YIMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x
NDFkMWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1ZjEzMjkxNzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzE0MWQxZmIxLTk4NDEtNDc3MS1i
NzVmLTdlODVmMTMyOTE3NS8xNDFkMWZiMS05ODQxLTQ3NzEtYjc1Zi03ZTg1ZjEz
MjkxNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwggG7BggrBgEF
BQcBBwEB/wSCAaowggGmMIIBYQQCAAEwggFZAwQDMmQAAwQCMmQMMAwDBAEyZBID
BAAyZBYDBAZAv8ADBAVBbqADBABCJpADBABCJpIDBARD0tADBARD37ADBAVFLmAD
BABIHE0DBANKeaADBAVKyAADBARinlADBACOhq8DBACOhtEDBACOhvUDAwCO1wME
B5VhgAMEA63NwAMEALiW3DAMAwQAuJbnAwQEuJbgMAwDBADGIGMDBAPGIHAwDAME
AMYghQMEA8YggDAMAwQAxiCvAwQBxiCwMAwDBADGILUDBAPGILAwDAMEAcYgvgME
AMYgwDAMAwQAxiDxAwQCxiDwAwQCzIgMAwQAzi8qAwQCzjMkAwQCzn7sAwQAzsWp
MAwDBADO33MDBAPO33ADBADO33swDAMEAM7fgwMEA87fgDAMAwQAzt+JAwQAzt+K
AwQAzt+OAwQC0FyEAwQE0HOAAwQD2DfQAwQF2NwgAwQE2N3gMD8EAgACMDkDBwAg
AQUEAAAwEgMHACABBQQADQMHACABBQQAEgMFACABSBgDBQAmBagAAwUAJgZcgAMF
ACYH9vAwgdsGCCsGAQUFBwEIAQH/BIHLMIHIoIHFMIHCAgICWwICLzUCAi+cAgI0
2wICORECAkCpAgJJ8AICTdoCAlbYAgJkOgICalgCAmqIAgJqswICasICAmraAgJr
DwICaykCAmsuAgJrNAICa0oCAmuuAgJ0vAICdc0CAnXPAgJ3+wICfQcCAn5DAgJ/
JgIDAIFVAgMAgYUwCgIDAIy+AgMAjL8CAwCPIQIDAJx0AgMAnZUCAwCf/QIDANU8
AgMA+xMCAwD7JAIDBgQPAgMGBf0CAwYV2wIDBhXeAgMGFn8wVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMgy1
GE8vfNMS5OP7tZuFJaNaBXHAAwumxZxrth0E1XNCdGDDpWUlglVqVhN4wE0qmyzm
xWMoIVnoSG++ZMyjU/N7FI861/kaDyABCzGRB0ZFwujcGgrM8/o04GOM7akpmslQ
IE3UFz7toLl7mQL87/vwrqkkOqJ50P/TvZi8RqZGkWT2SuZUVb5EyyjcpSvfv5Fv
fJR8OsNm4ZwDs3Gmu1DgjPQZinASZzLeAZWtzHZRubE5zVNpQywVRZnxxrZLJIpX
B3qGJ9TjpcY+32QZt8Iga98XksUZcIeYcjYrJ0wTepDDxsRRAMkZCcU5529hw4eT
0rNXbSleqOQaZiijCw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:09 2024 by rpki-client on console-ams.rpki-client.org