Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer
File:                     c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer (raw, json)
Hash identifier:          HQdmr4JyEkYCB1dKCCLRfOaaopf0lDmh34ej/i7qgiw=
Subject key identifier:   68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848BE7E99475E5CFEADEB586100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 02 Feb 2025 01:45:33 +0000
Certificate not after:    Sat 08 May 2027 00:45:33 +0000
Subordinate resources:    AS: 53949
                          IP: 162.213.172.0/22
                          IP: 173.225.144.0/20
                          IP: 192.119.134.0/24
                          IP: 198.98.208.0/20
                          IP: 206.198.204.0/22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:7e:99:47:5e:5c:fe:ad:eb:58:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  2 01:45:33 2025 GMT
            Not After : May  8 00:45:33 2027 GMT
        Subject: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d3:dc:cc:c9:1d:8b:26:c7:b2:94:99:6a:a0:
                    90:3a:08:e5:e6:34:14:d8:12:35:43:7f:e6:62:a9:
                    79:93:1d:c3:d3:d0:f8:74:00:37:aa:07:d8:38:21:
                    70:8c:40:ab:b0:9e:96:94:70:dc:99:29:ae:da:e9:
                    f0:d6:47:4d:34:dd:ff:4f:b3:45:ce:3f:3d:e5:ab:
                    cc:94:cc:30:00:8d:ad:a8:c7:f9:bc:e3:93:cc:da:
                    d8:9e:e9:17:55:17:97:50:a2:8f:80:5e:48:6c:3a:
                    2c:a3:52:9d:97:60:ea:7a:16:27:bc:d0:ba:42:ec:
                    1f:29:0f:d1:0f:6f:90:c6:4f:d2:55:de:35:46:1d:
                    69:0e:70:aa:6b:71:42:37:6e:a9:a6:37:a4:9d:a2:
                    3a:b2:81:c2:0e:3e:c6:51:65:1e:31:02:cd:10:a7:
                    71:5b:1c:ca:3a:fb:2d:ec:69:ff:f5:12:27:cf:95:
                    4c:9c:c2:05:4f:de:db:ee:a5:1e:88:02:6a:11:3a:
                    85:bc:d1:ca:1c:f5:76:93:d5:f4:da:56:7c:ef:e7:
                    93:da:c3:b6:22:74:41:fc:31:10:01:b7:e4:22:fb:
                    9c:fb:b4:0b:82:30:eb:d7:37:5b:8f:de:7f:29:0f:
                    93:a2:fe:0f:75:dd:f4:8c:dd:82:8c:2b:61:b8:41:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.172.0/22
                  173.225.144.0/20
                  192.119.134.0/24
                  198.98.208.0/20
                  206.198.204.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53949

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:67:92:32:18:23:07:c5:af:f0:d7:60:e8:9e:6a:53:d1:dd:
         72:4a:be:35:28:bf:c1:70:11:d9:d0:98:88:52:ba:3d:03:04:
         b1:7e:51:a4:41:a9:02:5e:41:0f:79:d5:69:dc:b3:82:38:0c:
         05:f3:67:8f:0a:a5:ce:86:85:89:89:ab:50:2e:de:6b:ea:3d:
         11:50:83:2d:12:a7:6e:d7:82:b1:1d:0f:50:aa:f1:36:f7:a3:
         6c:d9:ee:78:d5:14:ed:d1:71:56:f9:ac:e2:2c:fe:3f:b1:f3:
         1b:64:a2:9a:08:99:a2:31:96:b1:cd:6e:a8:95:f9:d8:f8:fa:
         10:58:e7:75:89:b7:35:58:38:81:99:f2:52:87:9b:69:8b:8a:
         66:b5:ea:1c:60:8b:46:f2:21:16:4b:b0:7b:75:7b:28:00:82:
         c3:c9:b9:fc:92:bf:83:da:3e:c1:eb:3d:d3:2a:d1:5d:4f:e5:
         8b:d0:77:8b:25:d6:92:e0:cf:5a:87:4b:dc:40:38:50:60:2e:
         76:76:7a:5f:2a:1f:fa:26:7e:13:ab:ec:98:36:35:e2:c1:6a:
         ed:82:46:ce:6c:50:4b:3d:57:2b:49:15:c1:d7:03:ce:09:f8:
         e0:b0:5b:a8:01:c1:71:af:31:f4:c9:83:06:ce:46:76:44:16:
         fe:d6:6e:4c
-----BEGIN CERTIFICATE-----
MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEi+fplHXlz+retYYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk
YzliMDZjNTItYzY4ZC00NGVjLWFlNjUtN2ViYjJhOTlkNmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9PczMkdiybHspSZaqCQOgjl5jQU2BI1Q3/m
Yql5kx3D09D4dAA3qgfYOCFwjECrsJ6WlHDcmSmu2unw1kdNNN3/T7NFzj895avM
lMwwAI2tqMf5vOOTzNrYnukXVReXUKKPgF5IbDoso1Kdl2DqehYnvNC6QuwfKQ/R
D2+Qxk/SVd41Rh1pDnCqa3FCN26ppjeknaI6soHCDj7GUWUeMQLNEKdxWxzKOvst
7Gn/9RInz5VMnMIFT97b7qUeiAJqETqFvNHKHPV2k9X02lZ87+eT2sO2InRB/DEQ
AbfkIvuc+7QLgjDr1zdbj95/KQ+Tov4Pdd30jN2CjCthuEHf7wIDAQABo4IEMzCC
BC8wHQYDVR0OBBYEFGjsn8I5tFip1JQ4C6/BWB3oWb1/MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j
OWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5OWQ2Y2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5YjA2YzUyLWM2OGQtNDRlYy1h
ZTY1LTdlYmIyYTk5ZDZjYy9jOWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5
OWQ2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNwYIKwYBBQUH
AQcBAf8EKDAmMCQEAgABMB4DBAKi1awDBASt4ZADBADAd4YDBATGYtADBALOxsww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANK9MFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAVnkjIYIwfFr/DX
YOiealPR3XJKvjUov8FwEdnQmIhSuj0DBLF+UaRBqQJeQQ951Wncs4I4DAXzZ48K
pc6GhYmJq1Au3mvqPRFQgy0Sp27XgrEdD1Cq8Tb3o2zZ7njVFO3RcVb5rOIs/j+x
8xtkopoImaIxlrHNbqiV+dj4+hBY53WJtzVYOIGZ8lKHm2mLima16hxgi0byIRZL
sHt1eygAgsPJufySv4PaPsHrPdMq0V1P5YvQd4sl1pLgz1qHS9xAOFBgLnZ2el8q
H/omfhOr7Jg2NeLBau2CRs5sUEs9VytJFcHXA84J+OCwW6gBwXGvMfTJgwbORnZE
Fv7Wbkw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 14:33:31 2025 by rpki-client