Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
File:                     eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer (raw, json)
Hash identifier:          Uc07yJTceiJHSNsKFVoU9+CK2N3LodPKhivUJN8NeNc=
Subject key identifier:   40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285843710CA448BEBA83CBB843CD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Oct 2023 20:04:01 +0000
Certificate not after:    Tue 06 Jan 2026 21:04:01 +0000
Subordinate resources:    AS: 291 -- 293
                          AS: 3425 -- 3445
                          IP: 128.55.0.0/16
                          IP: 134.55.0.0/16
                          IP: 192.74.210.0 -- 192.74.212.255
                          IP: 192.74.214.0/23
                          IP: 192.74.217.0/24
                          IP: 192.124.50.0 -- 192.124.59.255
                          IP: 192.188.22.0 -- 192.188.41.255
                          IP: 198.124.0.0 -- 198.131.255.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:71:0c:a4:48:be:ba:83:cb:b8:43:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Oct  4 20:04:01 2023 GMT
            Not After : Jan  6 21:04:01 2026 GMT
        Subject: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:f3:33:72:ba:b9:dc:56:0d:50:0b:1b:94:
                    46:a4:b9:4c:91:be:34:f7:e3:81:1a:1f:9c:d8:4f:
                    e7:77:60:53:26:46:b6:63:13:60:bf:68:50:02:61:
                    79:1e:bd:b4:17:bb:2c:3e:15:a5:c9:f5:a2:ee:3c:
                    80:ad:2e:4c:44:78:59:aa:d6:96:09:ca:d2:bb:71:
                    a7:3e:2e:7c:fa:65:3d:92:48:bd:94:b7:0f:bb:6f:
                    74:9a:52:e8:47:69:4f:ec:87:77:cd:93:7a:97:2e:
                    85:76:10:e7:4e:af:00:6b:eb:b3:b0:00:94:8a:aa:
                    55:df:03:e5:ac:ae:ba:39:5d:f5:28:59:e7:82:81:
                    3f:3a:b0:e3:7a:07:ba:53:7e:aa:7d:6b:d0:48:1e:
                    19:e1:17:fc:e1:c9:c8:30:ac:e2:c8:00:f7:38:4b:
                    95:d3:51:c9:0c:e7:4f:a1:3d:55:36:7b:f6:62:25:
                    b4:66:2e:06:3d:5c:9c:d2:91:28:1b:f6:6b:b5:a7:
                    ce:99:18:6f:cc:c5:2f:21:57:6f:35:05:6b:a7:c7:
                    a2:a8:4b:af:de:c9:55:1c:52:b3:e0:dc:8c:de:fa:
                    76:0c:dc:81:68:83:c4:6c:e3:9b:41:9e:90:8b:3d:
                    b1:87:aa:dd:3d:8c:29:e0:48:a1:31:11:b0:31:e7:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.55.0.0/16
                  134.55.0.0/16
                  192.74.210.0-192.74.212.255
                  192.74.214.0/23
                  192.74.217.0/24
                  192.124.50.0-192.124.59.255
                  192.188.22.0-192.188.41.255
                  198.124.0.0-198.131.255.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  291-293
                  3425-3445

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:48:4d:1f:52:0a:e2:b8:ae:78:cf:56:42:7e:b8:31:c6:d4:
         4e:33:60:e5:8e:98:18:63:fa:85:79:0e:69:9e:04:17:0b:33:
         81:cd:8e:65:b8:a2:69:47:c5:87:ee:13:53:36:16:cb:b9:6b:
         13:e3:46:a6:41:b1:7a:ed:59:60:6e:24:93:ad:71:1e:27:8f:
         4d:2e:5a:b9:c8:8d:a5:47:81:ab:bf:b3:11:2d:90:cc:5d:60:
         c2:d3:e1:d4:5f:3f:44:ea:71:34:de:9e:b2:f1:27:35:24:ae:
         b0:4a:9d:e9:26:cb:a8:f4:b1:fd:a5:69:14:f2:7a:e9:49:36:
         f6:ff:b9:9c:a4:3f:a6:de:5c:1f:e7:1c:2c:c0:9a:e2:01:43:
         b1:9a:1c:2f:2d:49:00:cb:87:f1:5c:f5:e4:b6:7a:ce:29:10:
         63:b8:c8:ae:74:42:97:43:d9:72:50:09:4f:15:a0:f1:86:9f:
         c5:95:6b:a2:c9:9a:f6:5a:7f:7b:0f:19:38:0a:fc:b7:56:66:
         0d:ce:f3:dd:38:f2:06:b3:95:50:ae:a3:95:af:bf:cf:d5:ca:
         85:59:bc:58:fc:4a:55:7f:e7:8d:19:39:39:8c:8d:4d:0e:de:
         bc:64:f4:aa:2b:c5:41:1b:86:f2:56:12:7e:ae:1d:7d:b3:dd:
         78:81:34:9a
-----BEGIN CERTIFICATE-----
MIIHXjCCBkagAwIBAgIUAQ0Mn0MoWENxDKRIvrqDy7hDzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTAwNDIwMDQwMVoXDTI2MDEwNjIxMDQwMVowLzEtMCsGA1UEAxMk
ZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAzZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCTzM3K6udxWDVALG5RGpLlMkb409+OBGh+c
2E/nd2BTJka2YxNgv2hQAmF5Hr20F7ssPhWlyfWi7jyArS5MRHhZqtaWCcrSu3Gn
Pi58+mU9kki9lLcPu290mlLoR2lP7Id3zZN6ly6FdhDnTq8Aa+uzsACUiqpV3wPl
rK66OV31KFnngoE/OrDjege6U36qfWvQSB4Z4Rf84cnIMKziyAD3OEuV01HJDOdP
oT1VNnv2YiW0Zi4GPVyc0pEoG/ZrtafOmRhvzMUvIVdvNQVrp8eiqEuv3slVHFKz
4NyM3vp2DNyBaIPEbOObQZ6Qiz2xh6rdPYwp4EihMRGwMedvkwIDAQABo4IEcDCC
BGwwHQYDVR0OBBYEFEDOLrB02HNT1kvH8306bEpkRsUkMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
YjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ViMTZlZjhhLWY4YWEtNGExNC04
ZTMwLWIwMjYzMzEwM2ZjNS9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMx
MDNmYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwZQYIKwYBBQUH
AQcBAf8EVjBUMFIEAgABMEwDAwCANwMDAIY3MAwDBAHAStIDBADAStQDBAHAStYD
BADAStkwDAMEAcB8MgMEAsB8ODAMAwQBwLwWAwQBwLwoMAoDAwLGfAMDAsaAMCkG
CCsGAQUFBwEIAQH/BBowGKAWMBQwCAICASMCAgElMAgCAg1hAgINdTBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQBwSE0fUgriuK54z1ZCfrgxxtROM2DljpgYY/qFeQ5pngQXCzOBzY5luKJpR8WH
7hNTNhbLuWsT40amQbF67VlgbiSTrXEeJ49NLlq5yI2lR4Grv7MRLZDMXWDC0+HU
Xz9E6nE03p6y8Sc1JK6wSp3pJsuo9LH9pWkU8nrpSTb2/7mcpD+m3lwf5xwswJri
AUOxmhwvLUkAy4fxXPXktnrOKRBjuMiudEKXQ9lyUAlPFaDxhp/FlWuiyZr2Wn97
Dxk4Cvy3VmYNzvPdOPIGs5VQrqOVr7/P1cqFWbxY/EpVf+eNGTk5jI1NDt68ZPSq
K8VBG4byVhJ+rh19s914gTSa
-----END CERTIFICATE-----
Generated at Wed May 8 15:33:30 2024 by rpki-client on console-fra.rpki-client.org