Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer
File:                     2780f5b3-6e58-46dc-9841-4c845dccd557.cer (raw, json)
Hash identifier:          /3Go2GFIJT+Q/teS3alF8t7hPWc4bzr6HwJePonosoE=
Subject key identifier:   28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842D80CA4E7BA4C375A62D9E500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Aug 2023 00:45:20 +0000
Certificate not after:    Thu 13 Nov 2025 01:45:20 +0000
Subordinate resources:    AS: 40034
                          IP: 66.81.192.0/20
                          IP: 104.254.96.0/23
                          IP: 162.210.68.0/23
                          IP: 162.222.224.0/24
                          IP: 162.251.87.0/24
                          IP: 199.79.60.0/23
                          IP: 199.191.50.0/23
                          IP: 204.11.56.0/23
                          IP: 208.91.196.0/23
                          IP: 2604:10c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d8:0c:a4:e7:ba:4c:37:5a:62:d9:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 11 00:45:20 2023 GMT
            Not After : Nov 13 01:45:20 2025 GMT
        Subject: CN=2780f5b3-6e58-46dc-9841-4c845dccd557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:26:d5:a8:79:cd:7c:b4:a7:4b:c6:63:d1:35:
                    68:89:cd:d4:66:2a:df:f0:6d:2f:92:6a:72:db:c2:
                    11:d0:4d:66:d5:d6:3b:63:a9:c2:86:25:fc:81:88:
                    9f:07:d0:1d:16:dc:f0:5a:4b:c4:ab:c4:33:f4:a4:
                    58:04:bf:b8:26:9b:82:8b:c3:96:a7:80:a0:34:32:
                    77:23:d9:bc:ba:03:66:6f:1d:2f:cc:f7:9d:c7:76:
                    8f:52:e0:0c:cc:62:36:72:29:4b:11:3a:fc:85:7d:
                    7c:bb:57:e7:51:0e:da:78:a3:d4:54:da:40:20:47:
                    3e:f8:1e:8a:17:cd:88:77:90:4f:57:12:86:5b:9f:
                    fc:eb:98:d8:b0:2b:29:d3:9f:97:2f:1b:4a:92:79:
                    2d:f9:dd:27:00:fc:e1:c3:de:db:50:65:8b:4a:a4:
                    ca:90:0d:a7:90:3d:3b:77:71:44:d0:20:2b:f8:a8:
                    b8:0d:fe:70:11:05:51:4a:cc:25:14:72:4b:cb:3e:
                    b4:7d:07:e6:32:1e:c9:07:b3:a0:cf:66:b0:28:d3:
                    de:cd:d2:b8:9a:2f:fd:fb:e4:ae:ec:ae:8b:a9:e3:
                    b0:53:cd:b3:4d:2d:a9:33:33:ac:64:27:81:d0:50:
                    d5:df:6f:9e:ef:7a:9d:fc:15:8b:28:5c:8e:c1:2c:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.81.192.0/20
                  104.254.96.0/23
                  162.210.68.0/23
                  162.222.224.0/24
                  162.251.87.0/24
                  199.79.60.0/23
                  199.191.50.0/23
                  204.11.56.0/23
                  208.91.196.0/23
                IPv6:
                  2604:10c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40034

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:25:24:47:32:16:b3:16:bb:1f:59:8a:8c:4d:a9:f5:0c:
         68:77:f2:b7:18:68:21:6e:61:c6:b4:e2:46:cf:79:ba:a3:44:
         a0:29:10:2b:ca:80:bf:40:46:78:54:62:07:b7:98:63:08:ce:
         ba:64:ac:e9:bf:2a:8b:38:14:5d:98:f5:7e:3b:ba:ad:ac:70:
         98:01:5f:12:83:a7:30:e9:c1:fc:0a:ec:f8:26:4c:3f:9d:04:
         64:5a:ba:c8:af:2d:42:bd:ef:1c:d3:f3:81:7d:7f:e4:d4:2b:
         05:b0:6e:13:5b:ba:27:b2:d9:ee:01:41:8a:fa:2e:48:fc:e0:
         ab:24:8b:4c:58:7f:e2:b2:cb:f0:ff:62:fe:d1:42:a9:70:31:
         5d:be:54:c0:d9:6b:96:0e:ee:78:63:0c:18:24:21:13:19:21:
         c5:7a:27:e4:7e:d9:1b:90:89:fe:8d:af:26:91:ef:dd:5a:fa:
         bf:d5:6d:8b:b9:2e:d5:d9:3d:cc:91:17:a2:93:28:19:da:a1:
         e8:35:e8:77:a7:bf:3f:1c:5d:9b:60:2f:d0:35:90:38:92:53:
         15:e2:c2:2d:f3:67:bf:2c:84:ae:37:b9:32:98:76:94:8d:30:
         75:1a:3e:b6:8c:df:ee:6c:d9:94:f0:f7:f5:f3:ab:4e:d4:d6:
         b5:3c:90:2e
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWELYDKTnukw3WmLZ5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDgxMTAwNDUyMFoXDTI1MTExMzAxNDUyMFowLzEtMCsGA1UEAxMk
Mjc4MGY1YjMtNmU1OC00NmRjLTk4NDEtNGM4NDVkY2NkNTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlybVqHnNfLSnS8Zj0TVoic3UZirf8G0vkmpy
28IR0E1m1dY7Y6nChiX8gYifB9AdFtzwWkvEq8Qz9KRYBL+4JpuCi8OWp4CgNDJ3
I9m8ugNmbx0vzPedx3aPUuAMzGI2cilLETr8hX18u1fnUQ7aeKPUVNpAIEc++B6K
F82Id5BPVxKGW5/865jYsCsp05+XLxtKknkt+d0nAPzhw97bUGWLSqTKkA2nkD07
d3FE0CAr+Ki4Df5wEQVRSswlFHJLyz60fQfmMh7JB7Ogz2awKNPezdK4mi/9++Su
7K6LqeOwU82zTS2pMzOsZCeB0FDV32+e73qd/BWLKFyOwSw8oQIDAQABo4IEWjCC
BFYwHQYDVR0OBBYEFCjeRwM5RkpubCL39Cb9REjaxhhcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y
NzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRjY2Q1NTcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI3ODBmNWIzLTZlNTgtNDZkYy05
ODQxLTRjODQ1ZGNjZDU1Ny8yNzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRj
Y2Q1NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXgYIKwYBBQUH
AQcBAf8ETzBNMDwEAgABMDYDBARCUcADBAFo/mADBAGi0kQDBACi3uADBACi+1cD
BAHHTzwDBAHHvzIDBAHMCzgDBAHQW8QwDQQCAAIwBwMFACYEEMAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAJxiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhvJSRHMhazFrsfWYqMTan1DGh3
8rcYaCFuYca04kbPebqjRKApECvKgL9ARnhUYge3mGMIzrpkrOm/Kos4FF2Y9X47
uq2scJgBXxKDpzDpwfwK7PgmTD+dBGRausivLUK97xzT84F9f+TUKwWwbhNbuiey
2e4BQYr6Lkj84Kski0xYf+Kyy/D/Yv7RQqlwMV2+VMDZa5YO7nhjDBgkIRMZIcV6
J+R+2RuQif6NryaR791a+r/VbYu5LtXZPcyRF6KTKBnaoeg16Henvz8cXZtgL9A1
kDiSUxXiwi3zZ78shK43uTKYdpSNMHUaPraM3+5s2ZTw9/Xzq07U1rU8kC4=
-----END CERTIFICATE-----
Generated at Tue Jun 18 07:48:40 2024 by rpki-client on console-ams.rpki-client.org