Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
File:                     35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer (raw, json)
Hash identifier:          /JOilpiqL4vzO0GR/3X5ryxHpXFQ2c0CpcVkIs3s5Es=
Subject key identifier:   34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858420F198B4836D1AF8286A57500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 01:13:51 +0000
Certificate not after:    Tue 02 Sep 2025 01:13:51 +0000
Subordinate resources:    AS: 18986
                          IP: 66.51.160.0/20
                          IP: 148.163.160.0/20
                          IP: 173.255.152.0/21
                          IP: 202.130.217.0/24
                          IP: 203.21.47.0/24
                          IP: 203.21.104.0/24
                          IP: 203.28.168.0/24
                          IP: 203.30.143.0/24
                          IP: 203.30.211.0/24
                          IP: 203.34.15.0/24
                          IP: 203.57.110.0/24
                          IP: 2605:1c80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:19:8b:48:36:d1:af:82:86:a5:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 31 01:13:51 2023 GMT
            Not After : Sep  2 01:13:51 2025 GMT
        Subject: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:f1:43:10:63:eb:3b:e6:03:91:6d:38:db:
                    3a:af:9c:a4:23:64:12:a8:40:5f:4d:f3:fb:8d:37:
                    f2:a5:4b:91:c4:69:30:0a:0c:6c:18:cb:02:11:de:
                    21:57:07:c7:17:a5:2a:68:1d:49:c9:72:7b:46:2e:
                    09:69:74:1e:1b:44:8d:70:86:0d:3f:04:e0:4f:64:
                    13:86:6f:a4:5e:41:54:e6:c1:26:31:c8:20:a1:11:
                    7b:82:ac:a1:82:47:54:1b:f8:63:2c:e8:94:6f:d6:
                    19:cc:e7:8c:c2:fb:e6:1a:41:97:c0:9f:3f:48:a4:
                    c9:86:e7:27:f5:f7:8e:b3:00:2e:5d:ea:8a:77:4e:
                    c2:dd:29:37:19:2e:2a:76:a4:35:e0:2c:b6:f7:51:
                    9e:d7:61:ba:c1:bf:c7:c0:d1:67:e2:45:16:76:0a:
                    28:59:16:0b:a0:0b:72:65:68:3e:7a:ae:21:82:ac:
                    c2:fe:8e:85:4f:c0:af:47:04:90:77:ea:d7:77:6b:
                    7d:ee:32:89:4c:5a:de:37:cd:6a:81:27:35:45:c5:
                    c9:71:59:e7:c2:42:50:0c:61:9b:d1:0e:d8:e5:db:
                    6e:e3:20:9e:b3:df:10:ce:af:d8:35:72:bd:55:5f:
                    52:2b:39:8b:ab:0a:d7:82:d0:bd:cb:25:6f:13:df:
                    9c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.160.0/20
                  148.163.160.0/20
                  173.255.152.0/21
                  202.130.217.0/24
                  203.21.47.0/24
                  203.21.104.0/24
                  203.28.168.0/24
                  203.30.143.0/24
                  203.30.211.0/24
                  203.34.15.0/24
                  203.57.110.0/24
                IPv6:
                  2605:1c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18986

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:99:ed:8f:b1:38:28:cd:62:39:ff:f2:35:d7:7e:29:05:
         fe:27:7f:f6:cf:cc:98:66:76:dd:58:dd:ab:b4:af:ee:c8:83:
         64:05:d1:b9:a4:cf:34:99:ee:2f:b3:7d:fb:9d:d2:6d:5f:c5:
         c9:cb:7d:a7:2b:99:b6:35:18:e0:3e:53:97:eb:20:0c:f4:d1:
         f8:aa:c1:67:6d:af:27:4b:8a:fe:9e:85:86:f4:cf:78:a8:39:
         d0:56:4a:2f:eb:95:57:31:f7:13:d9:1b:b3:0f:f9:61:87:e3:
         a8:be:99:ad:f9:f4:3d:a6:7b:4a:cb:66:b8:10:ee:55:2a:33:
         51:6d:7f:4c:c5:80:b6:e2:23:4a:e9:6c:00:4b:c9:c8:7d:40:
         a5:87:2c:e1:7a:c1:ae:15:7d:0c:76:b5:13:90:fd:a7:82:a2:
         50:d2:62:da:d5:a2:e7:09:92:84:d8:08:5a:46:cf:c7:ee:d0:
         d0:1f:10:98:04:5f:ab:9f:12:c8:57:de:2a:98:df:31:b2:19:
         95:4f:6c:18:90:b9:c1:c3:61:fe:67:a2:38:a2:b7:a6:e8:cd:
         bf:b2:a8:21:7b:c1:30:e0:2e:db:87:65:a1:4c:97:0c:cd:ca:
         e4:b8:50:e4:6f:ca:25:c7:b9:20:2f:03:df:07:7d:2c:59:ec:
         0c:ec:28:e1
-----BEGIN CERTIFICATE-----
MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEIPGYtINtGvgoaldQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDUzMTAxMTM1MVoXDTI1MDkwMjAxMTM1MVowLzEtMCsGA1UEAxMk
MzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4ZmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7xQxBj6zvmA5FtONs6r5ykI2QSqEBfTfP7
jTfypUuRxGkwCgxsGMsCEd4hVwfHF6UqaB1JyXJ7Ri4JaXQeG0SNcIYNPwTgT2QT
hm+kXkFU5sEmMcggoRF7gqyhgkdUG/hjLOiUb9YZzOeMwvvmGkGXwJ8/SKTJhucn
9feOswAuXeqKd07C3Sk3GS4qdqQ14Cy291Ge12G6wb/HwNFn4kUWdgooWRYLoAty
ZWg+eq4hgqzC/o6FT8CvRwSQd+rXd2t97jKJTFreN81qgSc1RcXJcVnnwkJQDGGb
0Q7Y5dtu4yCes98Qzq/YNXK9VV9SKzmLqwrXgtC9yyVvE9+cXwIDAQABo4IEZTCC
BGEwHQYDVR0OBBYEFDSu1iL1vqscMp5VEc12A3VQnBcFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z
NWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM1YTNmMDg4LTA1YjctNDcwYS05
YWY1LTQ1YmQyNWVlOGZjMS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVl
ZThmYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwagYIKwYBBQUH
AQcBAf8EWzBZMEgEAgABMEIDBARCM6ADBASUo6ADBAOt/5gDBADKgtkDBADLFS8D
BADLFWgDBADLHKgDBADLHo8DBADLHtMDBADLIg8DBADLOW4wDQQCAAIwBwMFACYF
HIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSiowVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL2WZ7Y+xOCjN
Yjn/8jXXfikF/id/9s/MmGZ23Vjdq7Sv7siDZAXRuaTPNJnuL7N9+53SbV/Fyct9
pyuZtjUY4D5Tl+sgDPTR+KrBZ22vJ0uK/p6FhvTPeKg50FZKL+uVVzH3E9kbsw/5
YYfjqL6Zrfn0PaZ7SstmuBDuVSozUW1/TMWAtuIjSulsAEvJyH1ApYcs4XrBrhV9
DHa1E5D9p4KiUNJi2tWi5wmShNgIWkbPx+7Q0B8QmARfq58SyFfeKpjfMbIZlU9s
GJC5wcNh/meiOKK3pujNv7KoIXvBMOAu24dloUyXDM3K5LhQ5G/KJce5IC8D3wd9
LFnsDOwo4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:17 2024 by rpki-client on console-fra.rpki-client.org