Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
File:                     4d4940f4-61c2-4251-acdb-36be83cdc744.cer (raw, json)
Hash identifier:          hd48SKPszB6z5HqUqBLdjOMR5Ys1Uoq6MJ992Qngyig=
Subject key identifier:   3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843EC8C1A0EE867C6CFFBC5D300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 18 Nov 2023 01:45:15 +0000
Certificate not after:    Fri 20 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 3672
                          AS: 5688
                          AS: 6407
                          AS: 7036
                          AS: 7443
                          IP: 67.230.128.0/19
                          IP: 108.63.0.0 -- 108.63.13.255
                          IP: 108.63.18.0 -- 108.63.21.255
                          IP: 108.63.30.0 -- 108.63.255.255
                          IP: 173.206.0.0/16
                          IP: 204.48.0.0/21
                          IP: 205.207.88.0 -- 205.207.90.255
                          IP: 205.210.104.0/24
                          IP: 207.112.0.0/22
                          IP: 207.112.8.0/24
                          IP: 207.112.16.0 -- 207.112.45.255
                          IP: 207.112.47.0 -- 207.112.69.255
                          IP: 207.112.71.0 -- 207.112.127.255
                          IP: 209.90.128.0/21
                          IP: 209.90.141.0 -- 209.90.157.255
                          IP: 209.90.159.0 -- 209.90.170.255
                          IP: 209.90.172.0/23
                          IP: 209.90.177.0 -- 209.90.187.255
                          IP: 209.90.190.0/23
                          IP: 209.183.0.0 -- 209.183.11.255
                          IP: 209.183.13.0 -- 209.183.19.255
                          IP: 209.183.21.0 -- 209.183.31.255
                          IP: 209.216.128.0 -- 209.216.136.255
                          IP: 209.216.138.0 -- 209.216.159.255
                          IP: 209.225.128.0/18
                          IP: 209.227.128.0/18
                          IP: 216.181.0.0/24
                          IP: 216.181.3.0/24
                          IP: 216.181.5.0 -- 216.181.18.255
                          IP: 216.181.21.0 -- 216.181.97.255
                          IP: 216.181.109.0 -- 216.181.119.255
                          IP: 216.181.121.0/24
                          IP: 216.181.124.0/24
                          IP: 216.181.126.0 -- 216.181.129.255
                          IP: 216.181.131.0 -- 216.181.157.255
                          IP: 216.181.166.0 -- 216.181.229.255
                          IP: 216.181.232.0 -- 216.181.247.255
                          IP: 216.181.250.0 -- 216.181.255.255
                          IP: 216.254.128.0 -- 216.254.157.255
                          IP: 216.254.160.0 -- 216.254.168.255
                          IP: 216.254.170.0 -- 216.254.196.255
                          IP: 216.254.198.0/23
                          IP: 216.254.204.0 -- 216.254.208.255
                          IP: 216.254.210.0 -- 216.254.222.255
                          IP: 2604:7f00::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ec:8c:1a:0e:e8:67:c6:cf:fb:c5:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 18 01:45:15 2023 GMT
            Not After : Feb 20 01:45:15 2026 GMT
        Subject: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:23:91:79:3c:9a:50:65:cf:aa:fb:93:58:
                    b1:02:d6:34:3b:f0:34:ee:5f:12:76:a3:65:ad:bc:
                    79:37:1b:8a:aa:18:23:47:be:61:d1:b1:14:1c:51:
                    f8:b2:85:a5:b5:dd:e2:9c:e2:71:d8:a7:63:5b:67:
                    ba:d3:d8:62:4d:2a:01:51:f3:c9:0f:07:b1:bb:a0:
                    59:5d:74:11:7a:4c:75:6e:4a:75:69:7e:4a:c0:8f:
                    e0:dd:ff:99:8a:7d:c4:60:09:fd:f5:e0:f0:ca:95:
                    9e:fd:a0:87:3e:56:87:52:ce:31:8c:54:27:e0:1d:
                    09:5a:f0:12:74:6c:95:01:95:a1:d8:fc:04:7c:3a:
                    75:11:3b:6d:64:61:bc:fd:46:25:5d:87:2c:e0:d3:
                    05:7f:e0:9e:f0:24:e5:6c:c8:95:bb:bf:15:90:81:
                    f7:31:4a:45:9b:ca:a4:07:9e:45:cb:12:02:e8:a8:
                    df:6c:90:6d:6e:01:85:5f:c1:e2:78:57:b2:9c:3c:
                    d7:ea:35:e0:0a:19:46:5a:de:48:17:50:01:28:5e:
                    5f:34:fa:00:d2:40:c8:b5:6c:41:cc:6a:47:d3:17:
                    fb:55:bc:b7:22:bb:fd:e1:28:67:f0:5e:c6:f0:94:
                    9a:e6:41:09:7c:2e:19:f1:97:ba:19:4e:fa:e3:ff:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.230.128.0/19
                  108.63.0.0-108.63.13.255
                  108.63.18.0-108.63.21.255
                  108.63.30.0-108.63.255.255
                  173.206.0.0/16
                  204.48.0.0/21
                  205.207.88.0-205.207.90.255
                  205.210.104.0/24
                  207.112.0.0/22
                  207.112.8.0/24
                  207.112.16.0-207.112.45.255
                  207.112.47.0-207.112.69.255
                  207.112.71.0-207.112.127.255
                  209.90.128.0/21
                  209.90.141.0-209.90.157.255
                  209.90.159.0-209.90.170.255
                  209.90.172.0/23
                  209.90.177.0-209.90.187.255
                  209.90.190.0/23
                  209.183.0.0-209.183.11.255
                  209.183.13.0-209.183.19.255
                  209.183.21.0-209.183.31.255
                  209.216.128.0-209.216.136.255
                  209.216.138.0-209.216.159.255
                  209.225.128.0/18
                  209.227.128.0/18
                  216.181.0.0/24
                  216.181.3.0/24
                  216.181.5.0-216.181.18.255
                  216.181.21.0-216.181.97.255
                  216.181.109.0-216.181.119.255
                  216.181.121.0/24
                  216.181.124.0/24
                  216.181.126.0-216.181.129.255
                  216.181.131.0-216.181.157.255
                  216.181.166.0-216.181.229.255
                  216.181.232.0-216.181.247.255
                  216.181.250.0-216.181.255.255
                  216.254.128.0-216.254.157.255
                  216.254.160.0-216.254.168.255
                  216.254.170.0-216.254.196.255
                  216.254.198.0/23
                  216.254.204.0-216.254.208.255
                  216.254.210.0-216.254.222.255
                IPv6:
                  2604:7f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3672
                  5688
                  6407
                  7036
                  7443

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d1:ee:01:ec:e8:7c:d7:bf:99:27:e8:e3:36:52:d4:fb:7d:
         cb:85:71:27:ba:48:40:a8:90:4e:69:41:d7:29:05:1f:b0:81:
         59:dc:f1:ca:46:04:6b:e0:0b:f8:8f:e4:58:33:eb:00:a2:99:
         c6:3e:7e:21:f9:93:f0:01:72:8b:75:44:68:c1:8c:ba:ed:0d:
         ae:8c:10:17:08:2d:9d:40:dc:1b:a6:f0:0c:3d:c6:e2:8d:99:
         cc:64:dd:77:b3:29:c2:af:da:b1:37:10:af:46:43:84:e9:24:
         90:27:78:ac:4f:28:19:37:c6:eb:d4:6e:a9:d0:74:a4:ef:87:
         7b:b0:d3:48:ec:4d:95:38:e7:4d:d3:d9:67:12:b4:d0:49:43:
         34:07:0d:ff:47:00:e4:00:24:73:9b:3a:5d:59:ba:65:53:6e:
         bb:ac:77:a3:bc:ae:84:d1:ca:f9:68:6c:2d:40:48:55:1d:22:
         89:95:b5:3c:a2:c5:38:60:46:5c:2b:b9:6a:c6:54:43:66:44:
         89:a0:ad:bf:7f:bc:53:c1:ee:7e:f6:dd:4b:ab:ac:bf:af:d9:
         d9:50:68:c8:fd:a1:2e:3c:b7:7c:a9:e5:34:e2:81:96:6e:5d:
         c7:06:2b:81:5b:fa:82:f5:2f:d5:c6:7a:49:ac:7c:b0:a9:01:
         6e:b0:51:2c
-----BEGIN CERTIFICATE-----
MIIJDjCCB/agAwIBAgIUAQ0Mn0MoWEPsjBoO6GfGz/vF0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMTExODAxNDUxNVoXDTI2MDIyMDAxNDUxNVowLzEtMCsGA1UEAxMk
NGQ0OTQwZjQtNjFjMi00MjUxLWFjZGItMzZiZTgzY2RjNzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXUjkXk8mlBlz6r7k1ixAtY0O/A07l8SdqNl
rbx5NxuKqhgjR75h0bEUHFH4soWltd3inOJx2KdjW2e609hiTSoBUfPJDwexu6BZ
XXQRekx1bkp1aX5KwI/g3f+Zin3EYAn99eDwypWe/aCHPlaHUs4xjFQn4B0JWvAS
dGyVAZWh2PwEfDp1ETttZGG8/UYlXYcs4NMFf+Ce8CTlbMiVu78VkIH3MUpFm8qk
B55FyxIC6KjfbJBtbgGFX8HieFeynDzX6jXgChlGWt5IF1ABKF5fNPoA0kDItWxB
zGpH0xf7Vby3Irv94Shn8F7G8JSa5kEJfC4Z8Ze6GU764/9E6wIDAQABo4IGIDCC
BhwwHQYDVR0OBBYEFD3Xr9ZOg5gWOCyB/ZJW0odqM5nCMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80
ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNjZGM3NDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzRkNDk0MGY0LTYxYzItNDI1MS1h
Y2RiLTM2YmU4M2NkYzc0NC80ZDQ5NDBmNC02MWMyLTQyNTEtYWNkYi0zNmJlODNj
ZGM3NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwggITBggrBgEF
BQcBBwEB/wSCAgIwggH+MIIB6wQCAAEwggHjAwQFQ+aAMAsDAwBsPwMEAWw/DDAM
AwQBbD8SAwQBbD8UMAsDBAFsPx4DAwZsAAMDAK3OAwQDzDAAMAwDBAPNz1gDBADN
z1oDBADN0mgDBALPcAADBADPcAgwDAMEBM9wEAMEAc9wLDAMAwQAz3AvAwQBz3BE
MAwDBADPcEcDBAfPcAADBAPRWoAwDAMEANFajQMEAdFanDAMAwQA0VqfAwQA0Vqq
AwQB0VqsMAwDBADRWrEDBALRWrgDBAHRWr4wCwMDANG3AwQC0bcIMAwDBADRtw0D
BALRtxAwDAMEANG3FQMEBdG3ADAMAwQH0diAAwQA0diIMAwDBAHR2IoDBAXR2IAD
BAbR4YADBAbR44ADBADYtQADBADYtQMwDAMEANi1BQMEANi1EjAMAwQA2LUVAwQB
2LVgMAwDBADYtW0DBAPYtXADBADYtXkDBADYtXwwDAMEAdi1fgMEAdi1gDAMAwQA
2LWDAwQB2LWcMAwDBAHYtaYDBAHYteQwDAMEA9i16AMEA9i18DALAwQB2LX6AwMB
2LQwDAMEB9j+gAMEAdj+nDAMAwQF2P6gAwQA2P6oMAwDBAHY/qoDBADY/sQDBAHY
/sYwDAMEAtj+zAMEANj+0DAMAwQB2P7SAwQA2P7eMA0EAgACMAcDBQAmBH8AMCkG
CCsGAQUFBwEIAQH/BBowGKAWMBQCAg5YAgIWOAICGQcCAht8AgIdEzBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQA20e4B7Oh817+ZJ+jjNlLU+33LhXEnukhAqJBOaUHXKQUfsIFZ3PHKRgRr4Av4
j+RYM+sAopnGPn4h+ZPwAXKLdURowYy67Q2ujBAXCC2dQNwbpvAMPcbijZnMZN13
synCr9qxNxCvRkOE6SSQJ3isTygZN8br1G6p0HSk74d7sNNI7E2VOOdN09lnErTQ
SUM0Bw3/RwDkACRzmzpdWbplU267rHejvK6E0cr5aGwtQEhVHSKJlbU8osU4YEZc
K7lqxlRDZkSJoK2/f7xTwe5+9t1Lq6y/r9nZUGjI/aEuPLd8qeU04oGWbl3HBiuB
W/qC9S/VxnpJrHywqQFusFEs
-----END CERTIFICATE-----
Generated at Sun Jun 23 15:04:18 2024 by rpki-client on console-fra.rpki-client.org