Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
File:                     be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (raw, json)
Hash identifier:          GIFJ3X4m3R/20pQ57MmbIzG5jHFfEFk0GsCKJiMAjYA=
Subject key identifier:   9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57
Certificate issuer:       /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f
Certificate serial:       010D0C9F4328584215D62C13609C798F203F1478
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 02 Jun 2023 11:08:46 +0000
Certificate not after:    Thu 04 Sep 2025 11:08:46 +0000
Subordinate resources:    AS: 396864
                          IP: 199.204.160.0/22
                          IP: 2604:d740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:15:d6:2c:13:60:9c:79:8f:20:3f:14:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f
        Validity
            Not Before: Jun  2 11:08:46 2023 GMT
            Not After : Sep  4 11:08:46 2025 GMT
        Subject: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:d3:0a:7b:58:71:95:ab:0c:5f:c2:e8:cf:
                    db:5e:43:63:73:3f:4e:1a:87:b2:06:8e:35:b4:47:
                    f6:91:36:c7:f4:c6:b8:5a:de:83:8b:cf:ac:43:4a:
                    d0:58:d6:d8:aa:8b:e9:35:c4:4c:19:35:da:81:54:
                    f8:c0:1a:ef:0f:fb:ca:26:0b:8c:b8:51:63:7e:94:
                    1c:4d:7b:4e:59:69:fd:fe:86:78:06:8a:69:bd:db:
                    40:41:24:dc:0b:96:1b:88:91:77:03:67:f9:e3:e5:
                    b7:94:d0:09:45:91:f1:40:ac:02:a5:64:89:dc:8f:
                    25:c6:9f:c2:ed:d8:e9:36:53:41:23:4b:64:b5:de:
                    21:69:52:5c:38:00:d5:e6:9c:8e:63:d5:67:02:58:
                    90:4c:73:cc:11:ce:4a:01:37:68:ae:f1:af:fe:48:
                    8e:04:89:18:3a:8b:15:97:ff:bd:fa:f8:c3:31:bc:
                    a1:2b:d3:ae:26:f0:cb:bc:9f:5e:44:96:7c:9f:f5:
                    32:d3:e9:63:6e:19:d5:c0:68:92:ba:b2:93:d4:cb:
                    d1:93:88:8a:55:75:9f:d7:e7:6d:60:a2:3a:42:13:
                    cc:64:e4:0f:10:14:15:fb:cf:92:45:00:b1:81:e0:
                    bc:9b:ea:5a:84:4d:c7:35:30:30:85:0a:99:b9:35:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl

            X509v3 Authority Key Identifier:
                keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.160.0/22
                IPv6:
                  2604:d740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396864

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5b:88:a8:a3:e0:68:71:70:8c:28:33:e6:aa:7d:15:a5:95:
         72:0d:4b:7a:6a:7b:da:9a:66:e0:cb:8d:7a:ed:60:a9:0e:7e:
         98:ae:d6:cb:3a:62:54:43:7c:0f:10:ac:20:c2:de:fa:8e:e6:
         96:77:55:61:b0:0b:c6:93:72:f2:38:0a:b8:5c:f1:18:ea:7b:
         00:2c:b3:17:b7:91:80:74:bb:c7:56:fd:cf:12:7c:61:a1:c9:
         8f:07:bc:ca:03:0a:fd:83:72:d9:9f:71:db:4e:91:db:77:41:
         52:17:19:e9:04:9a:0b:95:e7:27:34:4e:6a:20:ab:89:25:d1:
         b8:d4:93:9a:39:b6:5f:b6:91:63:91:12:22:fd:14:d4:ca:12:
         78:97:42:2c:27:f3:af:2c:67:f0:54:52:43:c4:01:9f:5c:c5:
         8d:64:5c:8f:68:f1:aa:59:0c:40:48:19:80:e7:7a:d8:ff:bf:
         ad:46:1c:0c:8c:28:c2:f8:35:c8:52:b4:89:e8:83:9e:9a:68:
         9a:a0:75:5d:6b:37:f0:62:35:10:40:0b:ef:47:58:da:2a:65:
         ba:61:07:84:42:4a:7a:ce:94:7f:8f:a3:5a:c6:65:50:8e:11:
         58:82:71:51:8e:ea:04:90:60:00:89:e4:7e:d3:d8:4e:d4:e7:
         28:0d:0d:a2
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWEIV1iwTYJx5jyA/FHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNlOTlk
MDhmMB4XDTIzMDYwMjExMDg0NloXDTI1MDkwNDExMDg0NlowPTE7MDkGA1UEAxMy
YmU0OWFkYWIxNDA0NDg3ZmE5ZmQ1ZTFmOGU2YzE5YzA5OTM2MTBjZWFmNTU2Mzhi
YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Z9MKe1hxlasMX8Lo
z9teQ2NzP04ah7IGjjW0R/aRNsf0xrha3oOLz6xDStBY1tiqi+k1xEwZNdqBVPjA
Gu8P+8omC4y4UWN+lBxNe05Zaf3+hngGimm920BBJNwLlhuIkXcDZ/nj5beU0AlF
kfFArAKlZIncjyXGn8Lt2Ok2U0EjS2S13iFpUlw4ANXmnI5j1WcCWJBMc8wRzkoB
N2iu8a/+SI4EiRg6ixWX/736+MMxvKEr064m8Mu8n15Elnyf9TLT6WNuGdXAaJK6
spPUy9GTiIpVdZ/X521gojpCE8xk5A8QFBX7z5JFALGB4Lyb6lqETcc1MDCFCpm5
Nb87AgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUn3zubmNgEPk8A0bu3lVlcY7vYqcw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTBjZmViNzAxODU1YWNh
NGIxNzM0MzQvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTBjZmViNzAxODU1YWNhNGIxNzM0MzQv
MC85RjdDRUU2RTYzNjAxMEY5M0MwMzQ2RUVERTU1NjU3MThFRUY2MkE3Lm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj
Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NmM2E4MTJjLTBmMTAtNDVlYy1hY2Ez
LTY4YTczZTk5ZDA4Zi9jZjNhODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3M2U5OWQw
OGYuY3JsMB8GA1UdIwQYMBaAFNybVLTbTyw6IiPQWtdmgEBreR9XMA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt
YmRhNy0xYmUyMDQ5MzNhZTUvY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNl
OTlkMDhmLmNlcjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsfMoDANBAIA
AjAHAwUAJgTXQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGDkAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
hVuIqKPgaHFwjCgz5qp9FaWVcg1Lemp72ppm4MuNeu1gqQ5+mK7WyzpiVEN8DxCs
IMLe+o7mlndVYbALxpNy8jgKuFzxGOp7ACyzF7eRgHS7x1b9zxJ8YaHJjwe8ygMK
/YNy2Z9x206R23dBUhcZ6QSaC5XnJzROaiCriSXRuNSTmjm2X7aRY5ESIv0U1MoS
eJdCLCfzryxn8FRSQ8QBn1zFjWRcj2jxqlkMQEgZgOd62P+/rUYcDIwowvg1yFK0
ieiDnppomqB1XWs38GI1EEAL70dY2iplumEHhEJKes6Uf4+jWsZlUI4RWIJxUY7q
BJBgAInkftPYTtTnKA0Nog==
-----END CERTIFICATE-----
Generated at Sun May 5 18:35:55 2024 by rpki-client on console-fra.rpki-client.org