Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer
File:                     12380a37-68ce-4e9c-9585-53cd09071ada.cer (raw, json)
Hash identifier:          HZY+D5b01bz8yeqMu5iv7iFtbNyV4dZS5nTARJmcpuI=
Subject key identifier:   0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858492A9945017A7EA4DF31814300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 19:06:36 +0000
Certificate not after:    Tue 15 Jun 2027 19:06:36 +0000
Subordinate resources:    AS: 19161
                          AS: 21654
                          AS: 22980
                          AS: 31935
                          AS: 33128
                          AS: 33712
                          AS: 36715
                          AS: 40082
                          AS: 46217
                          AS: 46273
                          AS: 54607
                          AS: 54639
                          AS: 63357
                          AS: 393411
                          AS: 393486
                          AS: 393754
                          AS: 393764
                          AS: 393824
                          AS: 394372
                          AS: 394413
                          AS: 395083
                          AS: 395448
                          AS: 395461
                          AS: 395465
                          AS: 395597
                          AS: 397703
                          AS: 397712
                          AS: 397721
                          AS: 397724
                          AS: 398423
                          AS: 398426
                          AS: 398703
                          AS: 399324 -- 399325
                          AS: 399596 -- 399597
                          AS: 399799
                          AS: 399830
                          AS: 399886
                          AS: 399922
                          AS: 399983
                          AS: 400047
                          AS: 400102
                          AS: 400114
                          AS: 400117
                          AS: 400124
                          AS: 400313
                          AS: 400346 -- 400350
                          AS: 400386
                          AS: 400447
                          AS: 400483
                          AS: 400485
                          AS: 400613 -- 400614
                          AS: 400649
                          AS: 400651
                          AS: 400695
                          AS: 400935
                          AS: 401037
                          IP: 64.189.0.0/16
                          IP: 66.112.224.0/19
                          IP: 69.80.128.0/18
                          IP: 76.78.0.0/16
                          IP: 98.159.112.0/20
                          IP: 100.43.0.0/19
                          IP: 199.188.216.0/22
                          IP: 204.137.224.0/19
                          IP: 209.51.64.0/19
                          IP: 209.166.96.0/19
                          IP: 2606:7700::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2a:99:45:01:7a:7e:a4:df:31:81:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 12 19:06:36 2025 GMT
            Not After : Jun 15 19:06:36 2027 GMT
        Subject: CN=12380a37-68ce-4e9c-9585-53cd09071ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:63:8e:6e:37:85:7e:26:d4:ed:e9:12:4b:
                    ee:92:ce:79:0f:df:29:c4:c9:3a:c2:11:ed:c3:70:
                    16:cf:a1:c9:c2:48:e7:3d:24:a9:55:ba:4b:63:3a:
                    29:e1:02:30:6d:7d:b9:b9:1a:79:ea:e0:57:aa:c4:
                    2a:ed:05:3d:ae:8e:cc:43:27:29:65:f5:ea:d7:42:
                    9f:b5:2a:4a:fe:fe:b8:43:d8:fb:11:88:9a:f6:49:
                    32:c4:c2:3a:5e:2e:d1:f4:35:3c:83:8d:10:b8:03:
                    a3:00:98:ea:4e:35:79:73:9a:61:59:12:e9:ba:3d:
                    14:67:de:ab:bc:bd:8a:19:51:a0:45:88:0f:09:21:
                    34:37:bd:58:a3:9b:c7:7d:d4:25:4a:62:42:91:38:
                    ac:18:35:f5:ca:19:c6:34:45:67:f7:4a:d7:78:5c:
                    67:18:2c:c9:23:c5:3e:ef:e7:d0:00:db:30:1c:20:
                    9d:0c:76:4c:0d:ef:3b:cd:0c:2f:ff:ba:df:fb:c7:
                    f7:4e:07:68:f8:bb:bb:42:e5:7a:02:95:8e:56:0d:
                    51:2c:43:12:19:83:80:b3:f7:e9:29:e7:34:08:82:
                    ef:3a:3f:42:fa:84:39:eb:ca:53:28:82:a7:f1:40:
                    bd:3c:35:56:97:36:f6:56:b4:f9:7c:20:60:ee:68:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.189.0.0/16
                  66.112.224.0/19
                  69.80.128.0/18
                  76.78.0.0/16
                  98.159.112.0/20
                  100.43.0.0/19
                  199.188.216.0/22
                  204.137.224.0/19
                  209.51.64.0/19
                  209.166.96.0/19
                IPv6:
                  2606:7700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19161
                  21654
                  22980
                  31935
                  33128
                  33712
                  36715
                  40082
                  46217
                  46273
                  54607
                  54639
                  63357
                  393411
                  393486
                  393754
                  393764
                  393824
                  394372
                  394413
                  395083
                  395448
                  395461
                  395465
                  395597
                  397703
                  397712
                  397721
                  397724
                  398423
                  398426
                  398703
                  399324-399325
                  399596-399597
                  399799
                  399830
                  399886
                  399922
                  399983
                  400047
                  400102
                  400114
                  400117
                  400124
                  400313
                  400346-400350
                  400386
                  400447
                  400483
                  400485
                  400613-400614
                  400649
                  400651
                  400695
                  400935
                  401037

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:b9:ef:0b:55:15:09:ec:3b:32:8c:21:d8:df:29:e3:bd:
         08:36:a8:40:42:32:41:98:a8:47:3c:80:d2:05:a5:c6:d1:c3:
         75:85:9c:b4:7b:51:02:5d:78:2e:d8:58:14:58:b3:07:e3:16:
         db:8d:1a:3b:4e:31:2f:9e:13:6b:be:6b:9c:31:e8:13:67:d2:
         49:09:c9:1c:21:27:60:c1:ca:ec:1a:b2:4c:26:3b:00:58:ba:
         1f:16:c0:4c:9d:f7:40:1e:37:7f:84:e6:a3:3d:f4:02:bd:53:
         96:39:f3:2f:0d:4b:42:ee:f9:2b:28:e5:47:08:49:89:aa:fd:
         bd:19:74:82:7f:89:1d:3e:a1:3a:0f:95:12:4c:62:62:e4:6d:
         ee:20:97:22:c0:95:bc:11:e8:62:e7:f7:18:da:68:28:aa:7b:
         6a:28:67:a3:1a:ba:25:9d:cd:d6:6d:28:34:49:5a:b2:c9:79:
         e7:20:11:cd:cc:55:6b:79:06:fd:14:00:be:3a:c9:fc:60:e9:
         6e:bf:a4:86:ac:cc:2b:1a:07:bc:aa:d0:2a:45:46:a9:6c:9e:
         cb:59:9e:72:7e:0f:42:0c:2c:bb:a2:fa:ff:27:da:8c:9b:c3:
         d5:a8:af:61:51:7d:b3:92:77:c2:05:06:a6:58:7b:52:e8:31:
         83:1d:08:40
-----BEGIN CERTIFICATE-----
MIIIgTCCB2mgAwIBAgIUAQ0Mn0MoWEkqmUUBen6k3zGBQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI1MDMxMjE5MDYzNloXDTI3MDYxNTE5MDYzNlowLzEtMCsGA1UEAxMk
MTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcxYWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX9jjm43hX4m1O3pEkvuks55D98pxMk6whHt
w3AWz6HJwkjnPSSpVbpLYzop4QIwbX25uRp56uBXqsQq7QU9ro7MQycpZfXq10Kf
tSpK/v64Q9j7EYia9kkyxMI6Xi7R9DU8g40QuAOjAJjqTjV5c5phWRLpuj0UZ96r
vL2KGVGgRYgPCSE0N71Yo5vHfdQlSmJCkTisGDX1yhnGNEVn90rXeFxnGCzJI8U+
7+fQANswHCCdDHZMDe87zQwv/7rf+8f3Tgdo+Lu7QuV6ApWOVg1RLEMSGYOAs/fp
Kec0CILvOj9C+oQ568pTKIKn8UC9PDVWlzb2VrT5fCBg7mhsLQIDAQABo4IFkzCC
BY8wHQYDVR0OBBYEFAvr/Gc3PXdiFUKVP65h3VZRwbmiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8x
MjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzEyMzgwYTM3LTY4Y2UtNGU5Yy05
NTg1LTUzY2QwOTA3MWFkYS8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkw
NzFhZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwYgYIKwYBBQUH
AQcBAf8EUzBRMEAEAgABMDoDAwBAvQMEBUJw4AMEBkVQgAMDAExOAwQEYp9wAwQF
ZCsAAwQCx7zYAwQFzIngAwQF0TNAAwQF0aZgMA0EAgACMAcDBQAmBncAMIIBTQYI
KwYBBQUHAQgBAf8EggE8MIIBOKCCATQwggEwAgJK2QICVJYCAlnEAgJ8vwIDAIFo
AgMAg7ACAwCPawIDAJySAgMAtIkCAwC0wQIDANVPAgMA1W8CAwD3fQIDBgDDAgMG
AQ4CAwYCGgIDBgIkAgMGAmACAwYEhAIDBgStAgMGB0sCAwYIuAIDBgjFAgMGCMkC
AwYJTQIDBhGHAgMGEZACAwYRmQIDBhGcAgMGFFcCAwYUWgIDBhVvMAoCAwYX3AID
BhfdMAoCAwYY7AIDBhjtAgMGGbcCAwYZ1gIDBhoOAgMGGjICAwYabwIDBhqvAgMG
GuYCAwYa8gIDBhr1AgMGGvwCAwYbuTAKAgMGG9oCAwYb3gIDBhwCAgMGHD8CAwYc
YwIDBhxlMAoCAwYc5QIDBhzmAgMGHQkCAwYdCwIDBh03AgMGHicCAwYejTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQCgLbnvC1UVCew7Mowh2N8p470INqhAQjJBmKhHPIDSBaXG0cN1hZy0e1EC
XXgu2FgUWLMH4xbbjRo7TjEvnhNrvmucMegTZ9JJCckcISdgwcrsGrJMJjsAWLof
FsBMnfdAHjd/hOajPfQCvVOWOfMvDUtC7vkrKOVHCEmJqv29GXSCf4kdPqE6D5US
TGJi5G3uIJciwJW8Eehi5/cY2mgoqntqKGejGrolnc3WbSg0SVqyyXnnIBHNzFVr
eQb9FAC+Osn8YOluv6SGrMwrGge8qtAqRUapbJ7LWZ5yfg9CDCy7ovr/J9qMm8PV
qK9hUX2zknfCBQamWHtS6DGDHQhA
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:17 2025 by rpki-client