Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer
File:                     ee7373c2-046b-47a5-8bb0-bb4c865d818e.cer (raw, json)
Hash identifier:          1W+1NITHeDdhPW9sY4JdauOgFf47omS2Qf7voOoOFi8=
Subject key identifier:   17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F432858499A40183F04E2169841C6DF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Apr 2025 18:57:27 +0000
Certificate not after:    Sun 25 Jul 2027 13:37:49 +0000
Subordinate resources:    AS: 401658
                          IP: 23.138.20.0/24
                          IP: 2604:d60::/32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:40:18:3f:04:e2:16:98:41:c6:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Apr 21 18:57:27 2025 GMT
            Not After : Jul 25 13:37:49 2027 GMT
        Subject: CN=ee7373c2-046b-47a5-8bb0-bb4c865d818e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:c5:a2:ec:5c:07:69:6b:ca:72:04:f4:d1:
                    e5:15:c0:9a:fc:9f:ce:30:18:83:35:3a:cd:98:20:
                    31:a7:8b:54:60:6d:7e:f3:1a:9a:ec:a7:81:1b:91:
                    a4:a5:02:be:6d:bf:78:33:1f:4b:f8:4a:5e:05:4f:
                    6c:5e:5b:ed:68:47:e7:d7:89:6f:3f:76:9a:fe:30:
                    e5:a9:13:f5:65:48:02:7c:bc:18:5f:59:d6:45:1f:
                    7a:cf:e0:64:cf:f3:88:a6:5c:16:55:d6:a4:8e:86:
                    79:5e:f5:33:07:30:25:89:b4:4f:0c:f1:fb:11:0b:
                    71:ba:0e:46:7e:cb:fc:bc:6e:c4:2f:41:36:ce:da:
                    58:ec:e0:c1:98:da:e9:e5:28:d9:cb:58:52:bc:fe:
                    df:71:11:84:de:a6:55:65:3e:24:dd:b6:b7:08:a9:
                    01:29:5c:e7:a2:af:fc:02:71:01:77:49:8e:09:d8:
                    a7:be:5c:c2:6f:f0:41:b2:c6:08:d6:7b:fd:22:e0:
                    b6:22:dc:7f:bf:88:39:24:ad:dd:d7:7d:25:84:23:
                    15:d1:a7:b9:fc:93:b1:a1:72:66:82:f3:6a:4a:4a:
                    d7:97:ad:a5:15:ef:65:05:08:18:6a:6b:27:cf:e3:
                    61:2a:b2:fc:8f:37:f0:8e:22:39:a3:22:00:74:fa:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:6C:C1:47:02:92:5F:1E:3F:E5:EF:C8:12:3A:42:97:A3:7C:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ee7373c2-046b-47a5-8bb0-bb4c865d818e/ee7373c2-046b-47a5-8bb0-bb4c865d818e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.20.0/24
                IPv6:
                  2604:d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401658

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:cc:32:d4:19:69:c1:97:d5:b4:e6:03:57:7a:a2:1a:4b:
         e2:40:ac:d3:a0:a0:10:9b:4d:94:a7:7a:38:54:69:c2:f7:23:
         aa:6c:cd:e4:e3:9d:dd:ec:ea:5c:cd:ce:23:e5:5d:49:b3:1d:
         f4:6a:63:3a:cd:72:5e:a7:73:c2:e5:9a:3f:01:de:21:ce:46:
         50:fe:3b:a5:8e:38:b9:aa:6f:59:fa:3e:00:a8:be:1e:8f:d4:
         e4:e0:a2:94:7e:34:9e:63:36:97:d6:85:db:41:63:7b:6b:65:
         50:34:b0:bd:f2:7a:b5:f9:ee:e9:01:04:0b:b7:e0:c3:ab:3c:
         74:af:80:be:7a:ed:bf:c1:18:26:1d:19:61:92:13:52:c3:ce:
         fd:91:bb:7d:9b:e9:3a:84:d7:44:3f:22:69:d2:b2:06:8c:c5:
         a5:b6:da:04:6b:62:0f:ef:fc:97:f0:2c:a6:3b:b4:57:c2:a6:
         ed:37:ea:15:52:af:98:88:f8:d0:50:41:32:4e:ec:25:e4:37:
         36:32:15:17:2b:e3:da:cc:24:9f:f2:cf:b9:af:f1:96:0f:87:
         51:a7:ac:2e:d7:eb:39:35:9b:f8:72:99:33:1e:00:46:d1:05:
         e6:c4:16:1a:d0:14:9c:e0:66:40:e8:c6:ed:78:f5:a4:8d:ba:
         71:15:de:64
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEmaQBg/BOIWmEHG3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDQyMTE4NTcyN1oXDTI3MDcyNTEzMzc0OVowLzEtMCsGA1UEAxMk
ZWU3MzczYzItMDQ2Yi00N2E1LThiYjAtYmI0Yzg2NWQ4MThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfFouxcB2lrynIE9NHlFcCa/J/OMBiDNTrN
mCAxp4tUYG1+8xqa7KeBG5GkpQK+bb94Mx9L+EpeBU9sXlvtaEfn14lvP3aa/jDl
qRP1ZUgCfLwYX1nWRR96z+Bkz/OIplwWVdakjoZ5XvUzBzAlibRPDPH7EQtxug5G
fsv8vG7EL0E2ztpY7ODBmNrp5SjZy1hSvP7fcRGE3qZVZT4k3ba3CKkBKVznoq/8
AnEBd0mOCdinvlzCb/BBssYI1nv9IuC2Itx/v4g5JK3d130lhCMV0ae5/JOxoXJm
gvNqSkrXl62lFe9lBQgYamsnz+NhKrL8jzfwjiI5oyIAdPo+IQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFBcabMFHApJfHj/l78gSOkKXo3xIMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l
ZTczNzNjMi0wNDZiLTQ3YTUtOGJiMC1iYjRjODY1ZDgxOGUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2VlNzM3M2MyLTA0NmItNDdhNS04
YmIwLWJiNGM4NjVkODE4ZS9lZTczNzNjMi0wNDZiLTQ3YTUtOGJiMC1iYjRjODY1
ZDgxOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXihQwDQQCAAIwBwMFACYEDWAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBiD6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAELOzDLUGWnBl9W05gNXeqIaS+JA
rNOgoBCbTZSnejhUacL3I6pszeTjnd3s6lzNziPlXUmzHfRqYzrNcl6nc8Llmj8B
3iHORlD+O6WOOLmqb1n6PgCovh6P1OTgopR+NJ5jNpfWhdtBY3trZVA0sL3yerX5
7ukBBAu34MOrPHSvgL567b/BGCYdGWGSE1LDzv2Ru32b6TqE10Q/ImnSsgaMxaW2
2gRrYg/v/JfwLKY7tFfCpu036hVSr5iI+NBQQTJO7CXkNzYyFRcr49rMJJ/yz7mv
8ZYPh1GnrC7X6zk1m/hymTMeAEbRBebEFhrQFJzgZkDoxu149aSNunEV3mQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:14:27 2025 by rpki-client