Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
File:                     42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer (raw, json)
Hash identifier:          bwK98T56jB1zDFZsy/Hchy5KU21vKTQFSoI10sP0yNo=
Subject key identifier:   B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584387EDB27BBD6C90E094550E60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Oct 2023 00:45:15 +0000
Certificate not after:    Thu 15 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 35906
                          IP: 162.250.104.0/21
                          IP: 199.21.184.0/22
                          IP: 199.180.192.0/22
                          IP: 199.201.112.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:ed:b2:7b:bd:6c:90:e0:94:55:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 13 00:45:15 2023 GMT
            Not After : Jan 15 01:45:15 2026 GMT
        Subject: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e8:ff:e1:65:35:d0:d3:18:30:7e:f6:44:50:
                    46:75:c2:60:f9:95:1a:cb:c5:45:24:d2:17:40:d0:
                    e6:e2:46:d4:76:5c:e8:2d:15:ae:29:71:91:8f:ac:
                    8b:84:b7:78:71:d1:64:24:e6:e2:8f:57:72:2e:4c:
                    4e:f7:67:13:fd:19:a0:fc:2b:60:61:f5:83:8a:f4:
                    90:2d:f9:d7:f9:f2:0f:60:77:43:b6:4e:71:b8:64:
                    a2:b6:30:63:a3:b9:58:4d:5e:0e:14:1a:3c:02:3e:
                    99:37:06:51:8b:5d:39:26:a2:26:75:a9:14:83:b6:
                    ab:10:05:c9:b5:22:3d:90:7b:1d:ff:71:8a:a6:d6:
                    b8:8c:ef:1e:3a:3b:dc:69:6c:62:8f:f6:02:e5:06:
                    ed:56:6c:52:3e:86:ca:52:0c:40:08:6c:55:b3:04:
                    ed:64:d8:25:d4:5d:bb:74:d8:1c:cc:72:58:88:39:
                    57:fb:b6:23:3d:1b:2f:4a:e6:02:5b:0e:60:71:bf:
                    23:8f:1f:9d:43:f4:15:4d:62:e3:75:5e:a4:89:8a:
                    08:62:87:ba:c7:12:ae:5b:83:60:cb:71:52:fb:3a:
                    8c:59:29:6d:64:0a:b5:0d:99:f7:20:dc:5f:de:ff:
                    ad:2b:d3:71:2c:89:4d:91:0c:50:bd:f7:e8:a2:01:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.104.0/21
                  199.21.184.0/22
                  199.180.192.0/22
                  199.201.112.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35906

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:08:fb:9d:83:bc:b4:69:51:33:bc:cc:05:be:22:d1:ab:
         ba:48:e3:1e:b6:9d:ca:2c:13:20:8a:67:44:fe:e9:30:c9:06:
         e5:28:47:02:dd:89:c7:52:7b:19:03:3b:05:a6:61:aa:8d:85:
         d8:a6:56:ab:47:06:3f:ea:18:dc:a7:d1:6d:3a:b5:4e:5a:b2:
         2e:59:63:20:80:61:f2:a9:12:72:40:30:d0:0e:c1:f0:4e:47:
         ec:1e:b7:88:a9:53:26:69:e9:8f:36:b8:db:75:a8:d3:df:2f:
         05:5f:02:d0:20:32:a7:e5:73:80:5d:72:7a:11:7a:f5:f5:c5:
         3a:63:30:2d:43:b9:a4:a0:35:c6:d4:82:62:93:97:9a:c4:92:
         01:57:4c:95:72:a7:d3:0d:ea:9d:57:b8:1a:66:3c:5b:b2:ad:
         04:47:25:89:29:d7:1f:c7:f9:47:1a:d8:fb:53:d0:4a:df:2b:
         b2:24:96:20:f5:28:10:45:d7:2c:68:a9:77:e2:cb:c9:d5:c6:
         7a:81:44:a2:fc:32:1f:43:2f:c8:63:5f:bc:c1:ab:12:8e:54:
         8a:de:9e:1c:18:d5:30:af:ee:1a:47:8a:6e:9b:75:15:2b:7b:
         62:d4:6c:90:0f:ce:86:70:4e:78:14:ad:06:43:40:4a:a3:b4:
         8b:9c:16:66
-----BEGIN CERTIFICATE-----
MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEOH7bJ7vWyQ4JRVDmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTAxMzAwNDUxNVoXDTI2MDExNTAxNDUxNVowLzEtMCsGA1UEAxMk
NDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQyYWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+j/4WU10NMYMH72RFBGdcJg+ZUay8VFJNIX
QNDm4kbUdlzoLRWuKXGRj6yLhLd4cdFkJObij1dyLkxO92cT/Rmg/CtgYfWDivSQ
LfnX+fIPYHdDtk5xuGSitjBjo7lYTV4OFBo8Aj6ZNwZRi105JqImdakUg7arEAXJ
tSI9kHsd/3GKpta4jO8eOjvcaWxij/YC5QbtVmxSPobKUgxACGxVswTtZNgl1F27
dNgczHJYiDlX+7YjPRsvSuYCWw5gcb8jjx+dQ/QVTWLjdV6kiYoIYoe6xxKuW4Ng
y3FS+zqMWSltZAq1DZn3INxf3v+tK9NxLIlNkQxQvffoogG5dwIDAQABo4IELTCC
BCkwHQYDVR0OBBYEFLZvtGieSlmtgfppNBKCBDkzH1j8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80
MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQyY2U5ZDE2LWRjODUtNDAwNy1h
NTlkLTZjMThkMWE0MmFhMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFh
NDJhYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMQYIKwYBBQUH
AQcBAf8EIjAgMB4EAgABMBgDBAOi+mgDBALHFbgDBALHtMADBAPHyXAwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAIxCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACIfCPudg7y0aVEzvMwFviLR
q7pI4x62ncosEyCKZ0T+6TDJBuUoRwLdicdSexkDOwWmYaqNhdimVqtHBj/qGNyn
0W06tU5asi5ZYyCAYfKpEnJAMNAOwfBOR+wet4ipUyZp6Y82uNt1qNPfLwVfAtAg
Mqflc4BdcnoRevX1xTpjMC1DuaSgNcbUgmKTl5rEkgFXTJVyp9MN6p1XuBpmPFuy
rQRHJYkp1x/H+Uca2PtT0ErfK7IkliD1KBBF1yxoqXfiy8nVxnqBRKL8Mh9DL8hj
X7zBqxKOVIrenhwY1TCv7hpHim6bdRUre2LUbJAPzoZwTngUrQZDQEqjtIucFmY=
-----END CERTIFICATE-----
Generated at Fri May 3 03:12:02 2024 by rpki-client on console-ams.rpki-client.org