Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28.cer
File:                     9a163438-9912-46b2-b636-7a9fec340e28.cer (raw, json)
Hash identifier:          B0fRNWnuxwF0MN9Es8/dThHSCrXUSl86mDIEirH6P4o=
Subject key identifier:   1F:A8:32:61:C1:23:F0:AC:CB:89:AE:04:03:AD:68:DE:08:CC:DD:59
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858424F411595A26A9F4781B41000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/9a163438-9912-46b2-b636-7a9fec340e28.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 00:45:15 +0000
Certificate not after:    Thu 25 Sep 2025 00:45:15 +0000
Subordinate resources:    AS: 11961

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4f:41:15:95:a2:6a:9f:47:81:b4:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 23 00:45:15 2023 GMT
            Not After : Sep 25 00:45:15 2025 GMT
        Subject: CN=9a163438-9912-46b2-b636-7a9fec340e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:7f:0d:98:9a:49:1b:e4:65:c9:2a:f6:2b:
                    72:75:57:60:be:59:17:be:5f:79:dd:1f:45:d4:54:
                    78:d6:f2:d2:43:ee:73:74:d0:0c:79:53:de:3f:14:
                    2f:d0:ab:b9:03:5b:a2:0e:c2:0c:1a:7a:ca:94:82:
                    48:af:90:dc:81:bd:69:32:58:2c:0f:5e:b2:fa:2e:
                    4a:89:bf:7a:17:85:2b:6d:32:e0:c5:c0:c1:ed:27:
                    4d:2a:f3:2d:a9:3e:99:88:18:7a:7b:60:01:82:88:
                    b2:8b:83:03:5b:75:54:3e:1b:cf:a7:5e:4b:b2:62:
                    81:3a:0b:ef:1f:65:9f:f7:8d:5f:a7:8b:05:4e:29:
                    fa:15:16:61:23:14:3c:9b:98:aa:63:fd:44:1a:2c:
                    7e:5b:6e:fc:65:49:6e:68:2f:0f:a3:bc:87:8a:68:
                    1f:bd:17:0f:69:e9:cf:34:b5:0e:f5:64:17:d8:bc:
                    e7:92:d3:35:ac:05:d9:bd:93:0b:91:eb:54:b7:a8:
                    bf:70:76:0f:64:33:51:02:85:79:32:1d:86:e3:a0:
                    25:b7:f7:f9:ca:33:2a:7a:f4:e0:ff:16:23:96:37:
                    33:3e:1b:db:bf:b4:cd:23:3d:a9:c9:0e:39:2e:b3:
                    3f:4c:32:17:c4:4c:4f:5d:93:f6:8f:5c:24:57:81:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:32:61:C1:23:F0:AC:CB:89:AE:04:03:AD:68:DE:08:CC:DD:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9a163438-9912-46b2-b636-7a9fec340e28/9a163438-9912-46b2-b636-7a9fec340e28.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11961

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:32:ae:90:f6:4e:b6:fe:c2:1b:8c:5f:c7:06:24:64:02:b1:
         a5:45:b2:f5:7d:1d:f2:e3:ef:ea:98:bf:28:e3:4c:5d:da:d8:
         bb:c0:1c:94:c0:5b:60:88:4b:5d:ff:f6:67:b0:4c:8a:11:c6:
         00:fd:61:91:cc:51:54:32:c0:3c:f6:9d:02:55:b1:64:a3:b5:
         47:1b:7c:df:dc:7f:15:bc:f7:bb:0d:ba:9d:55:cc:2e:68:3c:
         d0:bf:5a:bd:33:08:23:d4:2a:52:1f:35:f0:83:69:d8:09:63:
         42:7b:15:ab:8d:7c:b2:4a:51:b2:7c:2f:54:84:72:bb:30:36:
         bd:f5:08:a1:2c:cb:b4:83:07:b8:8d:46:b4:19:08:b8:1f:17:
         4a:fb:f7:d8:e3:20:e2:81:8c:9f:ea:2c:d3:69:69:fa:3b:bd:
         f6:e9:89:dd:e2:c5:bf:fa:6b:40:88:bf:eb:af:1d:cc:05:a9:
         47:48:3f:1e:ea:cc:9f:63:71:06:a5:70:dd:34:c6:a6:97:db:
         b3:71:de:e6:36:a2:e8:75:84:cf:69:f8:81:59:97:c1:c1:93:
         bd:b0:0b:6a:d6:d9:bc:a1:1a:d8:84:b2:77:bb:7f:49:0d:81:
         f4:55:8f:3e:cb:7b:ec:b2:44:f6:59:de:83:ea:e2:1a:a9:04:
         2d:90:43:d4
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEJPQRWVomqfR4G0EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDYyMzAwNDUxNVoXDTI1MDkyNTAwNDUxNVowLzEtMCsGA1UEAxMk
OWExNjM0MzgtOTkxMi00NmIyLWI2MzYtN2E5ZmVjMzQwZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgV/DZiaSRvkZckq9itydVdgvlkXvl953R9F
1FR41vLSQ+5zdNAMeVPePxQv0Ku5A1uiDsIMGnrKlIJIr5Dcgb1pMlgsD16y+i5K
ib96F4UrbTLgxcDB7SdNKvMtqT6ZiBh6e2ABgoiyi4MDW3VUPhvPp15LsmKBOgvv
H2Wf941fp4sFTin6FRZhIxQ8m5iqY/1EGix+W278ZUluaC8Po7yHimgfvRcPaenP
NLUO9WQX2LznktM1rAXZvZMLketUt6i/cHYPZDNRAoV5Mh2G46Alt/f5yjMqevTg
/xYjljczPhvbv7TNIz2pyQ45LrM/TDIXxExPXZP2j1wkV4EgTQIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFB+oMmHBI/Csy4muBAOtaN4IzN1ZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
YTE2MzQzOC05OTEyLTQ2YjItYjYzNi03YTlmZWMzNDBlMjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlhMTYzNDM4LTk5MTItNDZiMi1i
NjM2LTdhOWZlYzM0MGUyOC85YTE2MzQzOC05OTEyLTQ2YjItYjYzNi03YTlmZWMz
NDBlMjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICLrkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOzKukPZOtv7CG4xfxwYkZAKxpUWy
9X0d8uPv6pi/KONMXdrYu8AclMBbYIhLXf/2Z7BMihHGAP1hkcxRVDLAPPadAlWx
ZKO1Rxt839x/Fbz3uw26nVXMLmg80L9avTMII9QqUh818INp2AljQnsVq418skpR
snwvVIRyuzA2vfUIoSzLtIMHuI1GtBkIuB8XSvv32OMg4oGMn+os02lp+ju99umJ
3eLFv/prQIi/668dzAWpR0g/HurMn2NxBqVw3TTGppfbs3He5jai6HWEz2n4gVmX
wcGTvbALatbZvKEa2ISyd7t/SQ2B9FWPPst77LJE9lneg+riGqkELZBD1A==
-----END CERTIFICATE-----
Generated at Fri May 3 03:26:32 2024 by rpki-client on console-ams.rpki-client.org