Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
File:                     2a006d48-b22f-4d9b-8138-c0de62d10e11.cer (raw, json)
Hash identifier:          s69sonor6Fwuw2wiIykNjkN/s3rghBCJquImO4ZUwgI=
Subject key identifier:   51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285847D3FD23B6F1E4EFCB74FDA880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 17121
                          IP: 104.160.80.0/20
                          IP: 199.83.144.0/21
                          IP: 2620:51::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:b6:f1:e4:ef:cb:74:fd:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:79:25:26:35:5c:c5:3f:b8:ab:e2:08:78:
                    1e:6a:38:ff:79:69:26:6d:c5:b5:10:af:8d:e4:4e:
                    81:17:e2:b3:f7:16:b2:0b:2c:aa:f4:e3:98:b2:a5:
                    81:3b:b1:4f:46:41:e1:1c:4d:c2:da:c1:08:7b:34:
                    88:bf:d3:a4:4a:2b:b8:35:40:c4:60:c7:7e:f9:9a:
                    24:d5:a6:a3:bf:2d:79:69:a0:a3:4a:96:9e:9b:cc:
                    0d:6f:8a:cc:a8:ca:e8:61:c5:06:2b:43:92:fb:66:
                    94:c3:6a:c7:e5:49:b7:fb:52:1a:1b:ca:ef:49:bd:
                    58:4b:04:c0:93:af:0a:af:08:89:f7:0f:b2:87:94:
                    d8:f6:2e:e3:5b:76:39:6a:3d:36:01:8b:49:dc:78:
                    bf:15:2a:c0:8f:d9:c4:b6:86:8c:ca:91:1a:66:24:
                    45:f0:5e:3c:5b:1f:56:b0:11:11:6c:43:91:28:8a:
                    11:5a:ca:08:91:2b:81:db:a2:1c:96:64:51:3c:ee:
                    1c:87:5b:16:f1:1d:2d:a7:f3:c1:28:9f:3a:9f:96:
                    ef:80:d1:e9:95:fd:0c:0a:6a:45:d9:27:b2:de:83:
                    74:43:23:fe:23:de:1f:32:21:71:8b:35:f8:50:16:
                    9e:45:53:64:96:07:b9:77:45:ff:6c:fb:bb:79:08:
                    77:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.160.80.0/20
                  199.83.144.0/21
                IPv6:
                  2620:51::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17121

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:73:c2:65:34:86:fb:e4:25:42:bd:c9:ba:7b:a7:8a:5a:33:
         fc:43:d7:67:40:3f:10:bb:c7:28:93:cb:71:2a:34:1c:e4:9b:
         e7:a1:a2:ab:7e:5a:5d:5a:ff:d2:78:5e:de:53:5b:aa:b1:aa:
         16:07:56:9c:2f:84:18:6b:d1:9b:81:fe:f8:25:41:a8:e1:c3:
         eb:65:6c:f8:a9:21:d9:b3:90:66:76:c2:cd:48:af:51:5f:3f:
         f4:54:8e:23:7f:db:bd:08:46:f5:f7:1a:64:83:ae:bb:9a:fc:
         19:81:5d:09:7d:f0:57:d0:39:c0:fe:2f:68:2b:e4:1d:2b:9b:
         30:4e:bd:6c:d8:5e:60:1f:37:75:83:0e:53:8b:f7:2e:c2:e2:
         e7:3e:82:25:93:bf:46:ab:57:3a:de:47:72:ed:42:b1:eb:dc:
         dc:63:52:c1:e5:02:03:54:40:a7:9e:91:d7:c5:56:fe:98:2d:
         b2:b8:b3:6a:74:ec:e8:11:29:14:a6:1d:3d:7b:05:33:5c:8a:
         dd:0c:2e:b8:a2:be:88:3f:fe:6b:15:de:8d:69:db:e1:1a:a7:
         49:b8:cd:a7:72:44:c9:74:dc:41:fe:d1:a9:0f:4c:20:94:5f:
         42:63:c4:e8:ab:51:c2:61:64:3c:63:c2:da:8b:20:c3:55:97:
         37:ec:61:5d
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEfT/SO28eTvy3T9qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MTExMDAxNDUzM1oXDTI3MDIxMzAxNDUzM1owLzEtMCsGA1UEAxMk
MmEwMDZkNDgtYjIyZi00ZDliLTgxMzgtYzBkZTYyZDEwZTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztR5JSY1XMU/uKviCHgeajj/eWkmbcW1EK+N
5E6BF+Kz9xayCyyq9OOYsqWBO7FPRkHhHE3C2sEIezSIv9OkSiu4NUDEYMd++Zok
1aajvy15aaCjSpaem8wNb4rMqMroYcUGK0OS+2aUw2rH5Um3+1IaG8rvSb1YSwTA
k68KrwiJ9w+yh5TY9i7jW3Y5aj02AYtJ3Hi/FSrAj9nEtoaMypEaZiRF8F48Wx9W
sBERbEORKIoRWsoIkSuB26IclmRRPO4ch1sW8R0tp/PBKJ86n5bvgNHplf0MCmpF
2Sey3oN0QyP+I94fMiFxizX4UBaeRVNklge5d0X/bPu7eQh3gQIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFFGGL1vG3mqXZnIqdrT/BrC5gSVtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y
YTAwNmQ0OC1iMjJmLTRkOWItODEzOC1jMGRlNjJkMTBlMTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJhMDA2ZDQ4LWIyMmYtNGQ5Yi04
MTM4LWMwZGU2MmQxMGUxMS8yYTAwNmQ0OC1iMjJmLTRkOWItODEzOC1jMGRlNjJk
MTBlMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBARooFADBAPHU5AwDwQCAAIwCQMHACYgAFEAADAZ
BggrBgEFBQcBCAEB/wQKMAigBjAEAgJC4TBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKc8JlNIb75CVCvcm6
e6eKWjP8Q9dnQD8Qu8cok8txKjQc5JvnoaKrflpdWv/SeF7eU1uqsaoWB1acL4QY
a9Gbgf74JUGo4cPrZWz4qSHZs5BmdsLNSK9RXz/0VI4jf9u9CEb19xpkg667mvwZ
gV0JffBX0DnA/i9oK+QdK5swTr1s2F5gHzd1gw5Ti/cuwuLnPoIlk79Gq1c63kdy
7UKx69zcY1LB5QIDVECnnpHXxVb+mC2yuLNqdOzoESkUph09ewUzXIrdDC64or6I
P/5rFd6NadvhGqdJuM2nckTJdNxB/tGpD0wglF9CY8Toq1HCYWQ8Y8LaiyDDVZc3
7GFd
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:24 2024 by rpki-client on console-ams.rpki-client.org