Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
File:                     9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer (raw, json)
Hash identifier:          +IQr4sV4r8x5NES02TT+VnXV0jlZ6pzPtI6+5stPzfE=
Subject key identifier:   6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority key identifier: F6:88:4F:B4:78:9E:B1:EB:12:70:B8:6E:3A:83:45:F7:FD:20:05:72
Certificate issuer:       /CN=6755970c-4747-499d-9774-5e1308c501a7
Certificate serial:       010D0C9F4328583FF34C7BC5B233253034289900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e72d8db0-4728-4fc1-bdd8-471129866362/notification.xml
Certificate not before:   Fri 18 Nov 2022 16:39:59 +0000
Certificate not after:    Thu 20 Feb 2025 16:39:59 +0000
Subordinate resources:    AS: 699
                          AS: 801
                          IP: 2606:7b40::/32
                          IP: 2606:8140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Jul 2023 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f3:4c:7b:c5:b2:33:25:30:34:28:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6755970c-4747-499d-9774-5e1308c501a7
        Validity
            Not Before: Nov 18 16:39:59 2022 GMT
            Not After : Feb 20 16:39:59 2025 GMT
        Subject: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:74:1b:54:47:16:50:43:b0:da:91:b7:1b:
                    cf:14:3c:4c:3c:4f:8a:a7:5d:27:c5:0c:6f:2d:86:
                    70:c5:72:cc:7a:97:01:37:e0:bf:58:fa:89:a7:06:
                    95:90:ab:7a:09:9c:bd:4b:9a:ed:88:f0:79:4a:9e:
                    4b:1e:b2:5c:0c:c7:23:57:b6:e2:04:d8:ea:e4:ea:
                    b5:1f:6e:a3:2f:5b:4b:4d:4b:48:6e:12:73:60:31:
                    41:07:84:01:ed:14:7e:1d:ca:dd:80:b1:ca:47:12:
                    3a:6e:0b:33:3b:86:bd:fb:e5:e9:4f:ce:67:0d:d0:
                    17:7d:20:69:35:73:df:92:89:bb:c4:c6:ec:00:8d:
                    f3:49:72:84:a0:22:ae:68:b3:e8:da:f4:95:9f:34:
                    a2:40:de:7a:62:a5:d0:f3:15:f0:08:4c:aa:78:2f:
                    0a:21:2b:c2:a4:c8:e2:98:9e:c0:89:fe:39:7d:67:
                    c8:5a:58:d3:e9:db:0c:97:ca:09:af:70:e8:29:0a:
                    66:e9:75:10:11:50:7b:a4:4c:e2:90:c7:5f:c5:4a:
                    7b:9f:ce:05:db:6b:3a:fa:a9:96:34:e2:f4:fc:26:
                    bf:ed:c7:7b:38:7e:88:b4:0c:68:37:77:2d:2c:5e:
                    01:0a:32:a3:88:ae:a8:1e:71:50:9c:5f:02:47:9b:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/e72d8db0-4728-4fc1-bdd8-471129866362/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl

            X509v3 Authority Key Identifier:
                keyid:F6:88:4F:B4:78:9E:B1:EB:12:70:B8:6E:3A:83:45:F7:FD:20:05:72

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7b40::/32
                  2606:8140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  699
                  801

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:04:fc:a7:2b:84:df:88:ec:b5:56:a0:93:c9:eb:46:e5:14:
         c3:79:f5:a2:7b:67:1a:6c:07:69:8a:c6:05:77:86:bc:98:4a:
         e0:2e:40:76:f3:20:b5:cd:40:b8:9c:7a:82:e5:6b:10:fb:3b:
         df:23:4f:d6:91:af:2b:38:ca:76:91:0f:00:0d:40:a9:60:e5:
         65:a8:b7:69:86:d3:b0:4b:48:23:a0:74:07:f6:6a:fe:11:21:
         e5:8a:4e:53:39:45:cb:7d:18:36:a6:03:75:41:39:1d:f9:2d:
         bc:1d:04:e3:a8:73:4e:3d:ff:b8:65:26:82:2f:ba:02:69:c2:
         91:71:be:8b:4c:19:be:77:c8:b7:6a:1c:7a:03:a5:93:be:bc:
         78:0e:d4:ea:e5:3b:66:67:a8:ba:14:30:76:85:42:fd:33:27:
         32:0e:fa:c2:9c:d5:4d:6c:27:63:b4:0f:c7:70:f4:75:f3:99:
         da:58:19:8d:02:ee:e4:30:67:3c:b9:bd:f2:14:6a:52:f2:33:
         e6:80:33:86:3d:9b:53:7f:35:6e:a0:ab:ed:7a:00:0c:d1:64:
         92:9c:6d:bc:97:7e:a5:3f:2c:bb:ca:99:2e:9c:d9:68:6f:fc:
         c2:25:76:a6:90:5f:ae:f0:11:51:1a:46:d2:da:1c:7f:db:61:
         7d:0e:58:29
-----BEGIN CERTIFICATE-----
MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWD/zTHvFsjMlMDQomQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc1NTk3MGMtNDc0Ny00OTlkLTk3NzQtNWUxMzA4YzUw
MWE3MB4XDTIyMTExODE2Mzk1OVoXDTI1MDIyMDE2Mzk1OVowPTE7MDkGA1UEAxMy
OWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3
OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC3QbVEcWUEOw2pG3
G88UPEw8T4qnXSfFDG8thnDFcsx6lwE34L9Y+omnBpWQq3oJnL1Lmu2I8HlKnkse
slwMxyNXtuIE2Ork6rUfbqMvW0tNS0huEnNgMUEHhAHtFH4dyt2AscpHEjpuCzM7
hr375elPzmcN0Bd9IGk1c9+SibvExuwAjfNJcoSgIq5os+ja9JWfNKJA3npipdDz
FfAITKp4LwohK8KkyOKYnsCJ/jl9Z8haWNPp2wyXygmvcOgpCmbpdRARUHukTOKQ
x1/FSnufzgXbazr6qZY04vT8Jr/tx3s4foi0DGg3dy0sXgEKMqOIrqgecVCcXwJH
m6fPAgMBAAGjggQXMIIEEzAdBgNVHQ4EFgQUasw+faLnbZkRD9Y5xBN+QkKZcNgw
ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt
cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3
MjgtNGZjMS1iZGQ4LTQ3MTEyOTg2NjM2Mi8wgYIGCCsGAQUFBzAKhnZyc3luYzov
L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4
ZGIwLTQ3MjgtNGZjMS1iZGQ4LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVo
LW5MNDBuazRoNHcubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51
cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1i
ZGQ4LTQ3MTEyOTg2NjM2Mi9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB
Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l
dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4
Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzLzY3NTU5NzBjLTQ3NDctNDk5ZC05Nzc0LTVlMTMwOGM1MDFhNy82NzU1OTcw
Yy00NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcuY3JsMB8GA1UdIwQYMBaAFPaI
T7R4nrHrEnC4bjqDRff9IAVyMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE
gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc1
NTk3MGMtNDc0Ny00OTlkLTk3NzQtNWUxMzA4YzUwMWE3LmNlcjAnBggrBgEFBQcB
BwEB/wQYMBYwFAQCAAIwDgMFACYGe0ADBQAmBoFAMB0GCCsGAQUFBwEIAQH/BA4w
DKAKMAgCAgK7AgIDITBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJBPynK4TfiOy1VqCTyetG5RTDefWie2ca
bAdpisYFd4a8mErgLkB28yC1zUC4nHqC5WsQ+zvfI0/Wka8rOMp2kQ8ADUCpYOVl
qLdphtOwS0gjoHQH9mr+ESHlik5TOUXLfRg2pgN1QTkd+S28HQTjqHNOPf+4ZSaC
L7oCacKRcb6LTBm+d8i3ahx6A6WTvrx4DtTq5TtmZ6i6FDB2hUL9MycyDvrCnNVN
bCdjtA/HcPR185naWBmNAu7kMGc8ub3yFGpS8jPmgDOGPZtTfzVuoKvtegAM0WSS
nG28l36lPyy7ypkunNlob/zCJXamkF+u8BFRGkbS2hx/22F9Dlgp
-----END CERTIFICATE-----
Generated at Wed Jul 19 22:37:25 2023 by rpki-client on console-ams.rpki-client.org