Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
File:                     d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer (raw, json)
Hash identifier:          o2VSXTGtFGhJFN0KJCId5EEz81BYnOi+EQqg1XO9S3g=
Subject key identifier:   B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285847B25F18BBCBCDA2BDC9BB6A20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 01 Feb 2027 01:45:26 +0000
Subordinate resources:    AS: 399252
                          IP: 136.227.96.0/19
                          IP: 140.106.80.0/20
                          IP: 207.66.80.0/20
                          IP: 2606:3240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:5f:18:bb:cb:cd:a2:bd:c9:bb:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Oct 29 00:45:26 2024 GMT
            Not After : Feb  1 01:45:26 2027 GMT
        Subject: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:6a:13:4d:f1:fa:ab:47:df:94:51:23:ee:
                    00:e1:da:72:0e:99:95:1a:dc:a2:c3:53:90:76:1b:
                    29:0d:6b:44:ba:68:b5:b8:9f:a4:2f:53:02:a6:0b:
                    d2:ea:48:55:32:f5:74:f0:5a:ef:19:0d:df:39:10:
                    16:2d:9c:61:8b:d2:55:76:ce:77:52:f7:fe:ae:34:
                    5f:98:9d:37:c3:4e:fb:fe:cb:86:68:ff:91:28:0f:
                    f5:c9:84:07:91:71:1b:c6:99:6a:cc:a1:16:4f:40:
                    6a:0e:c0:17:47:0c:3d:0a:af:72:b1:d4:5a:74:ea:
                    8b:11:5d:3b:8d:ec:7c:18:c6:10:01:42:60:b1:03:
                    05:50:51:41:44:5a:d5:b7:38:52:57:ce:23:6b:6f:
                    04:97:10:0f:6c:92:a2:c3:b3:91:fb:51:69:77:cc:
                    56:58:f8:0a:23:db:e0:19:20:56:32:19:80:d0:35:
                    23:d7:51:ff:06:ba:39:77:ee:c5:48:de:2d:c5:94:
                    4b:38:7b:7b:8f:e8:95:85:8d:9a:83:e0:e1:4f:00:
                    9c:16:22:f8:47:b8:e2:5d:69:94:ee:f2:cd:69:90:
                    20:87:80:fb:28:90:e0:df:cb:b9:ff:a6:37:3a:40:
                    28:15:2c:1c:30:2c:72:77:90:e4:c6:8f:6b:02:3e:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.96.0/19
                  140.106.80.0/20
                  207.66.80.0/20
                IPv6:
                  2606:3240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399252

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:98:df:3d:79:9e:bb:23:13:af:cc:04:f9:d9:a2:d6:8b:b1:
         7c:47:09:9b:23:27:54:c5:e2:67:b1:4d:1a:54:cf:cf:5c:5f:
         a6:7d:3b:32:7c:ea:c8:ce:45:8f:8f:5f:24:87:85:08:8e:56:
         7b:ab:12:8a:2f:74:22:5c:ee:b6:84:f2:9c:25:f9:df:1b:f0:
         7c:8f:18:23:14:07:51:9d:32:c8:35:a2:13:f2:d0:f5:55:0c:
         69:11:9d:80:75:14:4b:73:3a:f4:df:41:b3:89:2c:a6:95:e5:
         c5:ac:a3:53:d5:ab:49:46:18:bd:b3:e2:5d:aa:76:ad:45:ba:
         46:43:4c:bd:b3:8c:48:20:f7:cc:26:cb:db:e9:a8:70:e2:be:
         92:39:3c:93:f5:4d:a5:e3:4f:61:87:c1:a6:62:b4:48:2d:21:
         43:6a:b6:3b:7c:7b:ff:99:92:c0:33:6b:a8:61:0b:b8:3c:e5:
         53:34:91:ad:c3:c6:f0:00:5d:04:46:68:35:17:29:c4:7d:4d:
         e6:2e:61:02:ad:dd:bb:42:74:a3:cd:35:62:a3:cd:b6:cb:1a:
         d0:3c:f5:40:51:eb:61:cf:3a:33:74:dc:42:2e:da:37:ad:6c:
         6c:08:07:66:1a:9e:6a:c4:f5:78:48:dc:5b:f5:a9:f9:89:72:
         5e:b4:b9:7a
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEeyXxi7y82ivcm7aiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk
ZDJiN2RlN2ItOThkZS00YzliLWEzN2MtZDdlY2I4OGNmNDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaJqE03x+qtH35RRI+4A4dpyDpmVGtyiw1OQ
dhspDWtEumi1uJ+kL1MCpgvS6khVMvV08FrvGQ3fORAWLZxhi9JVds53Uvf+rjRf
mJ03w077/suGaP+RKA/1yYQHkXEbxplqzKEWT0BqDsAXRww9Cq9ysdRadOqLEV07
jex8GMYQAUJgsQMFUFFBRFrVtzhSV84ja28ElxAPbJKiw7OR+1Fpd8xWWPgKI9vg
GSBWMhmA0DUj11H/Bro5d+7FSN4txZRLOHt7j+iVhY2ag+DhTwCcFiL4R7jiXWmU
7vLNaZAgh4D7KJDg38u5/6Y3OkAoFSwcMCxyd5Dkxo9rAj79sQIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFLQsg+xoivXzJ6irtyul4Xg1oSvbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k
MmI3ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2VjYjg4Y2Y0MjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2QyYjdkZTdiLTk4ZGUtNGM5Yi1h
MzdjLWQ3ZWNiODhjZjQyMi9kMmI3ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2VjYjg4
Y2Y0MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAWI42ADBASMalADBATPQlAwDQQCAAIwBwMFACYG
MkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBheUMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIKY3z15nrsj
E6/MBPnZotaLsXxHCZsjJ1TF4mexTRpUz89cX6Z9OzJ86sjORY+PXySHhQiOVnur
EoovdCJc7raE8pwl+d8b8HyPGCMUB1GdMsg1ohPy0PVVDGkRnYB1FEtzOvTfQbOJ
LKaV5cWso1PVq0lGGL2z4l2qdq1FukZDTL2zjEgg98wmy9vpqHDivpI5PJP1TaXj
T2GHwaZitEgtIUNqtjt8e/+ZksAza6hhC7g85VM0ka3DxvAAXQRGaDUXKcR9TeYu
YQKt3btCdKPNNWKjzbbLGtA89UBR62HPOjN03EIu2jetbGwIB2YanmrE9XhI3Fv1
qfmJcl60uXo=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:38 2024 by rpki-client on console-ams.rpki-client.org