Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0.cer
File:                     252a0154-0e99-44f2-af82-30c36afe00c0.cer (raw, json)
Hash identifier:          Bhlp4JBL3oSnUnI8haQqOxKozo+s0XJMhBIN5Q7Jv6c=
Subject key identifier:   2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858472F28F24A0132622E876B34C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 16 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 21919
                          IP: 206.55.196.0/22
                          IP: 2001:504:31::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:28:f2:4a:01:32:62:2e:87:6b:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 12 00:45:26 2024 GMT
            Not After : Dec 16 01:45:26 2026 GMT
        Subject: CN=252a0154-0e99-44f2-af82-30c36afe00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:1d:42:d1:54:7f:fb:70:30:35:e9:53:36:
                    54:1c:1c:e8:84:8a:48:43:7c:0b:27:6d:3c:e8:4b:
                    88:9f:b6:e3:1a:bb:91:86:4e:9c:6d:51:91:d1:e8:
                    70:9d:5c:40:64:02:63:54:c0:62:92:a9:76:b8:e0:
                    61:ea:d7:1c:80:84:a9:22:9c:36:a6:4b:7f:01:02:
                    15:a9:27:89:9c:7a:09:61:7e:b7:a0:ee:a8:13:6f:
                    bd:0b:bf:9b:31:0f:23:8c:29:66:9b:4b:b2:da:82:
                    34:f2:eb:9f:7c:8f:07:d0:7b:ac:7f:12:4d:ea:fb:
                    2d:87:d9:31:bb:5f:bb:51:75:6f:bc:53:86:45:6a:
                    2e:bb:dd:c2:f3:4e:91:43:e1:66:b0:20:a7:d7:18:
                    cf:01:01:b5:f7:c7:a3:fa:67:f5:20:a9:72:2a:ee:
                    d0:ef:53:4c:7a:26:85:76:81:71:23:c8:50:cc:c5:
                    ea:71:ba:f5:27:c4:e6:6b:ea:8f:3d:47:03:e0:17:
                    cc:73:39:b5:c2:dc:c1:11:8e:00:79:b7:07:2c:a7:
                    06:e9:94:4e:fc:25:3b:af:9a:ee:22:53:a2:d1:4e:
                    73:16:ef:b0:e3:ee:f3:d3:45:bb:18:e0:ed:15:7b:
                    82:39:dc:09:96:8c:e8:a7:48:a4:f7:3e:23:8f:0f:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:F8:B6:B3:D6:B9:25:FE:CC:D8:24:EB:7D:5F:00:F7:DF:DF:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/252a0154-0e99-44f2-af82-30c36afe00c0/252a0154-0e99-44f2-af82-30c36afe00c0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.196.0/22
                IPv6:
                  2001:504:31::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21919

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:d5:6b:2e:93:c0:6c:f3:f3:20:5c:27:5c:3c:55:20:59:
         9f:34:2d:76:ff:0c:ec:2a:f1:27:98:3f:98:d2:6f:05:de:4e:
         5c:b4:d5:ac:fd:a7:14:e4:a3:f4:d0:d9:8d:a2:42:82:26:cc:
         3c:57:4d:16:18:25:02:5a:d6:a9:f3:d1:a6:32:59:a6:c9:a6:
         47:f7:c2:6e:ba:af:76:69:1b:4e:04:de:b8:a7:e5:f1:5b:ed:
         30:6f:ca:ff:6f:2e:ba:84:6b:36:9d:33:d3:de:27:9f:dc:f8:
         32:5e:2d:7c:e9:ba:72:e6:a9:bf:e2:89:8b:07:9c:92:35:f7:
         ba:08:f1:c2:19:cd:34:09:a4:e4:85:24:88:7c:84:ba:97:e0:
         c1:3e:bf:ca:d7:cb:e1:7f:38:de:ce:2e:d0:13:96:04:bb:40:
         17:f3:c6:5c:4f:6b:d6:e2:b9:f7:67:85:96:4b:57:87:08:ab:
         8e:79:ee:86:1d:7c:b7:36:01:fb:d9:78:3e:74:3c:78:ea:e1:
         bd:d4:68:5f:6f:f1:ea:62:80:ab:58:99:89:73:43:4f:84:a9:
         b1:19:2e:a0:fe:f5:7e:f5:5d:44:a8:7c:fc:15:08:d0:2a:e8:
         80:62:82:ed:64:10:83:6f:4a:3e:33:56:8b:97:ec:0d:98:bd:
         ea:48:c8:c5
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEcvKPJKATJiLodrNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDkxMjAwNDUyNloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk
MjUyYTAxNTQtMGU5OS00NGYyLWFmODItMzBjMzZhZmUwMGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhQdQtFUf/twMDXpUzZUHBzohIpIQ3wLJ208
6EuIn7bjGruRhk6cbVGR0ehwnVxAZAJjVMBikql2uOBh6tccgISpIpw2pkt/AQIV
qSeJnHoJYX63oO6oE2+9C7+bMQ8jjClmm0uy2oI08uuffI8H0HusfxJN6vsth9kx
u1+7UXVvvFOGRWouu93C806RQ+FmsCCn1xjPAQG198ej+mf1IKlyKu7Q71NMeiaF
doFxI8hQzMXqcbr1J8Tma+qPPUcD4BfMczm1wtzBEY4AebcHLKcG6ZRO/CU7r5ru
IlOi0U5zFu+w4+7z00W7GODtFXuCOdwJlozop0ik9z4jjw+LowIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFCsq+Laz1rkl/szYJOt9XwD339+VMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y
NTJhMDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMzNmFmZTAwYzAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzI1MmEwMTU0LTBlOTktNDRmMi1h
ZjgyLTMwYzM2YWZlMDBjMC8yNTJhMDE1NC0wZTk5LTQ0ZjItYWY4Mi0zMGMzNmFm
ZTAwYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBALON8QwDwQCAAIwCQMHACABBQQAMTAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJVnzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcCtVrLpPAbPPzIFwnXDxVIFmf
NC12/wzsKvEnmD+Y0m8F3k5ctNWs/acU5KP00NmNokKCJsw8V00WGCUCWtap89Gm
MlmmyaZH98Juuq92aRtOBN64p+XxW+0wb8r/by66hGs2nTPT3ief3PgyXi186bpy
5qm/4omLB5ySNfe6CPHCGc00CaTkhSSIfIS6l+DBPr/K18vhfzjezi7QE5YEu0AX
88ZcT2vW4rn3Z4WWS1eHCKuOee6GHXy3NgH72Xg+dDx46uG91Ghfb/HqYoCrWJmJ
c0NPhKmxGS6g/vV+9V1EqHz8FQjQKuiAYoLtZBCDb0o+M1aLl+wNmL3qSMjF
-----END CERTIFICATE-----