Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer
File:                     4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer (raw, json)
Hash identifier:          aQwx7OtMp6Tk6b/r4kv+9Kzw/KftD7FpISSuhZWi02s=
Subject key identifier:   F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584246E10B845218DB0BD48EB400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 00:45:17 +0000
Certificate not after:    Mon 22 Sep 2025 00:45:17 +0000
Subordinate resources:    IP: 168.151.29.0/24
                          IP: 192.206.23.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 Mar 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:e1:0b:84:52:18:db:0b:d4:8e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 20 00:45:17 2023 GMT
            Not After : Sep 22 00:45:17 2025 GMT
        Subject: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:47:dd:e9:83:ce:76:3b:59:dc:d3:8e:d1:
                    c7:95:ca:dd:cd:2d:48:3c:5e:67:81:c3:7b:45:50:
                    9d:13:c2:48:e6:77:53:91:fb:ee:dd:1b:e0:03:3c:
                    67:e4:49:44:c9:bb:34:eb:da:5b:4e:4e:43:6d:14:
                    2c:6a:fe:25:4a:2e:75:74:74:bf:5e:c9:97:7f:07:
                    b4:70:21:89:f6:e6:be:2c:dd:4c:72:3f:59:44:53:
                    e0:60:4f:5e:83:bd:6f:15:80:be:ea:f6:b8:37:34:
                    4d:66:2b:2c:3f:2f:be:6a:b5:3e:a9:29:55:ab:ca:
                    28:cd:0d:11:b5:dc:2d:8d:ba:a6:37:60:93:57:59:
                    ac:86:a6:7b:db:a9:b3:23:99:67:2f:b2:2f:ce:0a:
                    c0:e5:6b:b2:40:55:3a:09:60:ff:3e:db:0c:79:02:
                    3a:b3:66:79:bc:9e:54:81:1b:e5:dc:1d:55:ab:34:
                    92:99:d5:ee:3e:f1:95:2e:21:f4:64:9e:2f:20:ce:
                    95:42:8c:4f:7c:1c:89:7d:d8:2c:42:3f:ff:91:a3:
                    fe:e3:e7:74:01:fd:f8:3d:f5:af:51:11:4c:a3:d4:
                    62:56:16:45:fd:fa:50:c8:ad:85:9e:4e:9d:16:84:
                    21:30:28:84:44:fb:3b:b3:38:4d:39:77:e7:bf:42:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.29.0/24
                  192.206.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:db:24:bb:08:f0:1e:60:ae:95:d9:fc:40:c2:32:e3:0d:da:
         62:4d:4a:2e:b9:14:c8:cc:73:bc:f4:f1:32:a9:25:26:20:f7:
         73:d9:01:55:e3:17:7e:67:2c:eb:9d:c8:0c:8a:c5:75:03:b1:
         a1:27:b6:23:e7:e1:e1:af:5d:da:4c:a3:03:2c:6c:c6:0b:87:
         73:88:c5:ba:3f:22:c8:04:05:a4:4c:6e:82:0f:53:11:54:31:
         d0:1c:2b:fc:69:f0:6f:ca:6d:b7:5d:66:09:f0:fd:a3:0f:d4:
         34:40:28:31:73:61:d9:7f:58:29:20:61:e5:2a:23:8b:67:81:
         d0:24:a8:76:f6:55:b9:f6:ba:1c:e5:da:75:41:ec:27:8f:39:
         0f:29:c8:ea:4d:73:28:d4:19:ec:24:94:84:da:74:61:6c:65:
         c2:13:2f:fd:f2:bb:17:0d:88:1d:7b:b4:72:fa:b5:d6:0c:92:
         02:bc:c9:59:f5:c1:a9:6e:32:2b:ca:52:24:0d:75:d9:eb:0c:
         ff:5d:41:f4:64:99:d0:99:6f:c5:0d:9f:9e:bc:de:62:68:9e:
         29:26:42:94:a0:28:4e:87:4d:33:a8:35:c1:d5:b1:5e:b9:be:
         29:54:3f:5b:af:9f:57:fb:42:f3:51:51:c6:58:76:83:79:37:
         fc:b5:0e:b5
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEJG4QuEUhjbC9SOtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDYyMDAwNDUxN1oXDTI1MDkyMjAwNDUxN1owLzEtMCsGA1UEAxMk
NDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2QxMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA735H3emDznY7WdzTjtHHlcrdzS1IPF5ngcN7
RVCdE8JI5ndTkfvu3RvgAzxn5ElEybs069pbTk5DbRQsav4lSi51dHS/XsmXfwe0
cCGJ9ua+LN1Mcj9ZRFPgYE9eg71vFYC+6va4NzRNZissPy++arU+qSlVq8oozQ0R
tdwtjbqmN2CTV1mshqZ726mzI5lnL7IvzgrA5WuyQFU6CWD/PtsMeQI6s2Z5vJ5U
gRvl3B1VqzSSmdXuPvGVLiH0ZJ4vIM6VQoxPfByJfdgsQj//kaP+4+d0Af34PfWv
URFMo9RiVhZF/fpQyK2Fnk6dFoQhMCiERPs7szhNOXfnv0KIUQIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFPK8P2AVIw2La3zmUll4bnirIRdmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80
MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMzJiZjhjLTRhZjctNGIwMS05
Y2Q2LWRmYTIxOTNkMTI3ZC80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkz
ZDEyN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAColx0DBADAzhcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEtskuwjwHmCu
ldn8QMIy4w3aYk1KLrkUyMxzvPTxMqklJiD3c9kBVeMXfmcs653IDIrFdQOxoSe2
I+fh4a9d2kyjAyxsxguHc4jFuj8iyAQFpExugg9TEVQx0Bwr/Gnwb8ptt11mCfD9
ow/UNEAoMXNh2X9YKSBh5Soji2eB0CSodvZVufa6HOXadUHsJ485DynI6k1zKNQZ
7CSUhNp0YWxlwhMv/fK7Fw2IHXu0cvq11gySArzJWfXBqW4yK8pSJA112esM/11B
9GSZ0JlvxQ2fnrzeYmieKSZClKAoTodNM6g1wdWxXrm+KVQ/W6+fV/tC81FRxlh2
g3k3/LUOtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 28 16:10:47 2024 by rpki-client on console-ams.rpki-client.org