Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
File:                     5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer (raw, json)
Hash identifier:          GljRkWLa8gDl4OpbgoWbIVWMYbRAFrXSej7ceb0FMZ8=
Subject key identifier:   FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority key identifier: 3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D
Certificate issuer:       /CN=42b2991f-22c7-42f7-8cf5-4f3138859732
Certificate serial:       010D0C9F4328583FE80075D63272147CF2940280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml
Certificate not before:   Mon 14 Nov 2022 15:32:55 +0000
Certificate not after:    Sun 16 Feb 2025 15:32:55 +0000
Subordinate resources:    IP: 184.169.128.0/17
                          IP: 2620:107:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e8:00:75:d6:32:72:14:7c:f2:94:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b2991f-22c7-42f7-8cf5-4f3138859732
        Validity
            Not Before: Nov 14 15:32:55 2022 GMT
            Not After : Feb 16 15:32:55 2025 GMT
        Subject: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:a6:4f:4f:f7:11:6b:21:b1:97:9a:4e:d1:
                    5a:9e:22:09:ac:a1:61:d5:fa:0f:0e:20:3e:e2:49:
                    ee:6a:30:19:ec:ec:c1:6b:dd:5b:10:9c:3a:dd:da:
                    9e:f9:4c:de:b3:fb:eb:34:5f:95:0f:16:b6:ca:42:
                    73:31:01:9c:5b:67:31:e9:79:3e:8b:20:78:94:e0:
                    af:6b:f7:34:84:18:7b:e2:59:a9:85:99:1e:96:ed:
                    52:02:f3:a3:54:50:24:ac:a4:f2:7a:44:ee:e6:74:
                    7c:f1:0d:9c:bb:35:cb:60:bb:ef:36:7e:f0:7f:8e:
                    72:e3:4c:ed:f5:65:09:cf:9e:6e:9e:92:e2:09:d2:
                    84:d7:10:5a:1a:08:5e:9d:b6:62:bc:1c:c3:81:9a:
                    eb:72:66:8c:8b:c6:52:99:9a:95:f6:6e:e3:ba:52:
                    bc:08:bd:fa:71:90:27:ea:c2:39:a7:96:b8:ac:96:
                    7d:6e:28:77:cf:3d:a2:bb:cc:7c:3c:2a:a6:f5:0f:
                    2e:8c:ab:de:75:54:e9:94:de:c8:08:b0:54:25:03:
                    ed:02:eb:55:9b:dc:98:5f:26:9e:fc:d3:8b:2f:a5:
                    81:13:6b:b1:ef:4c:e0:2d:6a:cf:d6:16:a9:48:3e:
                    7d:33:61:62:db:94:68:ba:aa:f3:3e:06:75:83:cf:
                    b4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/a841823c-a10d-477c-bfdf-4086f0b1594c/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl

            X509v3 Authority Key Identifier:
                keyid:3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ed:f4:c1:19:e2:da:b5:2d:bf:83:0c:8a:a7:20:5e:06:c6:
         14:0f:a3:d4:34:90:4a:bf:76:c6:13:a4:d3:a3:42:11:cc:de:
         45:e4:a0:20:03:b4:35:65:c9:53:2b:45:97:0d:b9:22:67:e7:
         3a:f7:9e:da:f9:ea:bd:a5:8b:9c:f6:1f:c9:16:a3:e6:51:1e:
         96:b9:66:7a:5e:56:1e:8d:64:49:63:1c:5b:b0:35:a4:1f:44:
         c3:6f:d7:ea:72:7b:ce:97:77:2f:ff:5a:2d:83:b1:67:d3:8d:
         20:5a:88:0f:ba:0f:91:23:44:7e:8a:6f:0c:b3:0b:f2:97:6b:
         67:8b:f3:4c:f6:fb:f5:a7:6a:5d:65:01:97:88:12:74:be:9b:
         15:6b:4b:6b:41:7c:ad:05:dc:8a:35:56:09:2a:24:12:e6:97:
         99:08:49:a4:36:54:64:8c:45:5f:e7:7f:80:96:f3:9a:a7:3d:
         86:bb:0b:15:54:57:32:14:93:e5:50:81:9f:62:25:a5:88:d7:
         17:c2:d7:79:23:8a:e2:99:cf:86:a1:8c:37:cf:ac:5f:32:04:
         ba:70:09:67:d8:86:37:90:82:30:66:74:23:da:77:33:7a:26:
         44:f9:9d:93:7b:84:70:bc:8d:3c:b9:d3:8b:8e:c5:8c:b4:32:
         23:fe:b3:03
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWD/oAHXWMnIUfPKUAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJiMjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5
NzMyMB4XDTIyMTExNDE1MzI1NVoXDTI1MDIxNjE1MzI1NVowPTE7MDkGA1UEAxMy
NWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjli
NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQKZPT/cRayGxl5pO
0VqeIgmsoWHV+g8OID7iSe5qMBns7MFr3VsQnDrd2p75TN6z++s0X5UPFrbKQnMx
AZxbZzHpeT6LIHiU4K9r9zSEGHviWamFmR6W7VIC86NUUCSspPJ6RO7mdHzxDZy7
Nctgu+82fvB/jnLjTO31ZQnPnm6ekuIJ0oTXEFoaCF6dtmK8HMOBmutyZoyLxlKZ
mpX2buO6UrwIvfpxkCfqwjmnlrisln1uKHfPPaK7zHw8Kqb1Dy6Mq951VOmU3sgI
sFQlA+0C61Wb3JhfJp7804svpYETa7HvTOAtas/WFqlIPn0zYWLblGi6qvM+BnWD
z7RZAgMBAAGjggQBMIID/TAdBgNVHQ4EFgQU/iLg9yLMTwYMWFoSb+aiZQA2Xkgw
ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt
cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWEx
MGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy8wgYIGCCsGAQUFBzAKhnZyc3luYzov
L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4
MjNjLWExMGQtNDc3Yy1iZmRmLTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFn
cXJxX20wM19tMlEubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51
cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2E4NDE4MjNjLWExMGQtNDc3Yy1i
ZmRmLTQwODZmMGIxNTk0Yy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB
Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l
dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4
Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyLzQyYjI5OTFmLTIyYzctNDJmNy04Y2Y1LTRmMzEzODg1OTczMi80MmIyOTkx
Zi0yMmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIuY3JsMB8GA1UdIwQYMBaAFD/W
fg8C02/hiTQnpwnrcORO0zudMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE
gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJi
Mjk5MWYtMjJjNy00MmY3LThjZjUtNGYzMTM4ODU5NzMyLmNlcjAwBggrBgEFBQcB
BwEB/wQhMB8wDAQCAAEwBgMEB7ipgDAPBAIAAjAJAwcEJiABBzAAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AAjt9MEZ4tq1Lb+DDIqnIF4GxhQPo9Q0kEq/dsYTpNOjQhHM3kXkoCADtDVlyVMr
RZcNuSJn5zr3ntr56r2li5z2H8kWo+ZRHpa5ZnpeVh6NZEljHFuwNaQfRMNv1+py
e86Xdy//Wi2DsWfTjSBaiA+6D5EjRH6KbwyzC/KXa2eL80z2+/Wnal1lAZeIEnS+
mxVrS2tBfK0F3Io1VgkqJBLml5kISaQ2VGSMRV/nf4CW85qnPYa7CxVUVzIUk+VQ
gZ9iJaWI1xfC13kjiuKZz4ahjDfPrF8yBLpwCWfYhjeQgjBmdCPadzN6JkT5nZN7
hHC8jTy504uOxYy0MiP+swM=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:42 2024 by rpki-client on console-ams.rpki-client.org