Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff.cer
File:                     5786d007-f57b-4159-a9a9-f15993359aff.cer (raw, json)
Hash identifier:          pu6ryieYo1bztaWP/WDqdxeY/1ZoL5hDQ2U0xexc4bU=
Subject key identifier:   14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843D6369EF6A0E071B9DF679780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Nov 2023 01:45:14 +0000
Certificate not after:    Thu 12 Feb 2026 01:45:14 +0000
Subordinate resources:    AS: 22804
                          IP: 161.129.0.0/20
                          IP: 199.102.88.0/22
                          IP: 204.80.86.0/23
                          IP: 208.79.164.0/22
                          IP: 2605:9280::/32
                          IP: 2620:3a:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:36:9e:f6:a0:e0:71:b9:df:67:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 10 01:45:14 2023 GMT
            Not After : Feb 12 01:45:14 2026 GMT
        Subject: CN=5786d007-f57b-4159-a9a9-f15993359aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:26:ba:8d:65:d3:ff:5a:c0:13:e5:d2:c0:
                    2a:c4:89:6f:bb:47:a0:5b:ed:f6:ed:21:b6:fe:cf:
                    84:ef:1c:ea:64:3d:e8:6f:8f:81:09:40:79:24:ec:
                    95:57:dd:e8:0f:d9:c7:53:56:24:7c:78:fd:8d:1a:
                    64:27:8f:2e:09:e1:c0:d4:15:9e:40:77:b2:0a:9a:
                    56:11:f7:dc:78:a5:dc:f9:6c:e1:9e:5d:57:73:51:
                    60:9b:0a:c4:8e:8f:9f:d9:35:47:3e:0a:55:c0:54:
                    ed:bd:66:aa:3f:5e:75:00:54:de:4b:52:97:98:51:
                    4f:f4:ae:db:5f:79:4c:61:4d:f4:8f:83:98:f5:dd:
                    81:46:f8:ca:e0:3e:8b:78:8e:ba:75:c3:73:bd:9b:
                    9b:e8:9f:8e:6b:77:4d:45:1e:2c:00:38:9e:fc:c9:
                    c7:36:15:a6:0c:e8:cc:bb:2e:cd:98:c8:5e:0f:43:
                    95:47:fe:2e:05:4c:a3:39:fd:79:55:bb:9a:0c:70:
                    3c:99:f1:90:7e:7e:7d:db:42:7b:da:70:90:59:26:
                    6b:84:24:d5:eb:3f:6e:17:b3:8a:a5:01:28:b2:1e:
                    f6:95:36:e0:e9:b9:b1:4e:2f:7c:fa:6e:0b:64:9f:
                    75:9f:af:24:cb:cc:6d:40:d1:5f:32:7e:81:23:a7:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:7A:0B:4D:03:6D:C7:58:1C:C4:6D:8B:AB:06:1B:87:DC:99:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5786d007-f57b-4159-a9a9-f15993359aff/5786d007-f57b-4159-a9a9-f15993359aff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.0.0/20
                  199.102.88.0/22
                  204.80.86.0/23
                  208.79.164.0/22
                IPv6:
                  2605:9280::/32
                  2620:3a:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22804

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:af:7b:b5:f9:ab:79:bd:72:24:77:79:b2:a8:e8:c0:63:6a:
         84:9a:bb:0c:66:9b:df:f1:62:b6:9a:5d:4a:eb:15:1a:95:27:
         61:ef:e5:2e:bc:62:8c:2d:14:b4:5f:7c:0c:75:61:da:5e:58:
         21:15:f6:4e:da:03:40:d2:06:b8:78:26:90:52:d9:dd:eb:64:
         ba:a8:0f:ee:62:fc:13:9b:ba:31:ba:2f:e3:9f:f4:e5:93:7d:
         18:70:7d:c7:5a:9b:cb:e7:e9:87:ca:37:1d:b6:9d:4f:1f:31:
         6c:d1:5d:dc:af:8f:36:b6:46:dc:08:4f:9d:7e:05:21:c6:f4:
         43:66:76:4b:55:26:7c:ad:68:39:d5:8a:64:dc:eb:0c:ba:24:
         51:a7:2e:01:69:33:8a:31:2f:cf:80:47:7f:93:7f:75:8e:93:
         dc:35:ab:f5:27:db:92:26:4a:c0:b5:a9:08:8f:15:f7:f3:d3:
         d5:12:e8:ff:80:89:af:9d:6e:59:a7:dd:0c:0c:59:4a:6e:01:
         f0:c5:27:eb:de:12:16:9c:fe:e5:bb:51:ae:dd:06:ee:6a:45:
         7d:ad:61:ae:b4:fb:b8:20:19:81:f1:da:db:c0:4b:8d:68:b1:
         bd:c1:ba:44:5a:76:13:51:3b:22:28:54:9e:58:87:fd:54:dc:
         51:03:4e:3a
-----BEGIN CERTIFICATE-----
MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEPWNp72oOBxud9nl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTExMDAxNDUxNFoXDTI2MDIxMjAxNDUxNFowLzEtMCsGA1UEAxMk
NTc4NmQwMDctZjU3Yi00MTU5LWE5YTktZjE1OTkzMzU5YWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBkmuo1l0/9awBPl0sAqxIlvu0egW+327SG2
/s+E7xzqZD3ob4+BCUB5JOyVV93oD9nHU1YkfHj9jRpkJ48uCeHA1BWeQHeyCppW
EffceKXc+Wzhnl1Xc1FgmwrEjo+f2TVHPgpVwFTtvWaqP151AFTeS1KXmFFP9K7b
X3lMYU30j4OY9d2BRvjK4D6LeI66dcNzvZub6J+Oa3dNRR4sADie/MnHNhWmDOjM
uy7NmMheD0OVR/4uBUyjOf15VbuaDHA8mfGQfn5920J72nCQWSZrhCTV6z9uF7OK
pQEosh72lTbg6bmxTi98+m4LZJ91n68ky8xtQNFfMn6BI6ev6QIDAQABo4IERDCC
BEAwHQYDVR0OBBYEFBRhegtNA23HWBzEbYurBhuH3JktMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81
Nzg2ZDAwNy1mNTdiLTQxNTktYTlhOS1mMTU5OTMzNTlhZmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU3ODZkMDA3LWY1N2ItNDE1OS1h
OWE5LWYxNTk5MzM1OWFmZi81Nzg2ZDAwNy1mNTdiLTQxNTktYTlhOS1mMTU5OTMz
NTlhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSQYIKwYBBQUH
AQcBAf8EOjA4MB4EAgABMBgDBAShgQADBALHZlgDBAHMUFYDBALQT6QwFgQCAAIw
EAMFACYFkoADBwAmIAA6gAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICWRQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlq97tfmreb1yJHd5sqjowGNqhJq7DGab3/FitppdSusVGpUnYe/lLrxi
jC0UtF98DHVh2l5YIRX2TtoDQNIGuHgmkFLZ3etkuqgP7mL8E5u6Mbov45/05ZN9
GHB9x1qby+fph8o3HbadTx8xbNFd3K+PNrZG3AhPnX4FIcb0Q2Z2S1UmfK1oOdWK
ZNzrDLokUacuAWkzijEvz4BHf5N/dY6T3DWr9SfbkiZKwLWpCI8V9/PT1RLo/4CJ
r51uWafdDAxZSm4B8MUn694SFpz+5btRrt0G7mpFfa1hrrT7uCAZgfHa28BLjWix
vcG6RFp2E1E7IihUnliH/VTcUQNOOg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:04 2024 by rpki-client on console-ams.rpki-client.org