Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f331ebc-ff1e-482c-a962-9e8c7c702bea.cer
File:                     5f331ebc-ff1e-482c-a962-9e8c7c702bea.cer (raw, json)
Hash identifier:          O6MTmURAxdgI4ff4GUiNz8AUHQX/y4BI5CIsAbGumL8=
Subject key identifier:   82:B0:50:76:E1:3B:D8:25:30:96:7C:8C:90:0C:38:69:89:3E:68:73
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4B0FDD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f331ebc-ff1e-482c-a962-9e8c7c702bea/5f331ebc-ff1e-482c-a962-9e8c7c702bea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f331ebc-ff1e-482c-a962-9e8c7c702bea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Dec 2014 20:49:36 +0000
Certificate not after:    Tue 03 Dec 2024 20:49:36 +0000
Subordinate resources:    AS: 18695

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4b:0f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec  3 20:49:36 2014 GMT
            Not After : Dec  3 20:49:36 2024 GMT
        Subject: CN=5f331ebc-ff1e-482c-a962-9e8c7c702bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:b7:ff:12:3b:c0:84:10:5d:9b:0f:7e:5a:
                    c5:65:cf:c9:7e:ee:f7:78:08:24:9d:11:16:d4:61:
                    07:1f:69:0a:bb:ca:41:41:e3:01:39:a8:0c:db:1d:
                    85:6d:02:a1:55:61:82:d7:22:32:f0:f5:25:9f:a1:
                    ac:6a:6b:a4:c0:de:a7:84:a5:52:96:f3:04:a0:f6:
                    7c:26:f6:41:35:79:a7:9a:29:6b:09:97:f0:1d:7a:
                    2e:c2:3c:75:ad:08:43:a1:3b:94:ec:d6:4d:d6:66:
                    a0:a8:a2:ac:bc:3a:8a:18:b0:86:55:51:dc:90:cb:
                    84:17:bf:92:4f:0b:f6:45:94:51:dc:69:92:1c:cd:
                    8f:65:10:b9:08:4b:8f:f8:3c:c6:d4:a0:c5:39:c0:
                    9c:ce:4f:b0:c9:b9:a1:c3:73:84:31:4b:29:bb:ea:
                    be:f5:6f:ea:95:b9:79:38:6c:d8:0d:ed:48:59:33:
                    f7:d0:6c:06:c1:9c:4b:77:f1:9f:14:2c:b3:93:5f:
                    b4:5d:a6:27:11:e6:ca:b8:ae:8f:12:1c:a1:35:a9:
                    f1:9f:76:ff:c5:db:56:c4:cf:fc:37:bc:46:3e:ed:
                    6f:ed:4b:e0:a6:02:6d:ff:54:4b:90:a3:38:b2:0e:
                    db:6c:48:83:7c:73:18:e5:95:07:e1:9c:16:b7:f2:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:50:76:E1:3B:D8:25:30:96:7C:8C:90:0C:38:69:89:3E:68:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f331ebc-ff1e-482c-a962-9e8c7c702bea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5f331ebc-ff1e-482c-a962-9e8c7c702bea/5f331ebc-ff1e-482c-a962-9e8c7c702bea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18695

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:48:18:74:e0:ce:22:b1:ae:00:09:64:13:8b:80:a9:2e:
         74:4b:13:15:4d:d0:8c:b0:ea:30:41:fd:a7:58:03:3a:b9:4d:
         a1:d3:89:6f:99:ed:e2:4c:39:90:a9:5b:df:dc:d9:c5:30:76:
         4b:f1:33:b4:ef:0a:ce:cb:ff:04:2e:d6:cf:a5:36:cb:9a:58:
         9f:f4:81:d9:37:e5:b2:4f:3d:75:0d:65:e8:c8:92:e5:3b:ce:
         ae:7d:08:56:08:5d:bb:22:fa:c1:40:a9:2d:09:1c:dd:d9:c3:
         94:ae:bb:e9:ef:c8:28:5d:7b:9f:af:cd:f4:fc:dc:13:62:ca:
         1d:eb:9e:85:f8:7c:20:ca:13:1e:a6:d4:4d:35:1e:00:c7:51:
         24:72:32:f9:21:32:90:95:4d:05:04:25:86:94:34:a9:37:0b:
         55:f0:96:6a:3f:7d:a5:5b:d5:0f:1e:f1:a2:fe:d4:c2:cd:ea:
         62:4c:b0:05:a8:b4:30:19:b8:80:3a:20:a5:32:c3:a6:ed:22:
         ba:ed:ad:a7:c3:51:d1:b9:33:c8:2a:7c:1e:68:32:32:9b:64:
         aa:c9:b2:4c:7f:46:19:2f:91:25:0c:76:2c:07:64:1b:f1:ac:
         7b:14:d5:6c:6c:3b:9f:8e:f1:09:69:28:ff:b8:4c:07:e7:9d:
         9c:5e:77:52
-----BEGIN CERTIFICATE-----
MIIG4zCCBc2gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbs1LD90wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTli
MjAeFw0xNDEyMDMyMDQ5MzZaFw0yNDEyMDMyMDQ5MzZaMC8xLTArBgNVBAMTJDVm
MzMxZWJjLWZmMWUtNDgyYy1hOTYyLTllOGM3YzcwMmJlYTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALrJt/8SO8CEEF2bD35axWXPyX7u93gIJJ0RFtRh
Bx9pCrvKQUHjATmoDNsdhW0CoVVhgtciMvD1JZ+hrGprpMDep4SlUpbzBKD2fCb2
QTV5p5opawmX8B16LsI8da0IQ6E7lOzWTdZmoKiirLw6ihiwhlVR3JDLhBe/kk8L
9kWUUdxpkhzNj2UQuQhLj/g8xtSgxTnAnM5PsMm5ocNzhDFLKbvqvvVv6pW5eThs
2A3tSFkz99BsBsGcS3fxnxQss5NftF2mJxHmyriujxIcoTWp8Z92/8XbVsTP/De8
Rj7tb+1L4KYCbf9US5CjOLIO22xIg3xzGOWVB+GcFrfyU0MCAwEAAaOCA/kwggP1
MB0GA1UdDgQWBBSCsFB24TvYJTCWfIyQDDhpiT5oczCCAcgGCCsGAQUFBwELBIIB
ujCCAbYwgaoGCCsGAQUFBzAFhoGdcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWYz
MzFlYmMtZmYxZS00ODJjLWE5NjItOWU4YzdjNzAyYmVhLzCB0gYIKwYBBQUHMAqG
gcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv
NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJk
NjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZjMzMWViYy1mZjFlLTQ4MmMtYTk2
Mi05ZThjN2M3MDJiZWEvNWYzMzFlYmMtZmYxZS00ODJjLWE5NjItOWU4YzdjNzAy
YmVhLm1mdDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLmFyaW4ubmV0L25vdGlm
aWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCBtwYDVR0fBIGvMIGsMIGpoIGm
oIGjhoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0
Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmEyNDY5NDctMmQ2Mi00YTZj
LWJhMDUtODcxODdmMDA5OWIyLmNybDAfBgNVHSMEGDAWgBTInVpFZBpr0iP6ypaC
MI7W0natfDAOBgNVHQ8BAf8EBAMCAQYwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr
BgEFBQcwAoZ7cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0
Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIuY2VyMBkGCCsGAQUFBwEI
AQH/BAowCKAGMAQCAkkHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwCwYJKoZIhvcNAQELA4IBAQCap0gYdODOIrGuAAlkE4uAqS50SxMVTdCM
sOowQf2nWAM6uU2h04lvme3iTDmQqVvf3NnFMHZL8TO07wrOy/8ELtbPpTbLmlif
9IHZN+WyTz11DWXoyJLlO86ufQhWCF27IvrBQKktCRzd2cOUrrvp78goXXufr830
/NwTYsod656F+HwgyhMeptRNNR4Ax1EkcjL5ITKQlU0FBCWGlDSpNwtV8JZqP32l
W9UPHvGi/tTCzepiTLAFqLQwGbiAOiClMsOm7SK67a2nw1HRuTPIKnweaDIym2Sq
ybJMf0YZL5ElDHYsB2Qb8ax7FNVsbDufjvEJaSj/uEwH552cXndS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:06:49 2024 by rpki-client on console-fra.rpki-client.org