Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer
File:                     65e1c954-67fc-4b1c-85ea-8f2b257fd37b.cer (raw, json)
Hash identifier:          vVq3WUPRk+fKwIoiyaVY4mZpyIlR0FiAhS/Mtuma+bA=
Subject key identifier:   9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846DE3319740589CAC2D4944AC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Aug 2024 00:45:25 +0000
Certificate not after:    Tue 17 Nov 2026 01:45:25 +0000
Subordinate resources:    AS: 12059
                          IP: 216.223.128.0/19
                          IP: 2001:18f0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:de:33:19:74:05:89:ca:c2:d4:94:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 14 00:45:25 2024 GMT
            Not After : Nov 17 01:45:25 2026 GMT
        Subject: CN=65e1c954-67fc-4b1c-85ea-8f2b257fd37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:a4:e4:be:95:a2:cb:ce:b3:90:31:21:59:
                    78:84:34:a1:86:32:41:47:1d:7e:d7:ba:bb:e2:be:
                    3b:2c:20:0e:29:cc:07:75:10:01:fc:29:a1:89:2a:
                    93:e3:cd:84:8f:02:bc:b8:1e:7d:3a:d9:df:66:68:
                    ea:c4:7e:da:cd:c8:14:67:39:11:9f:bb:0b:c5:24:
                    91:32:f0:be:8b:25:d9:e9:f4:0c:7f:b7:19:b1:5e:
                    f6:26:ce:a9:34:5f:f0:b1:56:6a:fa:0f:d8:d9:1f:
                    85:09:c6:f3:0b:8c:5e:49:c3:01:db:19:32:8f:58:
                    db:3c:14:e0:8c:ca:f3:90:e8:18:a2:a7:ef:2c:9c:
                    3a:ac:fb:3d:f0:ed:ff:b1:61:5e:bf:6d:85:64:2b:
                    7e:a6:06:e4:8f:75:96:70:77:9f:14:b9:15:af:22:
                    4a:d3:49:92:40:a6:54:5d:6c:f4:eb:57:f0:ef:df:
                    01:f3:44:7b:ba:3d:61:7f:7d:e5:f4:58:20:30:d9:
                    8d:74:b5:d5:5c:6b:2d:eb:40:2a:aa:7b:f6:a9:91:
                    d6:76:6f:a4:ce:ae:57:1f:b9:78:5a:a2:ae:51:32:
                    5f:f8:aa:82:bb:5b:64:a6:c0:e3:b7:ef:40:87:a3:
                    1c:ff:05:33:b4:94:7a:ad:84:49:d2:72:f7:c7:af:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E7:3F:7B:17:99:01:C3:B4:2B:A2:DD:CC:D7:2D:80:1E:F8:F4:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65e1c954-67fc-4b1c-85ea-8f2b257fd37b/65e1c954-67fc-4b1c-85ea-8f2b257fd37b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.223.128.0/19
                IPv6:
                  2001:18f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12059

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4a:e4:eb:e1:c4:20:5d:58:ad:5b:7a:3d:ba:78:20:ef:97:
         ec:31:65:ac:a4:9e:6d:06:b5:0a:55:de:34:64:f7:68:71:37:
         b2:c8:9e:80:09:22:8e:b3:12:e6:0e:31:56:ed:74:5f:95:58:
         90:00:72:c6:f3:16:79:a9:e0:b6:32:56:38:9b:ce:51:16:6f:
         41:a6:12:a5:f1:b4:9c:8d:01:a3:0f:bf:f9:ee:ce:e0:fb:08:
         5d:bb:50:2a:c1:51:72:40:67:14:38:d5:2d:f6:62:e7:0d:ad:
         12:55:0a:1c:4d:dc:73:03:3a:1d:8b:93:12:86:50:4b:9e:89:
         0c:ae:53:c1:8e:30:2f:2f:19:06:9c:9d:c3:38:d6:bd:29:19:
         8b:74:1e:5c:9e:45:b8:3b:15:b8:86:23:0c:65:8d:1c:78:38:
         a3:b4:d6:4c:a1:60:3c:06:cd:d2:97:24:0b:ce:1a:20:08:72:
         47:b3:5c:76:7f:e4:9c:cb:31:cb:2a:bd:ba:3a:ca:e1:28:e3:
         79:d6:e0:1c:77:e0:a8:be:45:f0:24:77:06:4b:8b:2d:83:ba:
         e6:21:89:70:9c:1b:45:d6:91:d7:df:00:ee:cd:26:c7:6d:c1:
         3b:07:6e:e5:50:b3:fa:48:e6:a3:56:3d:b9:ac:a0:41:4c:53:
         cd:82:4b:ba
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEbeMxl0BYnKwtSUSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDgxNDAwNDUyNVoXDTI2MTExNzAxNDUyNVowLzEtMCsGA1UEAxMk
NjVlMWM5NTQtNjdmYy00YjFjLTg1ZWEtOGYyYjI1N2ZkMzdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiGk5L6VosvOs5AxIVl4hDShhjJBRx1+17q7
4r47LCAOKcwHdRAB/CmhiSqT482EjwK8uB59OtnfZmjqxH7azcgUZzkRn7sLxSSR
MvC+iyXZ6fQMf7cZsV72Js6pNF/wsVZq+g/Y2R+FCcbzC4xeScMB2xkyj1jbPBTg
jMrzkOgYoqfvLJw6rPs98O3/sWFev22FZCt+pgbkj3WWcHefFLkVryJK00mSQKZU
XWz061fw798B80R7uj1hf33l9FggMNmNdLXVXGst60Aqqnv2qZHWdm+kzq5XH7l4
WqKuUTJf+KqCu1tkpsDjt+9Ah6Mc/wUztJR6rYRJ0nL3x6+buQIDAQABo4IEKTCC
BCUwHQYDVR0OBBYEFJznP3sXmQHDtCui3czXLYAe+PTgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3ZmQzN2IvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY1ZTFjOTU0LTY3ZmMtNGIxYy04
NWVhLThmMmIyNTdmZDM3Yi82NWUxYzk1NC02N2ZjLTRiMWMtODVlYS04ZjJiMjU3
ZmQzN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAXY34AwDQQCAAIwBwMFACABGPAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICLxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAO0rk6+HEIF1YrVt6Pbp4IO+X7DFl
rKSebQa1ClXeNGT3aHE3ssiegAkijrMS5g4xVu10X5VYkAByxvMWeangtjJWOJvO
URZvQaYSpfG0nI0Bow+/+e7O4PsIXbtQKsFRckBnFDjVLfZi5w2tElUKHE3ccwM6
HYuTEoZQS56JDK5TwY4wLy8ZBpydwzjWvSkZi3QeXJ5FuDsVuIYjDGWNHHg4o7TW
TKFgPAbN0pckC84aIAhyR7Ncdn/knMsxyyq9ujrK4SjjedbgHHfgqL5F8CR3BkuL
LYO65iGJcJwbRdaR198A7s0mx23BOwdu5VCz+kjmo1Y9uaygQUxTzYJLug==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:02 2024 by rpki-client on console-fra.rpki-client.org