Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
File:                     6c6981fd-28f4-4238-8558-d3d7498f0af2.cer (raw, json)
Hash identifier:          e6N/gr1CaGXARv77n5V0zV348uARmT40zD3oJGly7oA=
Subject key identifier:   B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858460F9C736AC69F3C6072DF1180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 01 Jun 2024 00:45:22 +0000
Certificate not after:    Fri 04 Sep 2026 00:45:22 +0000
Subordinate resources:    AS: 6364
                          AS: 11041
                          IP: 45.58.32.0/20
                          IP: 69.28.64.0/19
                          IP: 69.87.216.0/21
                          IP: 96.126.72.0 -- 96.126.95.255
                          IP: 104.219.52.0/22
                          IP: 104.245.32.0/21
                          IP: 199.198.214.0/23
                          IP: 208.117.80.0/21
                          IP: 208.117.93.0 -- 208.117.94.255
                          IP: 209.23.0.0/19
                          IP: 209.208.0.0/17
                          IP: 216.98.0.0/20
                          IP: 2607:f170::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:9c:73:6a:c6:9f:3c:60:72:df:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun  1 00:45:22 2024 GMT
            Not After : Sep  4 00:45:22 2026 GMT
        Subject: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:43:2f:3c:6c:d4:df:90:42:65:08:95:96:
                    3c:4f:10:74:57:a6:f7:b2:88:36:16:8f:bc:72:c0:
                    b4:34:06:a0:e7:ff:d1:68:ca:27:2a:36:9f:6a:e1:
                    d6:80:3f:e7:d0:56:3b:0c:fe:07:92:3d:1d:59:42:
                    43:4d:84:0f:e7:72:65:dd:14:36:30:b8:4a:dd:8c:
                    6d:4b:91:03:f9:33:b6:32:f6:02:74:8c:36:5c:00:
                    45:53:6f:75:36:4a:13:b8:98:3f:21:21:2d:28:88:
                    e5:3e:3f:b2:3e:89:c0:08:2b:8d:f6:c9:a5:a2:28:
                    3d:ab:36:b3:6d:fc:3b:a1:a5:36:77:fa:49:7f:44:
                    e4:3f:58:65:29:5d:9a:6b:2b:cd:80:9f:82:e9:ee:
                    0d:58:59:bd:b5:a5:b7:11:2e:00:7a:eb:8e:8e:90:
                    e3:79:b2:c3:0d:41:d2:16:56:68:ff:90:39:aa:52:
                    bf:01:d4:82:a9:12:d3:3a:db:0f:1d:49:b0:b1:5e:
                    31:fb:be:4c:8c:5c:9b:2f:2b:c9:8f:31:0e:29:7e:
                    2a:7d:ae:8f:c2:45:a6:c0:77:0b:69:e5:f7:f7:eb:
                    7b:20:7b:40:b2:da:b0:2c:84:67:78:dd:80:7e:4d:
                    7d:48:4b:78:8e:17:84:08:cf:e5:68:af:f6:aa:20:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.32.0/20
                  69.28.64.0/19
                  69.87.216.0/21
                  96.126.72.0-96.126.95.255
                  104.219.52.0/22
                  104.245.32.0/21
                  199.198.214.0/23
                  208.117.80.0/21
                  208.117.93.0-208.117.94.255
                  209.23.0.0/19
                  209.208.0.0/17
                  216.98.0.0/20
                IPv6:
                  2607:f170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6364
                  11041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:d5:35:15:5c:81:56:3e:92:53:a5:44:6e:51:a5:91:85:
         4f:06:a3:75:e1:57:6d:b2:76:50:45:a8:c5:de:96:87:ee:c1:
         ac:66:65:1b:3e:43:a4:dd:85:48:ef:65:f9:9a:5a:2c:03:db:
         90:95:88:ab:36:97:85:e8:5c:52:c0:71:c3:56:c3:60:50:59:
         fc:73:7a:2d:7c:d9:43:9c:3b:c8:dd:ee:a1:cf:12:29:6a:88:
         6c:02:b5:bb:d7:04:70:b0:55:99:5b:af:3b:65:42:56:d9:4b:
         44:0f:03:d1:05:20:30:ed:42:4f:51:6f:08:47:e9:af:e7:6d:
         7c:73:5e:16:4b:f9:94:77:00:39:b9:6d:22:cc:93:78:e4:95:
         83:6c:40:84:37:f4:87:51:fa:a8:ff:e4:f8:87:b9:bc:a3:98:
         db:52:22:f8:6e:27:d2:61:ad:d1:c1:32:71:6a:45:e4:6b:2c:
         8a:f6:97:e0:bd:6c:62:d8:8c:52:1b:bc:72:6e:3d:f7:70:18:
         26:5b:b1:23:5c:9b:b8:5d:89:f9:f7:38:98:59:ef:09:e3:49:
         83:30:05:6d:47:49:3d:73:9f:b4:f6:27:67:56:77:15:8b:ac:
         1f:0d:9c:90:72:68:9a:0a:73:ba:21:e2:ce:1f:82:f4:e8:eb:
         e0:aa:d3:97
-----BEGIN CERTIFICATE-----
MIIHbjCCBlagAwIBAgIUAQ0Mn0MoWEYPnHNqxp88YHLfEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDYwMTAwNDUyMloXDTI2MDkwNDAwNDUyMlowLzEtMCsGA1UEAxMk
NmM2OTgxZmQtMjhmNC00MjM4LTg1NTgtZDNkNzQ5OGYwYWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLJDLzxs1N+QQmUIlZY8TxB0V6b3sog2Fo+8
csC0NAag5//RaMonKjafauHWgD/n0FY7DP4Hkj0dWUJDTYQP53Jl3RQ2MLhK3Yxt
S5ED+TO2MvYCdIw2XABFU291NkoTuJg/ISEtKIjlPj+yPonACCuN9smloig9qzaz
bfw7oaU2d/pJf0TkP1hlKV2aayvNgJ+C6e4NWFm9taW3ES4AeuuOjpDjebLDDUHS
FlZo/5A5qlK/AdSCqRLTOtsPHUmwsV4x+75MjFybLyvJjzEOKX4qfa6PwkWmwHcL
aeX39+t7IHtAstqwLIRneN2Afk19SEt4jheECM/laK/2qiAXzwIDAQABo4IEgDCC
BHwwHQYDVR0OBBYEFLl258wQs9ssypcqFdvtNGDqgeU0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82
YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4ZjBhZjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzZjNjk4MWZkLTI4ZjQtNDIzOC04
NTU4LWQzZDc0OThmMGFmMi82YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4
ZjBhZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYAGCCsGAQUF
BwEHAQH/BHEwbzBeBAIAATBYAwQELTogAwQFRRxAAwQDRVfYMAwDBANgfkgDBAVg
fkADBAJo2zQDBANo9SADBAHHxtYDBAPQdVAwDAMEANB1XQMEANB1XgMEBdEXAAME
B9HQAAMEBNhiADANBAIAAjAHAwUAJgfxcDAdBggrBgEFBQcBCAEB/wQOMAygCjAI
AgIY3AICKyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAdwvVNRVcgVY+klOlRG5RpZGFTwajdeFXbbJ2UEWo
xd6Wh+7BrGZlGz5DpN2FSO9l+ZpaLAPbkJWIqzaXhehcUsBxw1bDYFBZ/HN6LXzZ
Q5w7yN3uoc8SKWqIbAK1u9cEcLBVmVuvO2VCVtlLRA8D0QUgMO1CT1FvCEfpr+dt
fHNeFkv5lHcAObltIsyTeOSVg2xAhDf0h1H6qP/k+Ie5vKOY21Ii+G4n0mGt0cEy
cWpF5GssivaX4L1sYtiMUhu8cm4993AYJluxI1ybuF2J+fc4mFnvCeNJgzAFbUdJ
PXOftPYnZ1Z3FYusHw2ckHJomgpzuiHizh+C9Ojr4KrTlw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:49 2024 by rpki-client on console-ams.rpki-client.org