Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
File:                     a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer (raw, json)
Hash identifier:          cLtIKcjFnDzRykLpDCMqhdhzDPjQ7V2seR1ya9mgLho=
Subject key identifier:   91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority key identifier: DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4
Certificate issuer:       /CN=7188ac24-09cc-4f20-9dbd-cd9005d2797e
Certificate serial:       010D0C9F432858474F74EFBB578EFEA8F03195C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    IP: 50.112.0.0/16
                          IP: 2620:108:7000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ef:bb:57:8e:fe:a8:f0:31:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7188ac24-09cc-4f20-9dbd-cd9005d2797e
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:5c:0d:3a:08:30:e1:d3:a5:38:3b:84:ca:
                    13:85:ba:30:e1:59:63:cb:5f:88:b7:c7:65:3c:51:
                    03:d9:6a:9c:1d:64:11:b1:7e:9c:00:52:48:92:02:
                    c8:cc:ed:63:48:da:39:d7:c2:c5:43:4f:33:5c:6b:
                    85:2f:3a:a2:1a:21:47:f7:61:43:65:05:79:c7:d3:
                    79:b7:fe:c7:af:9a:2e:aa:5f:d5:2b:cd:8e:3c:3b:
                    3a:fb:41:9c:3d:5a:dd:7c:f8:5b:90:42:1f:e9:f5:
                    54:b6:36:9a:ac:cb:34:02:09:85:ec:54:9d:ae:7d:
                    77:06:3b:81:e6:88:1d:e9:bf:2a:a2:8e:5c:9e:92:
                    62:53:4c:1e:3f:9b:16:f0:86:06:10:4c:c3:4f:86:
                    d9:cd:14:c3:26:ea:1b:39:2e:14:d1:95:24:9c:74:
                    06:7b:41:d6:ae:f9:c9:db:43:47:17:21:4a:9e:fc:
                    f3:3a:23:bc:77:c3:eb:6c:e7:14:7c:1c:b3:49:a5:
                    d9:bd:30:b5:06:53:d6:aa:f1:07:cf:17:ee:83:b5:
                    92:7c:17:1e:88:ab:ba:d3:4c:4b:71:c2:e5:c3:f9:
                    ff:54:a5:5a:3d:fe:a4:3d:8a:f1:55:b8:36:71:e9:
                    ee:60:6a:83:65:b1:46:a5:19:7a:89:e3:b9:ba:2f:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl

            X509v3 Authority Key Identifier:
                keyid:DE:ED:C8:81:0C:E5:63:5E:49:30:0D:C5:1F:24:00:10:2B:84:3F:A4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.0.0/16
                IPv6:
                  2620:108:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:ad:7e:16:35:6d:69:97:59:1f:8b:08:1c:4d:48:0b:a5:
         c8:28:8b:d7:1d:1b:af:b2:86:09:68:0d:59:a0:c1:b5:9c:9f:
         0e:dd:29:29:f0:89:a2:b0:1c:7e:fa:67:1b:85:55:3f:2e:91:
         0d:a0:ce:c6:39:6d:0b:62:da:60:5b:17:27:cd:c9:79:6a:9a:
         bf:9d:ca:be:98:65:ae:74:4f:f6:c8:93:36:93:07:77:9a:ee:
         13:48:a6:90:d2:1c:88:56:99:6f:f0:fe:54:20:cd:ff:20:39:
         12:64:df:47:ab:dd:c8:b8:61:4c:3b:ea:7d:fd:05:c7:40:80:
         ef:ae:41:d4:f1:30:b7:de:e2:0b:58:2d:91:f6:17:4a:a4:f0:
         25:fd:8b:ab:7b:64:87:53:72:db:79:45:87:2a:73:2b:44:f1:
         bb:54:6a:b9:30:ea:8c:c5:d5:44:24:b1:3f:4e:0a:a7:a0:94:
         4c:8d:9e:fc:b5:57:7c:5c:ea:a8:52:fe:a9:1a:2b:11:0d:c7:
         88:53:1b:01:ce:52:f1:0c:c4:91:48:d7:0b:f7:e5:df:83:b4:
         7d:3e:f5:d1:b3:b3:2d:74:e1:99:19:e9:4b:55:54:9f:ce:fc:
         d7:56:15:3c:44:71:d9:c7:16:85:1a:69:42:b8:42:a5:f1:e2:
         ec:ee:a3:d4
-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEdPdO+7V47+qPAxlcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE4OGFjMjQtMDljYy00ZjIwLTlkYmQtY2Q5MDA1ZDI3
OTdlMB4XDTI0MDkyMzE0MjQyNFoXDTI2MTIyNzE1MjQyNFowPTE7MDkGA1UEAxMy
YTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0
YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kVwNOggw4dOlODuE
yhOFujDhWWPLX4i3x2U8UQPZapwdZBGxfpwAUkiSAsjM7WNI2jnXwsVDTzNca4Uv
OqIaIUf3YUNlBXnH03m3/sevmi6qX9UrzY48Ozr7QZw9Wt18+FuQQh/p9VS2Npqs
yzQCCYXsVJ2ufXcGO4HmiB3pvyqijlyekmJTTB4/mxbwhgYQTMNPhtnNFMMm6hs5
LhTRlSScdAZ7Qdau+cnbQ0cXIUqe/PM6I7x3w+ts5xR8HLNJpdm9MLUGU9aq8QfP
F+6DtZJ8Fx6Iq7rTTEtxwuXD+f9UpVo9/qQ9ivFVuDZx6e5gaoNlsUalGXqJ47m6
L+ipAgMBAAGjggQAMIID/DAdBgNVHQ4EFgQUkS3GDddkKYK8rn+B/jxMEnKAIh8w
ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt
cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRh
OWUtNGU1ZS04OWYwLWVmODkxNDkwZDljOS8wgYIGCCsGAQUFBzAKhnZyc3luYzov
L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEy
NmU1LTRhOWUtNGU1ZS04OWYwLWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBM
bWJSa3pFVlRKTE0ubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51
cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwLzYwMmEyNmU1LTRhOWUtNGU1ZS04
OWYwLWVmODkxNDkwZDljOS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB
Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l
dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4
Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyLzcxODhhYzI0LTA5Y2MtNGYyMC05ZGJkLWNkOTAwNWQyNzk3ZS83MTg4YWMy
NC0wOWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UuY3JsMB8GA1UdIwQYMBaAFN7t
yIEM5WNeSTANxR8kABArhD+kMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE
gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzE4
OGFjMjQtMDljYy00ZjIwLTlkYmQtY2Q5MDA1ZDI3OTdlLmNlcjAvBggrBgEFBQcB
BwEB/wQgMB4wCwQCAAEwBQMDADJwMA8EAgACMAkDBwQmIAEIcAAwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
XhWtfhY1bWmXWR+LCBxNSAulyCiL1x0br7KGCWgNWaDBtZyfDt0pKfCJorAcfvpn
G4VVPy6RDaDOxjltC2LaYFsXJ83JeWqav53KvphlrnRP9siTNpMHd5ruE0imkNIc
iFaZb/D+VCDN/yA5EmTfR6vdyLhhTDvqff0Fx0CA765B1PEwt97iC1gtkfYXSqTw
Jf2Lq3tkh1Ny23lFhypzK0Txu1RquTDqjMXVRCSxP04Kp6CUTI2e/LVXfFzqqFL+
qRorEQ3HiFMbAc5S8QzEkUjXC/fl34O0fT710bOzLXThmRnpS1VUn87811YVPERx
2ccWhRppQrhCpfHi7O6j1A==
-----END CERTIFICATE-----
Generated at Wed Dec 11 16:36:53 2024 by rpki-client on console-ams.rpki-client.org