Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
File:                     906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer (raw, json)
Hash identifier:          XCRfllrdqRrklNSjFv/5QHazZbYTOx8m3tv0y1IwL0A=
Subject key identifier:   B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847133E1C83AB575C55561B6580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Sep 2024 00:45:27 +0000
Certificate not after:    Sun 06 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 21740
                          AS: 32133
                          AS: 394308
                          AS: 394497
                          AS: 394644
                          IP: 98.124.192.0/18
                          IP: 169.197.0.0/18
                          IP: 2606:8e80::/32
                          IP: 2620:10f:5000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:13:3e:1c:83:ab:57:5c:55:56:1b:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep  2 00:45:27 2024 GMT
            Not After : Dec  6 01:45:27 2026 GMT
        Subject: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:0d:f6:b6:2c:36:b2:f8:f2:eb:2a:de:f4:
                    f1:bd:97:83:0c:86:7a:74:d0:16:73:c0:29:55:3f:
                    24:2e:cb:60:69:b2:46:09:e8:c7:18:f7:e7:b6:68:
                    d2:e6:ad:60:a5:3a:78:f4:7a:72:57:c5:6f:6b:84:
                    85:18:6c:9a:ac:71:2e:68:6c:7a:bd:4e:3f:b6:12:
                    78:69:9e:05:61:52:7d:93:60:de:77:49:57:2c:d9:
                    ab:95:d6:fd:c1:ba:39:e9:20:78:cb:15:c8:fc:d0:
                    7a:b3:ad:ec:d5:ac:e8:a0:84:a5:70:0a:7e:3a:76:
                    28:18:72:f6:1a:72:ad:10:d0:12:f1:6e:03:a9:1b:
                    b7:96:5d:bb:65:3c:fb:dc:6b:96:17:54:26:2f:5d:
                    f6:e0:97:94:ef:71:c5:31:57:04:5a:d7:c2:69:24:
                    12:f0:5f:7b:1b:ca:92:6c:45:62:52:43:11:a0:c0:
                    a5:92:31:91:a8:35:45:f6:4b:58:84:6e:7b:69:c4:
                    5f:77:93:0d:40:93:c3:49:86:a3:60:88:2f:8c:d4:
                    fb:3c:cf:54:81:44:e1:87:fb:40:21:a8:c3:77:af:
                    66:e1:c1:b4:5b:53:55:f7:db:59:8a:1b:8d:ca:c3:
                    29:f5:9d:7d:e9:20:6d:67:d6:80:18:ce:dd:ee:1d:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.124.192.0/18
                  169.197.0.0/18
                IPv6:
                  2606:8e80::/32
                  2620:10f:5000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21740
                  32133
                  394308
                  394497
                  394644

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:76:f0:83:62:57:7d:a7:eb:38:a8:51:f9:84:87:3e:01:04:
         75:ee:26:7a:16:9b:03:63:38:89:25:5c:95:71:35:bd:6d:b1:
         f7:94:1a:62:f6:b6:8e:4a:e3:d3:33:39:b3:e9:3f:78:d2:5f:
         9c:da:1a:ea:01:2c:c9:88:1a:61:77:e8:8b:87:49:e4:10:e4:
         25:ef:13:60:98:ca:38:8a:f6:26:56:7d:33:39:18:d1:3c:f9:
         8b:88:ba:6b:4b:3a:ff:05:41:84:a6:9a:09:74:ee:67:78:28:
         a8:69:ae:4d:3c:c7:c5:a0:b2:0d:de:6a:a4:cb:7d:b6:f7:b7:
         d8:b2:55:9a:67:db:fb:eb:05:85:46:fe:9f:f8:e5:1e:05:7b:
         7b:ca:d6:d1:7a:2b:63:4f:5c:18:f2:c1:40:7b:d6:01:e1:a5:
         0f:a0:16:c5:f1:2b:0d:b2:a4:07:14:ba:76:3b:bd:9e:09:c0:
         7a:de:0b:ce:c1:f4:fd:4c:17:c2:4e:ff:c9:69:14:36:35:5b:
         ea:ca:2d:7a:ae:eb:02:17:38:21:1b:c7:de:0f:a5:79:81:36:
         44:d1:2a:50:40:2d:d9:13:d9:71:95:77:c0:19:b1:88:ae:29:
         62:3b:9f:37:e7:63:22:29:c4:3b:ba:df:64:5b:76:e1:bf:27:
         4b:93:7f:c3
-----BEGIN CERTIFICATE-----
MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEcTPhyDq1dcVVYbZYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDkwMjAwNDUyN1oXDTI2MTIwNjAxNDUyN1owLzEtMCsGA1UEAxMk
OTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0NjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVsN9rYsNrL48usq3vTxvZeDDIZ6dNAWc8Ap
VT8kLstgabJGCejHGPfntmjS5q1gpTp49HpyV8Vva4SFGGyarHEuaGx6vU4/thJ4
aZ4FYVJ9k2Ded0lXLNmrldb9wbo56SB4yxXI/NB6s63s1azooISlcAp+OnYoGHL2
GnKtENAS8W4DqRu3ll27ZTz73GuWF1QmL1324JeU73HFMVcEWtfCaSQS8F97G8qS
bEViUkMRoMClkjGRqDVF9ktYhG57acRfd5MNQJPDSYajYIgvjNT7PM9UgUThh/tA
IajDd69m4cG0W1NV99tZihuNysMp9Z196SBtZ9aAGM7d7h0zowIDAQABo4IESjCC
BEYwHQYDVR0OBBYEFLTNuhKl5ldrwSp4KFIeuMXChGIVMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85
MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkwNmNiYzkxLWNmZTktNGQxNS04
YTEzLWUzZDgyOGMwNDY5Yy85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4Mjhj
MDQ2OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPAYIKwYBBQUH
AQcBAf8ELTArMBIEAgABMAwDBAZifMADBAapxQAwFQQCAAIwDwMFACYGjoADBgAm
IAEPUDAsBggrBgEFBQcBCAEB/wQdMBugGTAXAgJU7AICfYUCAwYERAIDBgUBAgMG
BZQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEARnbwg2JXfafrOKhR+YSHPgEEde4mehabA2M4iSVclXE1vW2x
95QaYva2jkrj0zM5s+k/eNJfnNoa6gEsyYgaYXfoi4dJ5BDkJe8TYJjKOIr2JlZ9
MzkY0Tz5i4i6a0s6/wVBhKaaCXTuZ3goqGmuTTzHxaCyDd5qpMt9tve32LJVmmfb
++sFhUb+n/jlHgV7e8rW0XorY09cGPLBQHvWAeGlD6AWxfErDbKkBxS6dju9ngnA
et4LzsH0/UwXwk7/yWkUNjVb6soteq7rAhc4IRvH3g+leYE2RNEqUEAt2RPZcZV3
wBmxiK4pYjufN+djIinEO7rfZFt24b8nS5N/ww==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:51 2024 by rpki-client on console-fra.rpki-client.org