Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
File:                     e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer (raw, json)
Hash identifier:          xCm8cOIW0l5Ibhk6DcKHTtq0yiwDzuhswkAmx+ufQd8=
Subject key identifier:   50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843BFC361EE78AC2A75F2A332C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 Nov 2023 00:45:16 +0000
Certificate not after:    Wed 04 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 393960
                          IP: 23.139.0.0/24
                          IP: 23.184.240.0/24
                          IP: 66.85.44.0/22
                          IP: 72.18.72.0/22
                          IP: 172.93.120.0/22
                          IP: 2602:ff49::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bf:c3:61:ee:78:ac:2a:75:f2:a3:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov  2 00:45:16 2023 GMT
            Not After : Feb  4 01:45:16 2026 GMT
        Subject: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:b7:9b:de:a9:49:5e:76:da:4e:56:04:b2:
                    2e:22:ba:7f:9e:50:2c:e0:61:1a:b2:6d:07:d4:1d:
                    8c:9d:0a:79:85:ab:62:a0:15:67:c6:f5:b3:d9:b6:
                    a5:b2:7a:17:f6:e4:c6:30:e3:cb:5c:e3:33:97:cc:
                    77:63:74:f9:8a:2a:0b:f7:40:a5:dd:50:82:8a:b9:
                    10:d3:20:c4:8a:f3:26:54:16:d3:b0:08:85:73:f8:
                    8c:0f:45:6d:bf:de:98:7e:5b:8f:89:fa:85:da:af:
                    13:bf:2c:00:af:92:c6:37:d1:fb:da:86:bc:89:de:
                    f1:04:0e:07:05:59:75:d7:7b:fd:ba:2c:49:d8:43:
                    c0:69:c3:ba:7a:65:62:a0:bc:18:5a:55:74:b3:35:
                    a3:ed:80:fb:7e:41:34:5a:5c:53:5f:8b:3f:db:6c:
                    b1:c1:28:97:03:43:7d:10:8e:10:8d:c6:3e:58:06:
                    f3:c3:a5:63:1e:58:6f:11:33:35:74:8c:5f:f6:92:
                    cb:d7:41:e6:10:c9:5b:e0:b2:d0:08:ea:a2:e0:fc:
                    68:20:76:44:87:72:07:06:6f:a5:e0:94:ff:ec:d1:
                    e4:ed:7d:e6:8e:ea:57:36:17:ae:b6:9d:e2:cf:01:
                    e1:2f:cc:de:38:02:9e:05:12:b0:56:2b:83:0e:fb:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.0.0/24
                  23.184.240.0/24
                  66.85.44.0/22
                  72.18.72.0/22
                  172.93.120.0/22
                IPv6:
                  2602:ff49::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393960

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:84:49:72:e2:f8:83:cb:ff:65:3a:66:7e:b6:1c:ec:a6:
         c9:5f:a5:5f:18:73:51:0a:be:36:c7:e5:90:7e:74:3f:0a:7b:
         c4:66:e7:d4:65:e0:22:fb:82:fe:26:bf:fd:69:43:2b:79:2d:
         18:1a:40:8d:af:8e:55:5e:33:0c:4b:4f:45:39:94:d6:e2:e7:
         25:9c:1d:9f:99:74:26:77:89:86:a7:23:df:6d:ad:70:e1:49:
         5e:6a:b5:d6:28:80:e7:cd:6b:e7:af:70:b9:71:0d:95:f8:9d:
         84:1b:b2:43:d6:c5:38:69:a7:ef:8e:7a:52:19:b2:99:65:bd:
         97:2f:d2:fc:e5:6f:16:e0:9f:3e:b8:a5:80:0d:af:04:6e:59:
         92:9f:22:f4:c9:3a:27:05:40:75:fb:06:63:a5:d0:ef:42:70:
         65:96:8c:0b:1c:f3:80:df:63:ce:c5:bb:42:83:04:d9:c9:67:
         64:20:0b:6a:e2:42:d8:4c:3e:51:11:fa:bf:bd:c2:65:6c:2b:
         b7:98:70:73:68:b8:ea:85:2d:56:2c:b7:e2:65:5e:f8:80:73:
         18:1b:1c:85:7e:3a:8b:c0:fc:22:bf:c7:4c:ce:51:cf:0a:1d:
         de:05:50:6a:82:10:bb:92:df:af:4d:fb:c6:87:b6:91:5d:aa:
         d9:7d:e8:7e
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEO/w2HueKwqdfKjMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTEwMjAwNDUxNloXDTI2MDIwNDAxNDUxNlowLzEtMCsGA1UEAxMk
ZTgyYTVhZWUtYzE1Ni00M2E3LTg1MmQtOGNmYzJhY2EzNmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv23m96pSV522k5WBLIuIrp/nlAs4GEasm0H
1B2MnQp5hatioBVnxvWz2balsnoX9uTGMOPLXOMzl8x3Y3T5iioL90Cl3VCCirkQ
0yDEivMmVBbTsAiFc/iMD0Vtv96YfluPifqF2q8TvywAr5LGN9H72oa8id7xBA4H
BVl113v9uixJ2EPAacO6emVioLwYWlV0szWj7YD7fkE0WlxTX4s/22yxwSiXA0N9
EI4QjcY+WAbzw6VjHlhvETM1dIxf9pLL10HmEMlb4LLQCOqi4PxoIHZEh3IHBm+l
4JT/7NHk7X3mjupXNheutp3izwHhL8zeOAKeBRKwViuDDvtefwIDAQABo4IEQzCC
BD8wHQYDVR0OBBYEFFBXQMcVsvuNB0Om3Ad6oHe+679EMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
ODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFjYTM2ZTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U4MmE1YWVlLWMxNTYtNDNhNy04
NTJkLThjZmMyYWNhMzZlNi9lODJhNWFlZS1jMTU2LTQzYTctODUyZC04Y2ZjMmFj
YTM2ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwRwYIKwYBBQUH
AQcBAf8EODA2MCQEAgABMB4DBAAXiwADBAAXuPADBAJCVSwDBAJIEkgDBAKsXXgw
DgQCAAIwCAMGBCYC/0kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYC6DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQBalIRJcuL4g8v/ZTpmfrYc7KbJX6VfGHNRCr42x+WQfnQ/CnvEZufUZeAi
+4L+Jr/9aUMreS0YGkCNr45VXjMMS09FOZTW4uclnB2fmXQmd4mGpyPfba1w4Ule
arXWKIDnzWvnr3C5cQ2V+J2EG7JD1sU4aafvjnpSGbKZZb2XL9L85W8W4J8+uKWA
Da8EblmSnyL0yTonBUB1+wZjpdDvQnBllowLHPOA32POxbtCgwTZyWdkIAtq4kLY
TD5REfq/vcJlbCu3mHBzaLjqhS1WLLfiZV74gHMYGxyFfjqLwPwiv8dMzlHPCh3e
BVBqghC7kt+vTfvGh7aRXarZfeh+
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:16 2024 by rpki-client on console-fra.rpki-client.org