Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer
File:                     3ea5b606-31c0-4086-b53d-edf7fbdd0078.cer (raw, json)
Hash identifier:          ph/hxGoh2r9EXC8zCtZKkNJjmkQMa1W58qainEJf+8Y=
Subject key identifier:   4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844985B0C9B4C99488868D25680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 14:45:28 +0000
Certificate not after:    Wed 22 Apr 2026 13:45:28 +0000
Subordinate resources:    AS: 55179
                          IP: 198.168.106.0/23
                          IP: 2620:6d:40::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:98:5b:0c:9b:4c:99:48:88:68:d2:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 14:45:28 2024 GMT
            Not After : Apr 22 13:45:28 2026 GMT
        Subject: CN=3ea5b606-31c0-4086-b53d-edf7fbdd0078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:68:3b:1c:16:74:01:fc:5b:9f:20:24:4b:
                    49:72:d5:b4:69:60:51:2a:fc:10:08:69:67:49:ef:
                    83:68:10:83:40:42:a8:ac:9d:9f:d0:01:7d:ed:a4:
                    5b:ee:52:21:f5:bc:d0:2d:c9:c0:fb:f4:2d:8d:46:
                    54:c4:e4:50:9f:3f:b4:aa:63:8a:7c:65:c9:a4:f3:
                    0d:32:98:b2:3a:7e:45:6a:b2:0a:c3:ea:1d:19:e8:
                    0a:2f:b7:2f:d4:ce:94:82:99:70:f7:16:ac:81:a1:
                    4d:95:93:e2:30:3a:9e:e1:ae:de:18:7b:9f:c8:4f:
                    d2:ba:36:a0:2d:31:04:40:6b:3e:25:a9:8c:d2:f2:
                    10:44:66:ba:a5:23:64:c5:29:23:b2:b4:45:b1:ad:
                    3c:8b:a4:3e:d7:ca:2a:5f:b3:96:44:5e:a1:71:aa:
                    e5:bd:f2:9d:14:6f:2f:64:f4:a5:fb:8c:0c:54:f0:
                    92:8d:1e:17:98:a6:be:d7:a1:c5:a4:64:11:b7:7e:
                    62:21:13:5f:8a:44:7c:85:ff:10:df:25:bd:b7:94:
                    09:2d:28:d4:bb:89:c4:e1:4b:6b:94:80:21:45:6f:
                    a2:13:57:09:ac:a5:ea:9b:99:f1:51:c1:82:e5:91:
                    99:ed:f0:79:00:77:d6:f1:96:e0:81:16:5a:02:77:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:A8:F0:1A:EE:C9:2C:03:C1:6D:9F:F9:7C:4F:36:86:7E:90:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ea5b606-31c0-4086-b53d-edf7fbdd0078/3ea5b606-31c0-4086-b53d-edf7fbdd0078.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.106.0/23
                IPv6:
                  2620:6d:40::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55179

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:26:a2:f1:20:0a:7b:ed:de:5e:43:c7:c1:e9:70:6d:4b:b0:
         72:16:d1:3b:fc:01:7f:68:f3:24:59:53:bc:09:5a:53:95:57:
         91:9e:6e:ce:e5:65:f6:51:9e:87:c5:a4:d5:5c:a9:8b:5f:f4:
         ea:fd:14:33:1c:9b:83:57:6d:36:ca:ea:14:5a:81:7a:07:75:
         d6:53:1d:4f:bf:bd:73:46:79:bc:7a:d4:bd:26:6b:a4:9e:bc:
         2e:6e:92:10:4d:ad:c3:a4:86:e5:cd:08:c6:7b:3a:40:0e:d1:
         d6:ae:8b:bc:77:60:d9:e1:86:f7:5d:a8:96:1b:70:34:c3:69:
         e4:e2:62:92:32:db:02:ec:f6:10:39:66:c7:e2:d3:d6:00:70:
         fc:9f:b5:bd:bf:62:da:64:3b:d3:4c:1e:0a:76:b5:ff:79:59:
         fa:91:41:1e:a4:ce:84:d8:8a:98:65:12:7c:f2:8a:5f:a0:fd:
         be:48:86:9f:7d:ba:5f:91:7d:d5:1e:a0:dd:7d:43:e8:f8:45:
         c9:9d:0b:38:5f:f8:e1:52:f6:0c:61:0e:7c:5e:94:17:6e:24:
         ba:08:5b:33:a6:1f:d3:d7:2f:1a:68:98:f9:fe:ca:ef:b8:35:
         35:03:95:2c:86:d4:8e:5b:70:c5:9e:28:ef:b3:36:93:0f:71:
         a4:b1:40:bd
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWESYWwybTJlIiGjSVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDExODE0NDUyOFoXDTI2MDQyMjEzNDUyOFowLzEtMCsGA1UEAxMk
M2VhNWI2MDYtMzFjMC00MDg2LWI1M2QtZWRmN2ZiZGQwMDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f1oOxwWdAH8W58gJEtJctW0aWBRKvwQCGln
Se+DaBCDQEKorJ2f0AF97aRb7lIh9bzQLcnA+/QtjUZUxORQnz+0qmOKfGXJpPMN
MpiyOn5FarIKw+odGegKL7cv1M6Ugplw9xasgaFNlZPiMDqe4a7eGHufyE/Sujag
LTEEQGs+JamM0vIQRGa6pSNkxSkjsrRFsa08i6Q+18oqX7OWRF6hcarlvfKdFG8v
ZPSl+4wMVPCSjR4XmKa+16HFpGQRt35iIRNfikR8hf8Q3yW9t5QJLSjUu4nE4Utr
lIAhRW+iE1cJrKXqm5nxUcGC5ZGZ7fB5AHfW8ZbggRZaAneDewIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFE8nqPAa7sksA8Ftn/l8TzaGfpB2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z
ZWE1YjYwNi0zMWMwLTQwODYtYjUzZC1lZGY3ZmJkZDAwNzgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNlYTViNjA2LTMxYzAtNDA4Ni1i
NTNkLWVkZjdmYmRkMDA3OC8zZWE1YjYwNi0zMWMwLTQwODYtYjUzZC1lZGY3ZmJk
ZDAwNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAHGqGowDwQCAAIwCQMHACYgAG0AQDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA14swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGCai8SAKe+3eXkPHwelwbUuw
chbRO/wBf2jzJFlTvAlaU5VXkZ5uzuVl9lGeh8Wk1Vypi1/06v0UMxybg1dtNsrq
FFqBegd11lMdT7+9c0Z5vHrUvSZrpJ68Lm6SEE2tw6SG5c0Ixns6QA7R1q6LvHdg
2eGG912olhtwNMNp5OJikjLbAuz2EDlmx+LT1gBw/J+1vb9i2mQ700weCna1/3lZ
+pFBHqTOhNiKmGUSfPKKX6D9vkiGn326X5F91R6g3X1D6PhFyZ0LOF/44VL2DGEO
fF6UF24kughbM6Yf09cvGmiY+f7K77g1NQOVLIbUjltwxZ4o77M2kw9xpLFAvQ==
-----END CERTIFICATE-----