Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer
File:                     f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad.cer (raw, json)
Hash identifier:          Xve4DZ+NnkS2FaCXZadySJVkVOr0rQYAn7jN5hhFvo8=
Subject key identifier:   27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
Authority key identifier: FC:6B:9A:BC:96:9B:0C:AC:7F:C6:0A:94:0E:E7:A7:A6:2E:4A:4F:28
Certificate issuer:       /CN=edf42a6e-e52a-44bd-a87a-08ce0c569e85
Certificate serial:       010D0C9F43285845D46C561C03117446AE847000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 10 May 2024 19:55:44 +0000
Certificate not after:    Thu 13 Aug 2026 19:55:44 +0000
Subordinate resources:    AS: 400910
                          IP: 23.164.56.0/23
                          IP: 2602:f974::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/edf42a6e-e52a-44bd-a87a-08ce0c569e85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/edf42a6e-e52a-44bd-a87a-08ce0c569e85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d4:6c:56:1c:03:11:74:46:ae:84:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf42a6e-e52a-44bd-a87a-08ce0c569e85
        Validity
            Not Before: May 10 19:55:44 2024 GMT
            Not After : Aug 13 19:55:44 2026 GMT
        Subject: CN=f782b0e5b2fc29a5293aa948991206481ae7dd58b362d603ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:9c:e4:22:cb:aa:6d:2e:cd:bc:60:9c:61:
                    58:f4:b7:e2:7b:7a:e6:69:b7:4c:0c:82:1f:66:04:
                    98:16:0e:41:a3:a3:dd:97:a5:7f:4d:e7:65:d1:f1:
                    7d:ed:2d:62:47:56:fd:7b:38:9f:19:c9:80:aa:11:
                    75:c8:9b:a1:db:ff:c2:a0:eb:ac:f9:aa:0b:0d:6e:
                    17:f3:79:7d:89:8e:84:5a:da:16:5a:97:9c:3d:74:
                    65:ef:4b:9d:2e:06:9d:1d:23:9b:1f:4f:cd:ae:d2:
                    af:28:0b:8e:6d:ba:6f:03:86:a8:2e:34:e8:59:47:
                    a5:2e:1e:65:d1:c8:aa:18:cb:32:18:6e:f2:37:12:
                    1b:6f:96:b6:8a:a1:37:73:08:6f:70:c8:26:e5:be:
                    7e:db:28:78:16:91:15:52:60:ff:7a:02:fe:5d:a6:
                    e1:93:c7:8b:3c:9e:1e:71:58:44:c1:96:b2:03:20:
                    88:9d:00:73:67:ab:ed:d5:8d:47:a3:f6:2d:d7:96:
                    34:fa:4a:d3:7f:74:68:ee:a7:b9:a3:99:6a:12:e6:
                    92:d1:8a:04:8b:52:66:c7:2b:2a:64:23:43:3d:a3:
                    4f:d8:67:f6:e8:b1:62:fc:56:22:fe:f4:2b:bf:92:
                    48:a7:f6:65:47:f2:2b:ce:d8:8d:a2:9c:ca:59:ee:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:09:69:B7:54:06:76:11:09:4A:17:D0:DF:D8:20:D0:5A:68:B2:ED
            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/1/270969B754067611094A17D0DFD820D05A68B2ED.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85/edf42a6e-e52a-44bd-a87a-08ce0c569e85.crl

            X509v3 Authority Key Identifier:
                keyid:FC:6B:9A:BC:96:9B:0C:AC:7F:C6:0A:94:0E:E7:A7:A6:2E:4A:4F:28

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/edf42a6e-e52a-44bd-a87a-08ce0c569e85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/23
                IPv6:
                  2602:f974::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400910

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:22:7c:72:7a:6b:15:51:ec:88:23:ea:88:cf:2b:cc:ec:
         e6:1c:1c:e6:78:2e:1d:80:12:92:ca:51:68:d3:13:63:3e:9f:
         43:08:0c:92:40:24:70:55:7c:13:34:7a:d6:aa:72:13:b4:b4:
         e0:10:f8:77:74:43:da:75:d6:71:04:2d:39:31:de:1f:a0:49:
         fa:8d:ac:aa:5f:50:ab:de:c0:13:60:4a:54:4f:0f:92:4b:29:
         11:52:5a:d6:b5:e4:26:4b:4a:dc:33:e9:07:d9:95:21:9e:c5:
         88:6c:d0:f5:d9:95:44:dd:ec:1f:ff:36:95:65:8c:55:97:ef:
         62:49:72:20:af:22:29:b9:4d:c4:3d:20:6f:a4:7e:0b:f8:f6:
         e4:f0:ac:04:b0:11:95:2d:9b:0b:a6:17:da:27:b9:fd:11:7d:
         67:02:26:66:e3:04:9e:20:40:0e:a6:03:f1:22:2b:60:49:ff:
         ea:da:81:19:47:28:17:6b:22:ea:ea:97:47:34:85:68:aa:b5:
         0b:59:e6:08:dc:01:02:18:77:aa:cb:af:3c:1e:b9:35:1c:12:
         28:df:4f:09:1f:fc:f4:01:a5:4f:e5:7f:53:8e:8f:b2:a1:18:
         3f:b5:84:49:8d:9a:21:f5:f7:b2:f6:e1:05:4a:20:a9:6c:b0:
         95:59:d0:24
-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgIUAQ0Mn0MoWEXUbFYcAxF0Rq6EcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRmNDJhNmUtZTUyYS00NGJkLWE4N2EtMDhjZTBjNTY5
ZTg1MB4XDTI0MDUxMDE5NTU0NFoXDTI2MDgxMzE5NTU0NFowPTE7MDkGA1UEAxMy
Zjc4MmIwZTViMmZjMjlhNTI5M2FhOTQ4OTkxMjA2NDgxYWU3ZGQ1OGIzNjJkNjAz
YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUpzkIsuqbS7NvGCc
YVj0t+J7euZpt0wMgh9mBJgWDkGjo92XpX9N52XR8X3tLWJHVv17OJ8ZyYCqEXXI
m6Hb/8Kg66z5qgsNbhfzeX2JjoRa2hZal5w9dGXvS50uBp0dI5sfT82u0q8oC45t
um8DhqguNOhZR6UuHmXRyKoYyzIYbvI3EhtvlraKoTdzCG9wyCblvn7bKHgWkRVS
YP96Av5dpuGTx4s8nh5xWETBlrIDIIidAHNnq+3VjUej9i3XljT6StN/dGjup7mj
mWoS5pLRigSLUmbHKypkI0M9o0/YZ/bosWL8ViL+9Cu/kkin9mVH8ivO2I2inMpZ
7huvAgMBAAGjggPtMIID6TAdBgNVHQ4EFgQUJwlpt1QGdhEJShfQ39gg0Fposu0w
ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzZhMWU0LTNiZjAtNDM1
Mi05MDYxLTY2Njk0ZDJiY2JkMy8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5
bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjUzNmExZTQtM2JmMC00
MzUyLTkwNjEtNjY2OTRkMmJjYmQzLzEvMjcwOTY5Qjc1NDA2NzYxMTA5NEExN0Qw
REZEODIwRDA1QTY4QjJFRC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w
YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u
ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw
OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4
MzM3ZC9lZGY0MmE2ZS1lNTJhLTQ0YmQtYTg3YS0wOGNlMGM1NjllODUvZWRmNDJh
NmUtZTUyYS00NGJkLWE4N2EtMDhjZTBjNTY5ZTg1LmNybDAfBgNVHSMEGDAWgBT8
a5q8lpsMrH/GCpQO56emLkpPKDAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB
BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Vk
ZjQyYTZlLWU1MmEtNDRiZC1hODdhLTA4Y2UwYzU2OWU4NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAEXpDgwDgQCAAIwCAMGBCYC+XQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYeDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCApSJ8cnprFVHsiCPqiM8rzOzm
HBzmeC4dgBKSylFo0xNjPp9DCAySQCRwVXwTNHrWqnITtLTgEPh3dEPaddZxBC05
Md4foEn6jayqX1Cr3sATYEpUTw+SSykRUlrWteQmS0rcM+kH2ZUhnsWIbND12ZVE
3ewf/zaVZYxVl+9iSXIgryIpuU3EPSBvpH4L+Pbk8KwEsBGVLZsLphfaJ7n9EX1n
AiZm4wSeIEAOpgPxIitgSf/q2oEZRygXayLq6pdHNIVoqrULWeYI3AECGHeqy688
Hrk1HBIo308JH/z0AaVP5X9Tjo+yoRg/tYRJjZoh9fey9uEFSiCpbLCVWdAk
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:59 2024 by rpki-client on console-fra.rpki-client.org