Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer
File:                     137f9174-32a4-4183-9e4e-4171f06758bc.cer (raw, json)
Hash identifier:          EBnnTH0+UVbCNYdy1RnP89rU7tMq/AgIbg18kXSGarc=
Subject key identifier:   8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847C0548C7C7E8C4816B7D004C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Nov 2024 00:45:30 +0000
Certificate not after:    Sat 06 Feb 2027 01:45:30 +0000
Subordinate resources:    AS: 12056
                          IP: 23.252.208.0/20
                          IP: 172.97.0.0/21
                          IP: 2604:2440::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:54:8c:7c:7e:8c:48:16:b7:d0:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  3 00:45:30 2024 GMT
            Not After : Feb  6 01:45:30 2027 GMT
        Subject: CN=137f9174-32a4-4183-9e4e-4171f06758bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:76:05:8b:59:73:c9:f9:fb:03:c3:02:3e:
                    16:6d:20:58:7f:fc:3a:ab:64:a1:7b:2d:46:a6:2e:
                    b4:00:36:ea:c8:50:65:72:7e:b7:bc:07:fe:ea:8b:
                    39:3a:2d:00:16:ab:f5:f4:b9:e2:60:8f:7e:c3:2d:
                    07:55:c2:b8:52:08:12:c4:79:8a:cb:a0:d0:f6:98:
                    53:c9:e7:4f:38:b8:13:37:59:f0:15:cf:d1:3b:01:
                    ab:af:ca:cf:26:0a:8a:31:d8:e0:79:2f:70:00:02:
                    ea:48:8d:17:ba:9f:2c:c3:cb:a9:1c:61:9c:d2:94:
                    d2:69:a0:61:2d:53:1c:d8:7d:f1:06:a0:4b:89:68:
                    84:3f:80:00:b0:0e:e3:cf:c1:dc:4e:de:14:04:ae:
                    44:f3:48:d8:21:49:d8:f8:bc:d8:a9:83:93:4e:c4:
                    d4:6c:12:8d:87:37:0d:54:4f:8b:04:6a:80:d4:b6:
                    3e:ac:48:28:bd:b8:79:d5:db:41:80:db:5f:79:25:
                    85:d8:5d:0f:b4:e4:9e:5a:a5:e5:61:50:cf:7a:7f:
                    69:c1:bd:83:da:ee:01:16:71:a8:9e:a4:0b:81:64:
                    fe:d7:00:ee:81:ac:b5:6d:5d:02:7b:1f:c4:45:de:
                    f4:bd:41:1d:50:5d:2c:0e:07:0a:1b:30:bb:23:95:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.252.208.0/20
                  172.97.0.0/21
                IPv6:
                  2604:2440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12056

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:56:f1:24:71:a5:47:b8:18:6d:41:b4:98:67:e2:78:5d:
         43:b0:b1:26:84:fc:43:37:91:d7:0a:43:65:39:49:e1:49:01:
         48:c9:42:d1:f5:f8:d7:c4:27:35:99:8e:19:0e:7e:12:52:3a:
         1a:00:aa:91:33:00:5f:52:92:66:73:ad:1c:b3:d9:73:c1:cd:
         34:2d:a7:74:4e:29:5d:03:72:5d:c4:31:68:f8:ab:0e:b7:7a:
         f6:22:90:5c:13:4b:0c:b9:ff:f5:5e:03:f3:d2:be:52:3a:cc:
         e5:7d:f6:97:ac:b0:db:ce:d9:74:83:96:12:31:30:b2:b8:91:
         67:8c:19:01:70:02:ad:72:e5:10:ae:21:ae:3b:39:e6:4c:4c:
         73:72:ee:98:47:42:17:9a:df:f8:9e:a9:40:b6:5b:73:59:70:
         ac:fc:55:1c:d2:be:6f:ba:e8:71:17:5e:70:5f:d9:44:4e:ed:
         f1:6c:fa:89:e3:a7:44:2a:53:5b:d1:ed:c8:f1:2f:57:b3:92:
         07:03:34:3e:c2:42:de:ba:4a:c1:88:c6:f6:d7:0f:89:2b:f2:
         e9:33:84:e2:46:d6:8a:4a:6b:1a:8b:33:92:10:a0:6d:8e:c9:
         8d:78:8d:70:64:da:a4:9b:97:df:42:be:37:8c:41:78:18:a3:
         cf:0e:ce:5c
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEfAVIx8foxIFrfQBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTEwMzAwNDUzMFoXDTI3MDIwNjAxNDUzMFowLzEtMCsGA1UEAxMk
MTM3ZjkxNzQtMzJhNC00MTgzLTllNGUtNDE3MWYwNjc1OGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0252BYtZc8n5+wPDAj4WbSBYf/w6q2Shey1G
pi60ADbqyFBlcn63vAf+6os5Oi0AFqv19LniYI9+wy0HVcK4UggSxHmKy6DQ9phT
yedPOLgTN1nwFc/ROwGrr8rPJgqKMdjgeS9wAALqSI0Xup8sw8upHGGc0pTSaaBh
LVMc2H3xBqBLiWiEP4AAsA7jz8HcTt4UBK5E80jYIUnY+LzYqYOTTsTUbBKNhzcN
VE+LBGqA1LY+rEgovbh51dtBgNtfeSWF2F0PtOSeWqXlYVDPen9pwb2D2u4BFnGo
nqQLgWT+1wDugay1bV0Cex/ERd70vUEdUF0sDgcKGzC7I5W73wIDAQABo4IELzCC
BCswHQYDVR0OBBYEFIymdB4yp9BkUo+gthZ2lOsVlp2tMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
MzdmOTE3NC0zMmE0LTQxODMtOWU0ZS00MTcxZjA2NzU4YmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzEzN2Y5MTc0LTMyYTQtNDE4My05
ZTRlLTQxNzFmMDY3NThiYy8xMzdmOTE3NC0zMmE0LTQxODMtOWU0ZS00MTcxZjA2
NzU4YmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAQX/NADBAOsYQAwDQQCAAIwBwMFACYEJEAwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICLxgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAajFW8SRxpUe4GG1BtJhn
4nhdQ7CxJoT8QzeR1wpDZTlJ4UkBSMlC0fX418QnNZmOGQ5+ElI6GgCqkTMAX1KS
ZnOtHLPZc8HNNC2ndE4pXQNyXcQxaPirDrd69iKQXBNLDLn/9V4D89K+UjrM5X32
l6yw287ZdIOWEjEwsriRZ4wZAXACrXLlEK4hrjs55kxMc3LumEdCF5rf+J6pQLZb
c1lwrPxVHNK+b7rocRdecF/ZRE7t8Wz6ieOnRCpTW9HtyPEvV7OSBwM0PsJC3rpK
wYjG9tcPiSvy6TOE4kbWikprGoszkhCgbY7JjXiNcGTapJuX30K+N4xBeBijzw7O
XA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:12 2024 by rpki-client on console-fra.rpki-client.org