Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
File:                     15106386-88d8-4103-adeb-a6e7c684ed09.cer (raw, json)
Hash identifier:          Qg4r0FstqlFqLztNpsbCnFu68J5f+xpIMsiAoryDoxs=
Subject key identifier:   97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858472F28F235F39869E29AE1C600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 16 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 31916
                          IP: 207.174.22.0/24
                          IP: 2602:fa81::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:28:f2:35:f3:98:69:e2:9a:e1:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 12 00:45:26 2024 GMT
            Not After : Dec 16 01:45:26 2026 GMT
        Subject: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:19:b6:9e:35:5e:fe:ce:ef:37:1b:21:f0:
                    58:74:01:e5:60:17:aa:ae:c3:b1:49:9d:9b:61:7b:
                    bd:91:1a:6b:51:db:cb:7a:bb:e2:5e:0f:5c:b6:5b:
                    65:5c:c0:44:34:fa:e0:d3:94:73:28:39:09:a7:7d:
                    69:49:06:be:79:48:42:fb:c3:ef:d2:d8:30:58:6a:
                    55:e9:2a:9f:91:c4:9c:cd:ad:80:60:84:be:0d:a9:
                    a3:af:b9:e6:6a:04:47:2b:6d:f1:f6:db:ba:36:92:
                    da:4e:64:2c:b6:95:9a:ca:ab:60:ac:c4:fb:5b:20:
                    18:cc:1f:f6:e3:db:9b:10:8f:24:01:62:2e:bd:fa:
                    71:f0:da:57:d8:25:2d:b5:53:c1:78:4a:49:9f:a1:
                    a4:00:4d:5e:ea:64:f0:93:a6:73:ef:40:5e:56:cb:
                    c7:70:38:38:c7:53:e3:ca:fa:06:6b:8f:c4:f0:a7:
                    05:66:6f:da:7a:1d:ab:90:8f:95:5e:b0:49:a2:6e:
                    48:07:c8:01:ac:c5:3f:3f:2a:98:53:79:83:37:bb:
                    af:64:b0:7e:8b:27:e3:5e:92:03:3a:c4:ac:0c:ec:
                    a0:75:01:97:28:8b:2d:f0:82:70:43:7c:7b:69:a3:
                    9c:b9:44:84:03:dd:5f:c2:5f:0c:b9:b9:80:0b:55:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.22.0/24
                IPv6:
                  2602:fa81::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31916

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:0e:eb:5d:91:52:2e:f4:67:d9:0c:d7:d4:5c:47:a9:66:
         08:f4:f8:9c:82:2d:cd:4d:ce:13:09:4f:48:74:46:e4:8f:bf:
         2b:41:3a:03:5e:07:21:4f:cb:e4:a0:42:c5:17:8b:d7:cf:29:
         5c:b0:3c:39:81:df:e5:4e:51:65:bd:58:f2:1b:b0:8d:f9:20:
         25:0c:1f:4e:1a:3f:ae:3e:47:bf:de:2e:df:92:e6:38:d3:44:
         64:4b:16:da:32:f0:d4:88:f9:23:79:22:4e:7d:37:f8:9a:00:
         90:e6:2a:35:5b:a2:14:73:7e:16:6b:89:c3:fe:55:a0:bb:f4:
         b0:e7:2b:03:65:e9:2a:f4:00:f6:94:1b:72:0b:2e:24:3e:9c:
         ee:d1:e4:8e:d4:89:56:2a:79:4c:dc:07:02:42:ae:5d:33:68:
         ca:c3:21:5f:e7:d9:0c:5f:f0:43:6a:fe:90:32:43:ea:e5:e6:
         83:e4:f0:64:fb:52:9b:f1:b6:cb:e7:74:63:77:a3:f2:98:ea:
         0d:46:26:a6:df:70:77:e4:4c:a9:77:94:cf:da:f8:94:dc:05:
         90:2d:6e:05:7a:4e:74:51:ad:2b:0d:59:b9:b3:b3:45:7a:06:
         cc:ec:1a:b6:c3:61:d6:44:f3:2f:c9:14:be:21:c7:57:3d:85:
         82:7d:a0:a6
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEcvKPI185hp4prhxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MDkxMjAwNDUyNloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk
MTUxMDYzODYtODhkOC00MTAzLWFkZWItYTZlN2M2ODRlZDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D0Ztp41Xv7O7zcbIfBYdAHlYBeqrsOxSZ2b
YXu9kRprUdvLerviXg9ctltlXMBENPrg05RzKDkJp31pSQa+eUhC+8Pv0tgwWGpV
6SqfkcScza2AYIS+Damjr7nmagRHK23x9tu6NpLaTmQstpWayqtgrMT7WyAYzB/2
49ubEI8kAWIuvfpx8NpX2CUttVPBeEpJn6GkAE1e6mTwk6Zz70BeVsvHcDg4x1Pj
yvoGa4/E8KcFZm/aeh2rkI+VXrBJom5IB8gBrMU/PyqYU3mDN7uvZLB+iyfjXpID
OsSsDOygdQGXKIst8IJwQ3x7aaOcuUSEA91fwl8MubmAC1W5iQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFJeWrfoTuEnlu86kwEAX3D6t0qMaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
NTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4NGVkMDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE1MTA2Mzg2LTg4ZDgtNDEwMy1h
ZGViLWE2ZTdjNjg0ZWQwOS8xNTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4
NGVkMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBADPrhYwDgQCAAIwCAMGACYC+oEAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAnysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAk9DutdkVIu9GfZDNfUXEepZgj0
+JyCLc1NzhMJT0h0RuSPvytBOgNeByFPy+SgQsUXi9fPKVywPDmB3+VOUWW9WPIb
sI35ICUMH04aP64+R7/eLt+S5jjTRGRLFtoy8NSI+SN5Ik59N/iaAJDmKjVbohRz
fhZricP+VaC79LDnKwNl6Sr0APaUG3ILLiQ+nO7R5I7UiVYqeUzcBwJCrl0zaMrD
IV/n2Qxf8ENq/pAyQ+rl5oPk8GT7UpvxtsvndGN3o/KY6g1GJqbfcHfkTKl3lM/a
+JTcBZAtbgV6TnRRrSsNWbmzs0V6BszsGrbDYdZE8y/JFL4hx1c9hYJ9oKY=
-----END CERTIFICATE-----