Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626.cer
File:                     45644f39-69e4-4e08-bb44-b87bd3387626.cer (raw, json)
Hash identifier:          M6DZs+/T5jymaLwEljZq6+VpyVbIH99gJmORQC3Lrco=
Subject key identifier:   8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847B25F186256424321EB812C70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 01 Feb 2027 01:45:26 +0000
Subordinate resources:    AS: 398813
                          IP: 204.235.168.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:5f:18:62:56:42:43:21:eb:81:2c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 29 00:45:26 2024 GMT
            Not After : Feb  1 01:45:26 2027 GMT
        Subject: CN=45644f39-69e4-4e08-bb44-b87bd3387626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:00:27:1d:f7:d1:55:67:69:a3:c0:17:fe:
                    78:a0:19:a2:48:e7:7b:cb:b6:40:f9:e0:98:5b:9a:
                    4a:f2:26:1c:b0:be:68:f9:61:d6:a6:0b:69:84:0c:
                    77:ff:de:8d:5a:f4:ea:15:96:a3:23:8e:97:f1:09:
                    e0:44:f7:88:b3:f4:e9:4b:95:b9:ab:ca:b5:4d:fe:
                    63:e3:12:c6:72:e5:a3:63:0c:94:b6:04:e2:bc:92:
                    09:33:c8:66:3b:b8:0f:c4:69:f7:c0:14:9e:aa:d2:
                    44:6b:58:8f:d6:84:b4:73:d3:18:ea:8e:ba:79:a4:
                    6a:60:91:90:21:66:12:17:e8:be:1b:ab:6b:a2:80:
                    5e:2d:c5:7b:17:27:f4:b6:8a:08:d9:d2:79:a2:53:
                    85:9b:a1:98:1c:45:5f:a0:5e:19:62:fc:29:94:cd:
                    68:7a:32:d1:18:40:b6:c0:65:30:a9:75:cb:ec:e0:
                    d7:67:70:86:11:84:2c:47:e9:96:4c:bc:75:cf:b0:
                    9f:cb:3b:14:02:27:86:cc:12:75:7e:cd:18:e3:76:
                    cb:16:ce:1d:8f:18:70:78:b9:45:44:4e:a6:ba:45:
                    69:68:39:79:e8:25:3a:fa:80:04:88:36:fc:a7:db:
                    f3:7c:bc:a9:56:06:e9:d9:b4:8c:7d:ab:ca:af:66:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.168.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398813

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:93:38:bc:b0:a7:4f:82:c8:f0:01:ad:bc:c0:bd:4d:51:
         bc:7f:d4:fa:ff:8c:6c:ba:e1:87:6a:46:88:07:91:55:6b:37:
         ea:49:36:a3:d4:0a:6c:42:d1:8e:70:31:e1:49:27:53:0f:6c:
         8b:55:e0:30:55:93:c9:4d:52:a6:6d:d5:6d:4e:80:b4:29:c4:
         28:05:aa:06:74:12:73:1a:32:d7:ab:cb:8f:ac:96:fe:8d:07:
         48:35:14:99:9a:26:58:2b:a4:ce:12:0e:34:83:b6:4e:c7:81:
         98:f7:18:9d:b6:58:1e:62:ad:54:44:b5:ed:b2:59:2c:e4:c5:
         8a:37:8e:e6:53:ed:4e:b2:10:6a:42:2d:8b:2f:2e:d8:4c:e6:
         b4:d6:e1:5d:ba:1d:e5:7c:5e:f1:0a:68:5a:ac:ba:5e:cd:bd:
         7c:ba:a5:ca:a4:ca:94:1f:dd:05:69:cc:2b:9a:7e:db:b4:d0:
         c7:84:b6:2b:21:0a:ac:f9:fc:9f:61:45:6f:ef:d3:cf:f2:62:
         9d:b6:15:3a:78:f0:a3:f1:1a:c5:53:db:68:90:ee:18:e7:32:
         57:b8:df:88:42:73:ac:09:96:73:3b:42:05:e6:8e:55:14:2f:
         6b:14:a0:ad:df:16:ca:9a:04:de:e8:81:9f:ba:05:e1:8f:ec:
         a0:fd:ed:78
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEeyXxhiVkJDIeuBLHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk
NDU2NDRmMzktNjllNC00ZTA4LWJiNDQtYjg3YmQzMzg3NjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDkAJx330VVnaaPAF/54oBmiSOd7y7ZA+eCY
W5pK8iYcsL5o+WHWpgtphAx3/96NWvTqFZajI46X8QngRPeIs/TpS5W5q8q1Tf5j
4xLGcuWjYwyUtgTivJIJM8hmO7gPxGn3wBSeqtJEa1iP1oS0c9MY6o66eaRqYJGQ
IWYSF+i+G6trooBeLcV7Fyf0tooI2dJ5olOFm6GYHEVfoF4ZYvwplM1oejLRGEC2
wGUwqXXL7ODXZ3CGEYQsR+mWTLx1z7CfyzsUAieGzBJ1fs0Y43bLFs4djxhweLlF
RE6mukVpaDl56CU6+oAEiDb8p9vzfLypVgbp2bSMfavKr2a4pQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFI0R9nh4kMcUmXIPMF2ljctKEKdFMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80
NTY0NGYzOS02OWU0LTRlMDgtYmI0NC1iODdiZDMzODc2MjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ1NjQ0ZjM5LTY5ZTQtNGUwOC1i
YjQ0LWI4N2JkMzM4NzYyNi80NTY0NGYzOS02OWU0LTRlMDgtYmI0NC1iODdiZDMz
ODc2MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHM66gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BhXdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAPzkzi8sKdPgsjwAa28wL1NUbx/1Pr/jGy64YdqRogHkVVr
N+pJNqPUCmxC0Y5wMeFJJ1MPbItV4DBVk8lNUqZt1W1OgLQpxCgFqgZ0EnMaMter
y4+slv6NB0g1FJmaJlgrpM4SDjSDtk7HgZj3GJ22WB5irVREte2yWSzkxYo3juZT
7U6yEGpCLYsvLthM5rTW4V26HeV8XvEKaFqsul7NvXy6pcqkypQf3QVpzCuaftu0
0MeEtishCqz5/J9hRW/v08/yYp22FTp48KPxGsVT22iQ7hjnMle434hCc6wJlnM7
QgXmjlUUL2sUoK3fFsqaBN7ogZ+6BeGP7KD97Xg=
-----END CERTIFICATE-----