Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54c9609c-aa35-4286-af10-6400eaf142b5.cer
File:                     54c9609c-aa35-4286-af10-6400eaf142b5.cer (raw, json)
Hash identifier:          FAVQEjDNOAsKg0oFbaBU+NVAnNQy5yXDvOLREOn+GrY=
Subject key identifier:   15:34:86:3D:2E:AA:B7:7F:4F:45:19:38:EF:24:CA:C3:6F:85:EF:6C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858481862E49B309DAA9FD28BA680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54c9609c-aa35-4286-af10-6400eaf142b5/54c9609c-aa35-4286-af10-6400eaf142b5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54c9609c-aa35-4286-af10-6400eaf142b5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 04 Dec 2024 13:45:32 +0000
Certificate not after:    Tue 09 Mar 2027 13:45:32 +0000
Subordinate resources:    AS: 394719
                          IP: 2602:fa34::/36
                          IP: 2620:7f:e000::/48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:62:e4:9b:30:9d:aa:9f:d2:8b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec  4 13:45:32 2024 GMT
            Not After : Mar  9 13:45:32 2027 GMT
        Subject: CN=54c9609c-aa35-4286-af10-6400eaf142b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3e:f2:87:11:35:9b:0c:c0:19:0e:17:c7:86:
                    98:47:f6:9e:fd:f2:6c:d9:29:76:06:c7:71:dc:47:
                    33:55:d8:99:de:08:ce:5e:3b:45:9e:ab:a1:30:c3:
                    cd:75:49:63:5b:bd:7c:87:d3:41:6a:e4:13:95:47:
                    58:22:bf:49:c5:fe:8b:c6:56:70:76:d0:17:91:ba:
                    22:8e:60:2d:de:7b:13:b5:a1:bf:94:55:b1:27:dc:
                    13:5f:96:c5:d4:2a:69:94:04:26:5b:9f:48:9a:10:
                    e8:00:2c:4a:49:7f:2c:8b:fb:b4:1e:bc:e7:3c:04:
                    25:7c:8d:16:cf:12:f0:d1:fa:63:29:b6:ce:79:ce:
                    7e:36:8a:7b:6a:b4:e0:c5:aa:c0:4f:d0:a2:2a:da:
                    c0:ef:86:a5:c5:7b:83:c5:a4:04:d7:f9:9a:a7:ad:
                    66:c1:88:36:6c:39:e0:81:37:f3:0d:9a:89:f6:9a:
                    d2:a6:63:a7:06:e3:db:37:f9:9a:66:77:89:d1:aa:
                    f9:a7:db:1d:ce:ce:37:75:4f:e2:7d:86:c7:8e:8e:
                    a3:2f:5a:37:48:3d:39:d3:54:f3:3d:d4:dc:e6:d1:
                    46:4e:66:94:66:8c:2d:11:25:8e:aa:7b:f6:b1:9d:
                    c0:4e:b9:89:6b:40:55:11:f0:f2:67:81:36:27:bc:
                    59:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:86:3D:2E:AA:B7:7F:4F:45:19:38:EF:24:CA:C3:6F:85:EF:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54c9609c-aa35-4286-af10-6400eaf142b5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54c9609c-aa35-4286-af10-6400eaf142b5/54c9609c-aa35-4286-af10-6400eaf142b5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa34::/36
                  2620:7f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394719

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:39:50:8c:b5:80:ff:b1:24:e4:5b:61:41:43:a4:16:fa:10:
         63:ff:bb:0e:57:f5:4a:45:9d:99:e4:ee:01:7a:77:76:d1:e5:
         2c:a7:6a:4c:d7:7a:7d:d5:49:18:05:62:04:23:f1:26:f3:69:
         d7:8a:e7:60:fb:18:01:19:0f:25:3f:b9:0f:0a:57:5c:f6:9e:
         b8:5b:27:ec:c3:7d:f7:8a:12:d7:5b:92:79:d1:a2:c2:94:12:
         ef:98:be:6c:ae:be:a3:db:5a:1e:ce:d7:25:be:a7:26:33:87:
         fd:bf:42:c0:4c:8a:db:da:6d:8c:6a:3e:dc:22:3a:02:b4:14:
         5d:96:82:7e:e5:f3:e3:e6:b3:5e:5c:62:cb:d1:c4:52:74:8c:
         0d:a5:65:9a:71:45:ef:8e:fd:e5:f5:03:e5:0a:6e:59:79:da:
         ee:3b:d9:9d:43:ba:38:94:8f:8e:e1:d4:8a:bf:c3:66:f2:c6:
         87:ad:ae:1b:07:11:1f:48:d8:59:ec:4f:ce:ed:75:10:b0:2a:
         b8:bc:67:54:81:cd:f8:c4:8d:f7:49:29:ae:49:a8:4c:24:4a:
         34:76:f2:55:f1:32:93:23:41:d0:f8:47:85:19:7e:33:36:c6:
         4f:2d:d4:f4:f3:43:f1:a9:b8:7a:b2:68:4a:20:3e:d6:cc:bb:
         26:33:59:09
-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEgYYuSbMJ2qn9KLpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTIwNDEzNDUzMloXDTI3MDMwOTEzNDUzMlowLzEtMCsGA1UEAxMk
NTRjOTYwOWMtYWEzNS00Mjg2LWFmMTAtNjQwMGVhZjE0MmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j7yhxE1mwzAGQ4Xx4aYR/ae/fJs2Sl2Bsdx
3EczVdiZ3gjOXjtFnquhMMPNdUljW718h9NBauQTlUdYIr9Jxf6LxlZwdtAXkboi
jmAt3nsTtaG/lFWxJ9wTX5bF1CpplAQmW59ImhDoACxKSX8si/u0HrznPAQlfI0W
zxLw0fpjKbbOec5+Nop7arTgxarAT9CiKtrA74alxXuDxaQE1/map61mwYg2bDng
gTfzDZqJ9prSpmOnBuPbN/maZneJ0ar5p9sdzs43dU/ifYbHjo6jL1o3SD0501Tz
PdTc5tFGTmaUZowtESWOqnv2sZ3ATrmJa0BVEfDyZ4E2J7xZyQIDAQABo4IEJjCC
BCIwHQYDVR0OBBYEFBU0hj0uqrd/T0UZOO8kysNvhe9sMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81
NGM5NjA5Yy1hYTM1LTQyODYtYWYxMC02NDAwZWFmMTQyYjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU0Yzk2MDljLWFhMzUtNDI4Ni1h
ZjEwLTY0MDBlYWYxNDJiNS81NGM5NjA5Yy1hYTM1LTQyODYtYWYxMC02NDAwZWFm
MTQyYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKgYIKwYBBQUH
AQcBAf8EGzAZMBcEAgACMBEDBgQmAvo0AAMHACYgAH/gADAaBggrBgEFBQcBCAEB
/wQLMAmgBzAFAgMGBd8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMDlQjLWA/7Ek5FthQUOkFvoQY/+7Dlf1
SkWdmeTuAXp3dtHlLKdqTNd6fdVJGAViBCPxJvNp14rnYPsYARkPJT+5DwpXXPae
uFsn7MN994oS11uSedGiwpQS75i+bK6+o9taHs7XJb6nJjOH/b9CwEyK29ptjGo+
3CI6ArQUXZaCfuXz4+azXlxiy9HEUnSMDaVlmnFF74795fUD5QpuWXna7jvZnUO6
OJSPjuHUir/DZvLGh62uGwcRH0jYWexPzu11ELAquLxnVIHN+MSN90kprkmoTCRK
NHbyVfEykyNB0PhHhRl+MzbGTy3U9PND8am4erJoSiA+1sy7JjNZCQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:39:56 2025 by rpki-client