Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015.cer
File:                     97cac0b7-abb7-43b2-8435-2db8edb2a015.cer (raw, json)
Hash identifier:          N2p30qZ+s6x/BjgACH4bmVb2jA8vPKe5Z1o6j3AFU8I=
Subject key identifier:   25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584777BEBC5A26FBEDC02F80D180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Oct 2024 00:45:27 +0000
Certificate not after:    Mon 11 Jan 2027 01:45:27 +0000
Subordinate resources:    AS: 62802
                          IP: 170.4.168.0/21
                          IP: 170.4.192.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:be:bc:5a:26:fb:ed:c0:2f:80:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  8 00:45:27 2024 GMT
            Not After : Jan 11 01:45:27 2027 GMT
        Subject: CN=97cac0b7-abb7-43b2-8435-2db8edb2a015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:ea:66:50:0b:c4:6c:48:af:86:15:27:dd:
                    30:23:2e:6b:ad:ea:7e:d9:af:c2:8f:a0:d1:f7:9a:
                    34:9b:0c:f0:ed:15:03:f9:33:23:75:5a:8a:56:ba:
                    5d:04:7f:60:54:df:59:e5:ef:f3:d1:58:57:96:50:
                    7f:6e:01:bf:e3:11:03:b0:a4:6f:96:f4:d9:d7:2a:
                    fb:ba:3c:73:cd:48:45:eb:68:1c:80:36:fc:4e:3d:
                    bc:03:18:02:be:ca:3a:fe:ea:a3:f2:7c:64:51:78:
                    a0:58:71:91:d7:9d:d9:30:b0:f6:21:4e:69:8e:62:
                    3f:26:64:ef:fa:85:3b:a0:c0:9b:48:ce:24:16:1a:
                    97:b5:65:33:36:0e:83:48:9e:85:7f:9b:06:f5:0c:
                    76:9e:88:e2:e5:be:65:db:b2:39:43:1a:e5:18:a6:
                    3d:5e:44:20:6c:9d:7b:fd:87:6e:0d:40:38:06:e5:
                    0c:ab:ea:23:34:4b:6c:98:92:35:78:da:99:fa:ab:
                    6b:bb:0f:64:55:cf:a4:f2:d1:72:19:49:cb:c8:cf:
                    de:11:c2:d5:45:ad:1a:89:29:f6:66:e3:1c:71:52:
                    05:97:30:08:fe:7f:04:cf:5a:6a:23:3b:24:55:be:
                    97:d3:cd:21:b3:21:81:d1:f7:8f:c8:8a:9c:5f:d6:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4C:BC:B4:4A:F5:B5:1A:06:D4:CD:E3:A3:9F:B5:07:EF:7B:62:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/97cac0b7-abb7-43b2-8435-2db8edb2a015/97cac0b7-abb7-43b2-8435-2db8edb2a015.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.4.168.0/21
                  170.4.192.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62802

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:1d:38:fc:36:0e:bd:b8:cb:6c:d4:9e:6a:0b:26:54:7d:
         1c:8b:3c:9e:47:24:26:bc:a2:17:90:96:a7:00:1c:27:4b:71:
         f5:c5:c5:7e:da:8f:96:3b:29:2f:5d:f9:18:cf:80:02:d2:e2:
         8a:bf:a7:f0:fc:56:7b:39:85:f6:68:82:f0:1a:4c:48:7f:da:
         04:a6:df:f6:86:3c:0d:8e:7c:3a:54:ff:f8:4e:e6:c7:3c:a9:
         a7:df:5e:0d:d9:c3:20:98:2a:42:c6:09:d3:a5:59:9f:f0:4c:
         de:0c:21:e2:c9:84:15:bf:8e:77:8f:01:fa:ee:8e:09:89:1b:
         e1:be:15:89:21:da:21:6e:9d:15:10:1a:2e:dd:72:bd:2a:38:
         48:62:62:0c:90:3d:1d:51:90:54:3f:b1:2d:85:33:4f:bf:25:
         81:a4:fb:c9:5f:8e:d2:8c:0d:85:37:a0:7e:11:63:ef:62:a9:
         1b:a5:a8:59:77:00:e0:7f:5b:9d:7c:f7:38:0a:4c:13:e1:28:
         51:8e:9d:d9:c4:c1:40:11:cb:43:34:6c:ef:3b:c5:e7:0e:dc:
         dd:c6:fc:04:c2:1c:be:8b:a3:03:bf:e2:5a:b4:db:f7:89:3a:
         b3:43:1c:ce:d9:fe:c8:48:4d:6b:d0:bd:43:53:0a:5f:d0:23:
         35:75:93:fc
-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEd3vrxaJvvtwC+A0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAwODAwNDUyN1oXDTI3MDExMTAxNDUyN1owLzEtMCsGA1UEAxMk
OTdjYWMwYjctYWJiNy00M2IyLTg0MzUtMmRiOGVkYjJhMDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR7qZlALxGxIr4YVJ90wIy5rrep+2a/Cj6DR
95o0mwzw7RUD+TMjdVqKVrpdBH9gVN9Z5e/z0VhXllB/bgG/4xEDsKRvlvTZ1yr7
ujxzzUhF62gcgDb8Tj28AxgCvso6/uqj8nxkUXigWHGR153ZMLD2IU5pjmI/JmTv
+oU7oMCbSM4kFhqXtWUzNg6DSJ6Ff5sG9Qx2noji5b5l27I5QxrlGKY9XkQgbJ17
/YduDUA4BuUMq+ojNEtsmJI1eNqZ+qtruw9kVc+k8tFyGUnLyM/eEcLVRa0aiSn2
ZuMccVIFlzAI/n8Ez1pqIzskVb6X080hsyGB0fePyIqcX9astQIDAQABo4IEITCC
BB0wHQYDVR0OBBYEFCVMvLRK9bUaBtTN46OftQfve2LpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85
N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRiMmEwMTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk3Y2FjMGI3LWFiYjctNDNiMi04
NDM1LTJkYjhlZGIyYTAxNS85N2NhYzBiNy1hYmI3LTQzYjItODQzNS0yZGI4ZWRi
MmEwMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAOqBKgDBAOqBMAwGgYIKwYBBQUHAQgBAf8ECzAJ
oAcwBQIDAPVSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAH5MHTj8Ng69uMts1J5qCyZUfRyLPJ5HJCa8oheQ
lqcAHCdLcfXFxX7aj5Y7KS9d+RjPgALS4oq/p/D8Vns5hfZogvAaTEh/2gSm3/aG
PA2OfDpU//hO5sc8qaffXg3ZwyCYKkLGCdOlWZ/wTN4MIeLJhBW/jnePAfrujgmJ
G+G+FYkh2iFunRUQGi7dcr0qOEhiYgyQPR1RkFQ/sS2FM0+/JYGk+8lfjtKMDYU3
oH4RY+9iqRulqFl3AOB/W5189zgKTBPhKFGOndnEwUARy0M0bO87xecO3N3G/ATC
HL6LowO/4lq02/eJOrNDHM7Z/shITWvQvUNTCl/QIzV1k/w=
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:04 2024 by rpki-client on console-ams.rpki-client.org