Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
File:                     b4586964-3c8b-4441-8b8a-b2d07721f346.cer (raw, json)
Hash identifier:          T7o8WTNXXlPJfVnpfI1udIINrXk5s/StomfvBNA6MLo=
Subject key identifier:   8E:1F:BF:22:67:35:B1:E5:85:72:69:B2:4C:B4:14:FB:98:19:AC:66
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858477A896A3BFA168EB63F928F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 12 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 22363
                          IP: 69.80.96.0/20
                          IP: 192.64.4.0/22
                          IP: 199.48.240.0/21
                          IP: 2607:b200::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7a:89:6a:3b:fa:16:8e:b6:3f:92:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  9 00:45:26 2024 GMT
            Not After : Jan 12 01:45:26 2027 GMT
        Subject: CN=b4586964-3c8b-4441-8b8a-b2d07721f346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:1b:9b:a2:7a:31:0c:7c:e1:bc:48:ce:09:
                    db:99:d1:e1:04:ff:75:8d:af:5c:56:5d:08:94:9d:
                    d4:3c:d6:1d:f7:8c:64:59:c3:2a:3f:2a:b7:0f:9b:
                    d7:07:68:33:e5:53:08:66:8b:85:2b:f8:17:67:ff:
                    dd:ab:76:d4:32:e9:1d:5b:7c:46:06:a9:d0:f6:f5:
                    a1:e4:42:9f:f3:9c:99:97:cc:c2:ed:6a:1c:6f:1e:
                    75:2f:db:4c:33:46:b3:3c:0a:f9:5a:ef:a8:2c:df:
                    0a:1c:4c:09:dd:1f:11:2b:f4:6e:4a:04:95:21:44:
                    1b:11:c8:b5:80:bd:cf:74:91:1e:9e:f8:72:b8:72:
                    82:68:d3:47:01:f1:0f:10:94:78:c8:9c:3e:00:c7:
                    e0:32:7d:40:1e:17:2e:e8:7c:7b:27:1e:f8:8c:45:
                    77:5e:5c:a5:4c:12:91:02:c0:36:0e:a8:bc:33:26:
                    0d:f7:72:7d:aa:8c:69:28:5a:29:ae:0e:1f:8e:02:
                    11:94:4f:ce:24:0b:1f:f0:ba:2d:7d:c4:08:c8:00:
                    ee:52:60:04:10:d6:33:44:60:c9:72:ba:eb:c7:b6:
                    68:09:aa:60:f5:1f:ff:00:0e:1c:ad:8c:bf:31:cc:
                    c1:0f:ec:7d:16:98:7a:1c:46:f5:b4:62:9c:db:e2:
                    46:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1F:BF:22:67:35:B1:E5:85:72:69:B2:4C:B4:14:FB:98:19:AC:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.96.0/20
                  192.64.4.0/22
                  199.48.240.0/21
                IPv6:
                  2607:b200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22363

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:44:b0:b6:6b:4d:3f:98:3a:cb:e0:0e:f8:29:59:15:7a:17:
         e5:af:7b:39:3e:93:bc:c2:af:c2:ec:81:3b:7e:b6:4d:47:1d:
         81:c9:49:78:1b:07:05:7e:26:bc:31:e0:23:5f:7b:16:b0:a2:
         83:90:99:66:dc:cd:c1:9d:c0:1f:9c:23:8c:de:03:a4:88:10:
         6b:05:f0:67:4d:16:af:47:01:5a:f6:9f:50:57:a9:fa:65:dd:
         70:3b:45:7a:8d:1f:67:dc:ed:93:76:d1:79:09:51:ca:0b:53:
         c9:6f:d1:0c:2c:18:7c:62:e4:4b:7b:35:48:36:00:0a:5e:cd:
         63:0c:94:20:1f:55:ac:06:f2:36:03:86:07:f2:bd:3d:5c:77:
         0b:1f:17:d8:a0:5f:fc:b3:3d:50:60:19:eb:78:56:3f:52:26:
         3b:32:24:2d:0c:18:14:ea:29:1f:18:3b:87:ab:ba:44:ea:a4:
         18:77:e2:e9:f0:0c:fc:a8:e7:27:7a:b6:2d:9a:40:2a:ea:2c:
         97:ba:dd:a7:7c:29:94:5e:1f:1f:6d:52:8f:39:54:8c:32:0c:
         84:db:86:6b:bb:5b:11:98:58:40:9a:85:09:ee:2e:00:42:3b:
         76:1e:d3:96:51:14:80:e0:8d:ef:a8:73:60:a3:65:69:3c:89:
         9d:e5:2d:12
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEd6iWo7+haOtj+Sj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAwOTAwNDUyNloXDTI3MDExMjAxNDUyNlowLzEtMCsGA1UEAxMk
YjQ1ODY5NjQtM2M4Yi00NDQxLThiOGEtYjJkMDc3MjFmMzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Ubm6J6MQx84bxIzgnbmdHhBP91ja9cVl0I
lJ3UPNYd94xkWcMqPyq3D5vXB2gz5VMIZouFK/gXZ//dq3bUMukdW3xGBqnQ9vWh
5EKf85yZl8zC7Wocbx51L9tMM0azPAr5Wu+oLN8KHEwJ3R8RK/RuSgSVIUQbEci1
gL3PdJEenvhyuHKCaNNHAfEPEJR4yJw+AMfgMn1AHhcu6Hx7Jx74jEV3XlylTBKR
AsA2Dqi8MyYN93J9qoxpKFoprg4fjgIRlE/OJAsf8LotfcQIyADuUmAEENYzRGDJ
crrrx7ZoCapg9R//AA4crYy/MczBD+x9Fph6HEb1tGKc2+JG7wIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFI4fvyJnNbHlhXJpsky0FPuYGaxmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i
NDU4Njk2NC0zYzhiLTQ0NDEtOGI4YS1iMmQwNzcyMWYzNDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I0NTg2OTY0LTNjOGItNDQ0MS04
YjhhLWIyZDA3NzIxZjM0Ni9iNDU4Njk2NC0zYzhiLTQ0NDEtOGI4YS1iMmQwNzcy
MWYzNDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBARFUGADBALAQAQDBAPHMPAwDQQCAAIwBwMFACYH
sgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICV1swVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEUSwtmtNP5g6
y+AO+ClZFXoX5a97OT6TvMKvwuyBO362TUcdgclJeBsHBX4mvDHgI197FrCig5CZ
ZtzNwZ3AH5wjjN4DpIgQawXwZ00Wr0cBWvafUFep+mXdcDtFeo0fZ9ztk3bReQlR
ygtTyW/RDCwYfGLkS3s1SDYACl7NYwyUIB9VrAbyNgOGB/K9PVx3Cx8X2KBf/LM9
UGAZ63hWP1ImOzIkLQwYFOopHxg7h6u6ROqkGHfi6fAM/KjnJ3q2LZpAKuosl7rd
p3wplF4fH21SjzlUjDIMhNuGa7tbEZhYQJqFCe4uAEI7dh7TllEUgOCN76hzYKNl
aTyJneUtEg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:08 2024 by rpki-client on console-ams.rpki-client.org