Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
File:                     69fd0156-bb1f-48b6-bf32-c9492286f195.cer (raw, json)
Hash identifier:          tfxsB5ZEnKD0CqD9KM/G3lauuLDk1DAmTZVNhfhQBDA=
Subject key identifier:   2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Authority key identifier: 62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64
Certificate issuer:       /CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
Certificate serial:       010D0C9F43285846D048515AB6CE79CBE26D0A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Aug 2024 01:06:52 +0000
Certificate not after:    Thu 12 Nov 2026 02:06:52 +0000
Subordinate resources:    AS: inherit
                          IP: inherit
                          IP: inherit

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:48:51:5a:b6:ce:79:cb:e2:6d:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4a23ea-e80a-403e-b08c-2171da2157d3
        Validity
            Not Before: Aug  9 01:06:52 2024 GMT
            Not After : Nov 12 02:06:52 2026 GMT
        Subject: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:90:4f:43:9d:e8:7a:81:62:5c:32:c2:63:
                    fe:33:d8:af:8c:0f:08:73:82:b8:b8:72:aa:38:ff:
                    a8:2c:c5:57:da:cf:82:7f:7b:c8:33:a7:40:49:74:
                    8f:ba:7c:4f:6a:ee:f9:8f:af:3a:25:c9:3f:6a:2f:
                    ad:d5:95:d6:3a:2b:79:95:ae:9f:7f:74:79:32:14:
                    5c:73:cb:f9:ee:07:f5:6b:3e:e1:8c:f4:a4:9e:41:
                    65:76:4a:83:55:30:6c:e0:3a:a1:34:61:bd:53:6c:
                    82:c6:62:46:2f:5b:c9:1b:46:f6:0c:fc:84:20:72:
                    ad:9e:69:08:9d:e9:56:76:4e:b5:f2:c1:6b:43:bc:
                    18:34:9c:03:1e:2d:bc:2d:56:f6:e2:ca:4f:f2:00:
                    00:bf:03:c9:b2:19:c3:1e:ac:eb:2b:80:6b:5d:aa:
                    18:19:ef:d1:f2:10:ef:9f:0c:ec:89:b8:ab:1f:15:
                    c0:82:2c:7c:45:24:be:1a:f5:36:34:27:5c:bd:93:
                    77:71:10:8b:e9:18:e7:fc:15:0e:d8:a0:33:21:41:
                    67:8d:e8:27:db:a7:f9:d0:07:35:0e:f9:e7:4d:9a:
                    69:8b:22:40:81:aa:75:6f:89:0e:0f:2c:a1:50:1e:
                    77:e7:9e:20:ce:55:0a:3d:41:4b:c8:68:27:4f:91:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl

            X509v3 Authority Key Identifier:
                keyid:62:47:7E:1F:D9:E5:25:D0:D7:A2:BB:63:D9:14:E1:4E:E4:54:A3:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:50:54:46:c5:45:08:af:f9:b1:bf:7b:27:d9:cf:28:86:29:
         c8:f7:ba:6c:45:3b:66:55:f7:9c:a6:10:4f:95:13:fc:11:6d:
         4a:43:b2:0b:64:69:47:7f:51:3b:48:03:3c:20:fa:fa:b2:16:
         84:4b:fd:84:e1:9e:48:66:85:6c:14:23:70:b7:7e:aa:41:cd:
         0a:00:3d:79:88:15:4e:b0:f0:87:0b:89:7c:5b:b6:7b:08:a0:
         d3:60:6c:25:f6:b2:14:2d:db:9f:81:15:1b:36:d4:cd:09:74:
         fa:a0:80:33:13:81:ff:ed:ec:3d:7a:fb:06:7b:d8:85:bc:0d:
         96:04:30:cf:69:d5:95:50:27:f0:b8:be:de:2c:2c:81:4a:09:
         1c:bb:8d:1e:9a:89:fd:5b:40:49:38:5d:06:07:e9:97:41:8c:
         2e:1e:f5:14:0a:a5:96:0c:70:6c:af:3d:13:4d:0e:79:90:c1:
         7e:20:11:2b:e4:fc:d2:d0:e1:5e:9a:4f:99:81:60:ba:c9:aa:
         c1:82:b1:48:bd:be:2d:5c:45:02:86:da:86:d6:23:5b:ba:10:
         3f:1e:fa:26:ca:48:92:1d:aa:f3:b6:9d:45:b9:f6:7f:64:e2:
         34:30:42:02:60:63:f6:a3:02:16:2e:6d:d0:17:34:70:ee:42:
         b6:bd:f6:73
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEbQSFFats55y+JtCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzMB4XDTI0MDgwOTAxMDY1MloXDTI2MTExMjAyMDY1MlowLzEtMCsGA1UEAxMk
NjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEqQT0Od6HqBYlwywmP+M9ivjA8Ic4K4uHKq
OP+oLMVX2s+Cf3vIM6dASXSPunxPau75j686Jck/ai+t1ZXWOit5la6ff3R5MhRc
c8v57gf1az7hjPSknkFldkqDVTBs4DqhNGG9U2yCxmJGL1vJG0b2DPyEIHKtnmkI
nelWdk618sFrQ7wYNJwDHi28LVb24spP8gAAvwPJshnDHqzrK4BrXaoYGe/R8hDv
nwzsibirHxXAgix8RSS+GvU2NCdcvZN3cRCL6Rjn/BUO2KAzIUFnjegn26f50Ac1
DvnnTZppiyJAgap1b4kODyyhUB53554gzlUKPUFLyGgnT5FdFQIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFC57SGTjK7sUzZsE69k13XKLmJ5SMIIBfQYIKwYBBQUHAQsE
ggFvMIIBazCBhAYIKwYBBQUHMAWGeHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv
c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx
ZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzCB
rQYIKwYBBQUHMAqGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUubWZ0MDIGCCsGAQUFBzANhiZodHRw
czovL3JyZHAuYXJpbi5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD
AQH/MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2kuYXJpbi5uZXQv
cmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMt
MjE3MWRhMjE1N2QzLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdk
My5jcmwwHwYDVR0jBBgwFoAUYkd+H9nlJdDXortj2RThTuRUo2QwDgYDVR0PAQH/
BAQDAgEGMHIGCCsGAQUFBwEBBGYwZDBiBggrBgEFBQcwAoZWcnN5bmM6Ly9ycGtp
LmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEt
NDAzZS1iMDhjLTIxNzFkYTIxNTdkMy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMhQ
VEbFRQiv+bG/eyfZzyiGKcj3umxFO2ZV95ymEE+VE/wRbUpDsgtkaUd/UTtIAzwg
+vqyFoRL/YThnkhmhWwUI3C3fqpBzQoAPXmIFU6w8IcLiXxbtnsIoNNgbCX2shQt
25+BFRs21M0JdPqggDMTgf/t7D16+wZ72IW8DZYEMM9p1ZVQJ/C4vt4sLIFKCRy7
jR6aif1bQEk4XQYH6ZdBjC4e9RQKpZYMcGyvPRNNDnmQwX4gESvk/NLQ4V6aT5mB
YLrJqsGCsUi9vi1cRQKG2obWI1u6ED8e+ibKSJIdqvO2nUW59n9k4jQwQgJgY/aj
AhYubdAXNHDuQra99nM=
-----END CERTIFICATE-----
Generated at Thu Sep 19 16:32:55 2024 by rpki-client on console-fra.rpki-client.org