Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer
File:                     3d1c406c-fcae-4d83-9c1a-5c930e814683.cer (raw, json)
Hash identifier:          xGG9uU8NhDQ3XzuKMnIA2M6sHlOh4M+XX+rbDSskIe4=
Subject key identifier:   9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CDE038BE74B0DFF8691B0B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 21:12:26 +0000
Certificate not after:    Tue 09 Feb 2027 03:16:21 +0000
Subordinate resources:    AS: 401473
                          IP: 23.128.220.0/24
                          IP: 2602:f7ae::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:e0:38:be:74:b0:df:f8:69:1b:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 21:12:26 2024 GMT
            Not After : Feb  9 03:16:21 2027 GMT
        Subject: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:96:c3:82:32:8e:0c:47:44:e0:33:11:8e:0e:
                    c9:a7:bd:26:ba:10:1a:16:aa:1d:78:f2:62:bd:65:
                    f8:d0:2c:65:ba:2b:d7:ff:66:54:b9:cb:32:d1:be:
                    9c:1d:ce:9e:00:cd:21:d7:bb:11:57:35:68:77:e5:
                    17:ad:6a:63:fc:47:fb:94:34:20:d0:7b:0f:70:47:
                    47:58:75:70:2b:de:f9:aa:0a:f6:97:5f:d8:a0:53:
                    dc:2c:62:c7:8c:eb:8c:6b:52:5b:99:9c:bc:cd:5b:
                    3c:81:35:5a:c2:d8:d9:5b:bd:6e:a1:8a:f8:80:d3:
                    03:e8:75:a4:aa:d4:c4:9f:fd:ea:0f:40:87:30:06:
                    51:39:c0:14:83:26:50:4b:19:9b:4a:00:56:7a:7a:
                    34:0d:62:b1:bc:bf:e3:fa:2e:a0:5e:a6:df:7a:99:
                    22:dd:65:3e:bc:6a:b8:ec:bf:0b:9d:5d:b8:a8:1a:
                    25:eb:10:a8:8c:fc:6e:b4:f3:74:cb:21:3c:8e:00:
                    5d:17:d5:80:00:7b:25:3e:07:d1:a1:0a:7e:6b:75:
                    75:06:e3:33:15:2e:15:a3:e5:9b:4b:70:cd:dd:07:
                    98:bf:0d:08:36:f6:81:6d:e7:ce:9a:cf:74:70:08:
                    cb:89:e5:0e:b4:8d:31:d9:99:e8:0b:b6:ce:fe:a5:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.220.0/24
                IPv6:
                  2602:f7ae::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401473

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:a7:de:4b:15:74:e4:6e:dd:bf:86:1e:ff:d2:5b:db:8a:2c:
         60:1c:a5:ea:40:6a:3f:1a:2f:0e:c6:ad:aa:1b:3b:1c:be:ad:
         9f:3d:6b:a4:bb:13:a0:7c:7f:06:31:41:99:78:f0:00:08:40:
         e4:8e:f0:9b:d0:ff:c6:90:b6:43:8b:2c:51:c8:d0:9f:82:4e:
         e4:d1:25:80:ea:f5:7e:cc:4f:a1:da:81:d9:c2:01:10:73:05:
         03:45:3e:ab:d6:af:c4:9b:af:c3:8c:9c:48:de:c4:99:ba:a7:
         1c:28:b5:8c:bd:56:ac:c7:27:b0:e8:b7:7b:61:b4:53:27:a4:
         c4:ec:94:c0:1d:40:13:d9:9a:25:5a:a1:36:2f:fe:6a:9a:61:
         2e:bd:d2:0a:4a:e8:82:33:ef:fe:50:3c:65:87:d2:80:27:29:
         1b:ee:bb:f8:55:b1:f2:35:f2:c9:c4:c0:98:1f:74:64:2c:0a:
         d5:0a:62:1d:a8:60:f1:31:8d:7d:9d:a1:27:e7:7b:a4:02:51:
         76:3f:15:5d:f9:4d:b9:bf:9e:78:9c:9c:33:c7:b1:25:c7:34:
         d8:0a:93:a3:80:08:7a:a0:c7:89:15:b6:d7:5e:f9:a4:41:56:
         67:18:b9:6a:9a:2d:1d:3a:19:43:dd:9b:5e:f8:e9:40:85:19:
         85:9e:aa:a2
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEfN4Di+dLDf+GkbC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTEwNzIxMTIyNloXDTI3MDIwOTAzMTYyMVowLzEtMCsGA1UEAxMk
M2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0NjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZbDgjKODEdE4DMRjg7Jp70muhAaFqodePJi
vWX40CxluivX/2ZUucsy0b6cHc6eAM0h17sRVzVod+UXrWpj/Ef7lDQg0HsPcEdH
WHVwK975qgr2l1/YoFPcLGLHjOuMa1JbmZy8zVs8gTVawtjZW71uoYr4gNMD6HWk
qtTEn/3qD0CHMAZROcAUgyZQSxmbSgBWeno0DWKxvL/j+i6gXqbfepki3WU+vGq4
7L8LnV24qBol6xCojPxutPN0yyE8jgBdF9WAAHslPgfRoQp+a3V1BuMzFS4Vo+Wb
S3DN3QeYvw0INvaBbefOms90cAjLieUOtI0x2ZnoC7bO/qWtJwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFJrkFr5ijqnS7eqf10iBsrUxDaFaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z
ZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkMWM0MDZjLWZjYWUtNGQ4My05
YzFhLTVjOTMwZTgxNDY4My8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4
MTQ2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXgNwwDgQCAAIwCAMGACYC964AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNp95LFXTkbt2/hh7/0lvbiixg
HKXqQGo/Gi8Oxq2qGzscvq2fPWukuxOgfH8GMUGZePAACEDkjvCb0P/GkLZDiyxR
yNCfgk7k0SWA6vV+zE+h2oHZwgEQcwUDRT6r1q/Em6/DjJxI3sSZuqccKLWMvVas
xyew6Ld7YbRTJ6TE7JTAHUAT2ZolWqE2L/5qmmEuvdIKSuiCM+/+UDxlh9KAJykb
7rv4VbHyNfLJxMCYH3RkLArVCmIdqGDxMY19naEn53ukAlF2PxVd+U25v554nJwz
x7ElxzTYCpOjgAh6oMeJFbbXXvmkQVZnGLlqmi0dOhlD3Zte+OlAhRmFnqqi
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org