Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4.cer
File:                     3db906fb-a8ff-49a9-969f-6368e09818c4.cer (raw, json)
Hash identifier:          D/8EzfivolYHYaLHqV/bonwkRDGAkDxdF/oJB5yXGbQ=
Subject key identifier:   E3:93:5F:DA:BD:2B:1A:9E:EA:9B:9F:69:65:6E:A2:15:CC:22:54:54
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A1F0AF86FD088641884BCD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/3db906fb-a8ff-49a9-969f-6368e09818c4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 03:30:03 +0000
Certificate not after:    Tue 26 Jan 2027 04:30:03 +0000
Subordinate resources:    AS: 32261
                          IP: 2620:12d:b000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:f0:af:86:fd:08:86:41:88:4b:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 23 03:30:03 2024 GMT
            Not After : Jan 26 04:30:03 2027 GMT
        Subject: CN=3db906fb-a8ff-49a9-969f-6368e09818c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:54:ad:99:14:4c:57:30:ac:57:a5:dc:3a:
                    d0:cf:59:0b:e8:34:fb:01:b7:53:dc:33:52:a0:74:
                    80:d5:b8:82:04:05:8d:15:be:59:33:45:c5:d5:4d:
                    e7:80:27:33:34:4f:df:78:2c:5b:87:39:c0:3e:e5:
                    17:73:a3:80:15:2b:12:e1:0b:8a:c6:ec:45:fb:63:
                    16:b8:45:55:21:75:df:7a:de:38:71:b3:ed:fb:9a:
                    33:11:ad:20:76:33:1d:9c:0f:fa:6f:e3:cd:ac:3e:
                    0d:cc:12:b4:ae:f8:81:a3:db:03:dc:0e:3f:4f:50:
                    4f:8c:4c:16:a8:f6:f0:92:b3:29:dc:32:b1:57:7b:
                    5a:89:63:98:77:e7:6e:aa:e7:ae:f9:6c:49:e0:29:
                    4f:73:30:34:3f:cd:72:75:ad:0f:84:48:08:95:76:
                    98:65:df:45:eb:c5:c3:a4:16:41:c2:2f:69:42:c4:
                    fe:b3:ae:2f:16:d8:77:2a:93:49:63:f4:eb:af:3b:
                    57:1c:25:92:e9:07:0c:54:99:80:63:63:f9:eb:1a:
                    45:36:5a:0f:90:88:26:25:fa:d1:c0:49:03:68:e6:
                    e6:ea:a3:22:2f:e0:fe:01:16:3b:bb:f5:c4:9b:0f:
                    ce:4b:f9:ee:5d:c5:1a:e5:d7:bf:bd:91:d7:e0:34:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:5F:DA:BD:2B:1A:9E:EA:9B:9F:69:65:6E:A2:15:CC:22:54:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3db906fb-a8ff-49a9-969f-6368e09818c4/3db906fb-a8ff-49a9-969f-6368e09818c4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12d:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:b4:7c:38:1a:a1:d4:d6:3e:91:ff:60:80:97:bd:0b:6a:
         9c:0f:a4:f5:d7:0a:32:88:6a:5d:0c:63:04:06:81:cf:a6:3c:
         be:96:2f:78:5c:ca:26:3c:0e:45:d0:b6:6c:f5:98:c0:51:27:
         8b:b5:06:7a:18:32:de:15:17:b4:87:c7:05:e5:a8:aa:2e:ea:
         76:ed:d4:70:0a:38:49:e6:4e:d1:92:73:2e:df:cd:10:94:49:
         07:ee:87:34:18:3a:a4:37:b0:db:89:df:08:a3:35:ca:02:8d:
         38:0d:22:1f:21:7e:8b:4e:67:6b:cb:75:10:46:98:2f:cb:ca:
         82:9a:79:9d:2f:f1:7e:9b:80:f7:3c:6c:b5:8a:5c:37:d4:ee:
         ae:f9:0e:85:7c:a6:d5:cd:c9:98:c7:f8:fb:94:01:47:07:e5:
         5c:53:cf:93:11:8d:b3:7a:32:4c:79:f6:84:9e:8f:fc:18:bd:
         1f:11:53:16:ea:9e:25:70:01:a4:ca:84:00:90:f1:8f:93:96:
         d9:7b:b0:9a:bc:e4:f0:57:51:1a:85:86:73:7c:1e:14:06:b1:
         e9:b3:4c:23:d2:dd:99:c3:57:f9:f9:f2:27:46:31:bd:d4:64:
         21:ce:c6:d6:5f:a0:68:52:9d:f9:6f:3a:ec:c4:77:2f:0a:f8:
         84:52:fa:98
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEeh8K+G/QiGQYhLzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAyMzAzMzAwM1oXDTI3MDEyNjA0MzAwM1owLzEtMCsGA1UEAxMk
M2RiOTA2ZmItYThmZi00OWE5LTk2OWYtNjM2OGUwOTgxOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNFUrZkUTFcwrFel3DrQz1kL6DT7AbdT3DNS
oHSA1biCBAWNFb5ZM0XF1U3ngCczNE/feCxbhznAPuUXc6OAFSsS4QuKxuxF+2MW
uEVVIXXfet44cbPt+5ozEa0gdjMdnA/6b+PNrD4NzBK0rviBo9sD3A4/T1BPjEwW
qPbwkrMp3DKxV3taiWOYd+duqueu+WxJ4ClPczA0P81yda0PhEgIlXaYZd9F68XD
pBZBwi9pQsT+s64vFth3KpNJY/TrrztXHCWS6QcMVJmAY2P56xpFNloPkIgmJfrR
wEkDaObm6qMiL+D+ARY7u/XEmw/OS/nuXcUa5de/vZHX4DSEcwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFOOTX9q9Kxqe6pufaWVuohXMIlRUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z
ZGI5MDZmYi1hOGZmLTQ5YTktOTY5Zi02MzY4ZTA5ODE4YzQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkYjkwNmZiLWE4ZmYtNDlhOS05
NjlmLTYzNjhlMDk4MThjNC8zZGI5MDZmYi1hOGZmLTQ5YTktOTY5Zi02MzY4ZTA5
ODE4YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmIAEtsAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICfgUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEALfS0fDgaodTWPpH/YICXvQtqnA+k9dcKMohqXQxjBAaB
z6Y8vpYveFzKJjwORdC2bPWYwFEni7UGehgy3hUXtIfHBeWoqi7qdu3UcAo4SeZO
0ZJzLt/NEJRJB+6HNBg6pDew24nfCKM1ygKNOA0iHyF+i05na8t1EEaYL8vKgpp5
nS/xfpuA9zxstYpcN9TurvkOhXym1c3JmMf4+5QBRwflXFPPkxGNs3oyTHn2hJ6P
/Bi9HxFTFuqeJXABpMqEAJDxj5OW2Xuwmrzk8FdRGoWGc3weFAax6bNMI9LdmcNX
+fnyJ0YxvdRkIc7G1l+gaFKd+W867MR3Lwr4hFL6mA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org