Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fa1b108-b01f-4753-a08c-1f9e983c894f.cer
File:                     6fa1b108-b01f-4753-a08c-1f9e983c894f.cer (raw, json)
Hash identifier:          +IhagnH3JOfaFYeOblGZAM1zO/NzTVhpp/Bs6evrb7M=
Subject key identifier:   B7:73:A1:93:5E:18:6C:9C:4D:2A:14:AD:DE:51:5A:FE:F0:F0:2F:47
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846DD2F8E74E11B5064CC551D4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fa1b108-b01f-4753-a08c-1f9e983c894f/6fa1b108-b01f-4753-a08c-1f9e983c894f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fa1b108-b01f-4753-a08c-1f9e983c894f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Aug 2024 16:02:29 +0000
Certificate not after:    Mon 16 Nov 2026 17:02:29 +0000
Subordinate resources:    AS: 11084
                          IP: 67.21.96.0/20
                          IP: 67.220.32.0/20
                          IP: 96.44.32.0/19
                          IP: 173.255.64.0/20
                          IP: 199.114.240.0/21
                          IP: 216.46.128.0/19
                          IP: 2610::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dd:2f:8e:74:e1:1b:50:64:cc:55:1d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 13 16:02:29 2024 GMT
            Not After : Nov 16 17:02:29 2026 GMT
        Subject: CN=6fa1b108-b01f-4753-a08c-1f9e983c894f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:ae:39:82:a8:0f:82:3a:6d:d9:f1:67:9c:
                    24:2a:86:00:72:fa:31:ba:a3:67:95:a6:f1:64:98:
                    05:ef:00:a3:cc:96:4f:17:6e:c8:1e:7c:14:fd:c0:
                    5e:14:81:9a:9c:a4:9d:09:e1:38:fd:02:c5:c7:7a:
                    e0:d2:5e:7e:a6:80:87:f8:06:f7:99:08:2a:86:3d:
                    0e:20:2c:59:a0:b1:db:51:7a:30:85:5b:a1:6f:3b:
                    cc:d1:21:34:e2:c2:0e:c7:91:20:58:7c:da:30:b6:
                    4c:0b:d1:2e:20:45:2f:ef:75:55:67:69:75:c5:8e:
                    c8:08:39:d6:b2:c9:ec:19:17:ed:55:e8:3a:13:20:
                    f6:cd:03:70:85:cf:dc:d4:ea:b6:af:1a:8b:cd:26:
                    63:ae:86:4d:9d:72:9b:8b:39:db:54:d7:ad:ac:a1:
                    b9:c3:21:4d:6a:93:96:84:f8:74:74:63:f7:64:fc:
                    9d:07:d6:23:38:75:28:c2:5b:7b:57:c5:17:c5:7a:
                    b3:9d:26:44:5b:7a:81:02:02:ab:60:77:7b:a0:eb:
                    4c:42:af:e8:ed:bc:d3:22:15:a5:40:67:95:9a:53:
                    c2:bf:43:ce:2c:4c:2d:63:3c:2a:6a:0f:34:04:55:
                    38:5f:46:38:19:15:c2:71:4c:51:08:45:d2:ca:8f:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:A1:93:5E:18:6C:9C:4D:2A:14:AD:DE:51:5A:FE:F0:F0:2F:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fa1b108-b01f-4753-a08c-1f9e983c894f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fa1b108-b01f-4753-a08c-1f9e983c894f/6fa1b108-b01f-4753-a08c-1f9e983c894f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.21.96.0/20
                  67.220.32.0/20
                  96.44.32.0/19
                  173.255.64.0/20
                  199.114.240.0/21
                  216.46.128.0/19
                IPv6:
                  2610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11084

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:94:12:b1:67:d9:39:31:08:0d:52:e3:84:4f:89:c1:e0:92:
         a9:1f:4c:5e:8b:bb:0b:97:1f:2e:66:47:7c:05:13:8d:f1:a8:
         bd:f9:72:54:e0:6e:20:77:50:f7:7d:82:1d:a3:d6:33:ff:9d:
         e8:56:15:49:25:97:4a:bd:15:f5:2d:49:aa:d7:7f:bb:1e:c5:
         2f:c1:30:61:08:0b:92:b1:a9:11:09:87:1b:dc:8e:e3:3a:89:
         3c:76:ba:8e:91:84:d1:76:47:f4:b1:ba:1a:fa:d4:04:33:84:
         39:82:b5:d8:94:82:85:ff:45:f6:5b:08:34:33:a6:46:84:e7:
         1b:db:d6:2a:66:38:a5:f9:25:bc:07:6b:bd:ae:d0:41:63:c6:
         50:2b:cb:e3:9a:f7:60:b4:e7:2a:de:f1:f1:6a:42:de:01:62:
         57:69:70:29:3e:bf:8c:e2:73:20:27:dc:6d:6c:4e:89:d9:09:
         6f:95:62:e9:8b:8b:d2:bb:9b:0f:3c:0b:45:cf:4f:7d:0f:2a:
         9d:ce:99:10:1d:ea:51:48:f4:5f:b8:3e:9e:a2:2e:4f:81:97:
         a8:96:fe:81:1c:19:fa:45:e8:a8:f5:70:b3:89:6b:c9:98:29:
         39:fe:42:fd:fb:00:34:d0:a8:94:b6:ca:eb:15:a7:91:77:13:
         39:9a:16:e9
-----BEGIN CERTIFICATE-----
MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEbdL4504RtQZMxVHUwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MDgxMzE2MDIyOVoXDTI2MTExNjE3MDIyOVowLzEtMCsGA1UEAxMk
NmZhMWIxMDgtYjAxZi00NzUzLWEwOGMtMWY5ZTk4M2M4OTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd+uOYKoD4I6bdnxZ5wkKoYAcvoxuqNnlabx
ZJgF7wCjzJZPF27IHnwU/cBeFIGanKSdCeE4/QLFx3rg0l5+poCH+Ab3mQgqhj0O
ICxZoLHbUXowhVuhbzvM0SE04sIOx5EgWHzaMLZMC9EuIEUv73VVZ2l1xY7ICDnW
ssnsGRftVeg6EyD2zQNwhc/c1Oq2rxqLzSZjroZNnXKbiznbVNetrKG5wyFNapOW
hPh0dGP3ZPydB9YjOHUowlt7V8UXxXqznSZEW3qBAgKrYHd7oOtMQq/o7bzTIhWl
QGeVmlPCv0POLEwtYzwqag80BFU4X0Y4GRXCcUxRCEXSyo9q5QIDAQABo4IERzCC
BEMwHQYDVR0OBBYEFLdzoZNeGGycTSoUrd5RWv7w8C9HMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82
ZmExYjEwOC1iMDFmLTQ3NTMtYTA4Yy0xZjllOTgzYzg5NGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzZmYTFiMTA4LWIwMWYtNDc1My1h
MDhjLTFmOWU5ODNjODk0Zi82ZmExYjEwOC1iMDFmLTQ3NTMtYTA4Yy0xZjllOTgz
Yzg5NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwTAYIKwYBBQUH
AQcBAf8EPTA7MCoEAgABMCQDBARDFWADBARD3CADBAVgLCADBASt/0ADBAPHcvAD
BAXYLoAwDQQCAAIwBwMFACYQAAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICK0ww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJZQSsWfZOTEIDVLjhE+JweCSqR9MXou7C5cfLmZHfAUTjfGovfly
VOBuIHdQ932CHaPWM/+d6FYVSSWXSr0V9S1Jqtd/ux7FL8EwYQgLkrGpEQmHG9yO
4zqJPHa6jpGE0XZH9LG6GvrUBDOEOYK12JSChf9F9lsINDOmRoTnG9vWKmY4pfkl
vAdrva7QQWPGUCvL45r3YLTnKt7x8WpC3gFiV2lwKT6/jOJzICfcbWxOidkJb5Vi
6YuL0rubDzwLRc9PfQ8qnc6ZEB3qUUj0X7g+nqIuT4GXqJb+gRwZ+kXoqPVws4lr
yZgpOf5C/fsANNColLbK6xWnkXcTOZoW6Q==
-----END CERTIFICATE-----
Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org