Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a.cer
File:                     6fd31e81-6599-4bac-8a74-7bbe9233374a.cer (raw, json)
Hash identifier:          4eQ9ItRKaC8ogtCseEsZ0hKsgZi4occ1LJJSuQ+doSw=
Subject key identifier:   0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847EC19AF39B529BAEE6D80A650
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 17:02:28 +0000
Certificate not after:    Sun 21 Feb 2027 17:02:28 +0000
Subordinate resources:    AS: 22727
                          AS: 46454
                          IP: 65.254.32.0/20
                          IP: 66.218.0.0/19
                          IP: 68.64.64.0 -- 68.64.94.255
                          IP: 69.67.224.0/19
                          IP: 2607:f638::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:19:af:39:b5:29:ba:ee:6d:80:a6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 18 17:02:28 2024 GMT
            Not After : Feb 21 17:02:28 2027 GMT
        Subject: CN=6fd31e81-6599-4bac-8a74-7bbe9233374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:4d:eb:05:02:27:5b:c9:c1:5d:24:2c:14:
                    b1:e1:a4:b8:8a:23:1d:36:73:7c:7a:99:85:73:9b:
                    77:ee:38:54:a1:e9:6c:8b:73:5c:d6:ce:74:9d:ba:
                    28:7f:f7:de:f1:b9:36:6a:49:e0:e9:c0:09:1e:ea:
                    d8:05:f4:1e:b4:1e:9e:e3:bf:13:d5:a3:a9:29:f1:
                    3d:0e:12:0d:f5:de:90:47:87:c7:52:2c:c9:66:77:
                    01:d8:ea:88:24:ef:a9:70:54:e9:02:c5:1a:6d:41:
                    07:0c:65:b4:c5:f5:45:45:63:c6:c7:36:b4:16:7a:
                    fe:c9:e0:80:49:79:5c:f8:f9:3e:dc:b5:35:9e:6f:
                    63:bd:1d:4a:79:8d:72:7b:67:b5:dd:f6:af:8e:cc:
                    ec:2a:42:66:70:6e:ab:a9:3e:58:f8:99:b9:37:60:
                    20:2f:00:cf:99:16:52:c5:a2:f0:7a:cd:b5:19:60:
                    91:fa:0e:d4:03:60:e1:4f:9b:14:bd:01:52:6c:54:
                    59:4b:0a:ad:df:da:19:5c:48:0d:4e:51:d8:09:35:
                    7f:c0:d8:a9:c3:04:7e:0d:7a:af:71:2e:3f:21:e7:
                    81:69:31:9d:bf:0e:87:83:6d:e4:36:59:37:e4:7d:
                    80:52:df:bb:49:d7:af:3b:f8:6e:f0:0e:8c:d5:bb:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:99:41:69:D2:E3:D1:01:11:72:83:86:2D:E7:07:E4:D0:14:29:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6fd31e81-6599-4bac-8a74-7bbe9233374a/6fd31e81-6599-4bac-8a74-7bbe9233374a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.32.0/20
                  66.218.0.0/19
                  68.64.64.0-68.64.94.255
                  69.67.224.0/19
                IPv6:
                  2607:f638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22727
                  46454

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:85:12:8b:e5:11:3a:f4:33:28:9e:20:fb:db:fb:17:79:6b:
         8d:6e:64:f9:55:94:f6:e8:38:7f:d8:8e:ff:f7:90:31:ea:2a:
         a2:f8:75:a3:f4:aa:c0:a3:d9:fa:dc:e3:1c:78:ce:07:8b:eb:
         3e:12:f3:78:71:91:8c:65:1e:f3:65:ca:af:4d:4e:ae:6c:87:
         4b:54:fd:52:25:e4:fa:c8:cd:0f:92:79:bc:38:f7:24:32:09:
         2b:ec:85:78:ef:c6:e2:ff:6b:4a:ef:8a:ab:74:4c:43:17:41:
         a1:0d:d4:58:94:0f:d7:3f:c3:84:38:f1:ed:47:a4:84:05:32:
         8e:0b:0b:ec:7e:dc:4f:a8:e9:5c:a4:d9:76:94:f4:e9:54:f8:
         36:bc:c8:ce:12:d3:01:ca:bc:ce:cc:cc:02:ff:6a:49:07:1b:
         64:10:71:cb:08:86:e2:2e:3e:2f:86:bd:2f:3a:42:ba:8c:96:
         59:80:4f:86:3a:9a:2e:f1:8c:35:ba:90:12:3e:f9:d7:b4:4a:
         2c:b8:2c:21:c2:70:16:9a:6b:fb:64:90:29:e7:61:66:8a:f7:
         3b:48:f2:9a:b2:64:16:39:4a:3c:c4:e7:b2:77:89:9a:be:0b:
         50:cb:9d:ee:f2:41:01:f7:32:5c:4a:91:9b:fd:ea:c4:00:e2:
         30:51:28:65
-----BEGIN CERTIFICATE-----
MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEfsGa85tSm67m2AplAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTExODE3MDIyOFoXDTI3MDIyMTE3MDIyOFowLzEtMCsGA1UEAxMk
NmZkMzFlODEtNjU5OS00YmFjLThhNzQtN2JiZTkyMzMzNzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDFN6wUCJ1vJwV0kLBSx4aS4iiMdNnN8epmF
c5t37jhUoelsi3Nc1s50nboof/fe8bk2akng6cAJHurYBfQetB6e478T1aOpKfE9
DhIN9d6QR4fHUizJZncB2OqIJO+pcFTpAsUabUEHDGW0xfVFRWPGxza0Fnr+yeCA
SXlc+Pk+3LU1nm9jvR1KeY1ye2e13favjszsKkJmcG6rqT5Y+Jm5N2AgLwDPmRZS
xaLwes21GWCR+g7UA2DhT5sUvQFSbFRZSwqt39oZXEgNTlHYCTV/wNipwwR+DXqv
cS4/IeeBaTGdvw6Hg23kNlk35H2AUt+7SdevO/hu8A6M1buQSQIDAQABo4IESDCC
BEQwHQYDVR0OBBYEFAyZQWnS49EBEXKDhi3nB+TQFCmrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82
ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIzMzM3NGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzZmZDMxZTgxLTY1OTktNGJhYy04
YTc0LTdiYmU5MjMzMzc0YS82ZmQzMWU4MS02NTk5LTRiYWMtOGE3NC03YmJlOTIz
MzM3NGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwSAYIKwYBBQUH
AQcBAf8EOTA3MCYEAgABMCADBARB/iADBAVC2gAwDAMEBkRAQAMEAERAXgMEBUVD
4DANBAIAAjAHAwUAJgf2ODAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJYxwIDALV2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyFEovlETr0MyieIPvb+xd5a41uZPlVlPboOH/Yjv/3kDHqKqL4
daP0qsCj2frc4xx4zgeL6z4S83hxkYxlHvNlyq9NTq5sh0tU/VIl5PrIzQ+Sebw4
9yQyCSvshXjvxuL/a0rviqt0TEMXQaEN1FiUD9c/w4Q48e1HpIQFMo4LC+x+3E+o
6Vyk2XaU9OlU+Da8yM4S0wHKvM7MzAL/akkHG2QQccsIhuIuPi+GvS86QrqMllmA
T4Y6mi7xjDW6kBI++de0Siy4LCHCcBaaa/tkkCnnYWaK9ztI8pqyZBY5SjzE57J3
iZq+C1DLne7yQQH3MlxKkZv96sQA4jBRKGU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:16 2024 by rpki-client on console-ams.rpki-client.org