Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer
File:                     86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d.cer (raw, json)
Hash identifier:          5dkwCcFwb/CCNppjaSmzzfOTuPgvUxGK5A3tGBkD/rw=
Subject key identifier:   D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
Authority key identifier: 8E:12:A5:9C:11:20:6D:2D:11:85:61:D3:CA:3A:96:46:C8:6D:95:8F
Certificate issuer:       /CN=7c9b1947-b813-43b3-9152-c4ccbff1cde7
Certificate serial:       010D0C9F43285847BF344836F7484105F585D600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
Manifest:                 rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
caRepository:             rsync://rpki-pp.com/repo/GOOFL/0/
Notify URL:               https://rpki-pp.com/rrdp/notification.xml
Certificate not before:   Sat 02 Nov 2024 15:04:41 +0000
Certificate not after:    Fri 05 Feb 2027 16:04:41 +0000
Subordinate resources:    AS: 13527
                          IP: 2602:f83d::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bf:34:48:36:f7:48:41:05:f5:85:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9b1947-b813-43b3-9152-c4ccbff1cde7
        Validity
            Not Before: Nov  2 15:04:41 2024 GMT
            Not After : Feb  5 16:04:41 2027 GMT
        Subject: CN=86de965d710aeee198142f460f82d31bc5a8aae2b2f48e0c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0f:ce:48:09:67:8d:00:fc:5d:d6:c5:b7:cc:
                    e2:c4:f2:e2:f1:8d:4c:dd:3e:1c:05:fe:e7:97:62:
                    b2:9d:ae:dd:1d:2e:1f:4d:3d:24:04:36:14:c2:20:
                    2a:d1:1d:f7:59:24:50:81:81:5c:ec:5d:44:18:19:
                    35:99:29:fb:3d:e0:c0:ee:59:91:cb:d2:d6:51:d6:
                    c8:d0:09:a9:f4:7c:bd:4a:85:3c:e9:e2:07:be:2c:
                    90:75:9a:6e:4d:3a:e5:d6:49:94:81:f8:34:2b:6f:
                    c8:82:96:79:67:13:aa:fe:0d:2f:40:63:62:73:04:
                    9c:4b:8d:d5:e1:38:dc:ac:36:8a:b9:72:49:77:96:
                    d9:20:96:6f:17:29:86:8c:5c:c9:b4:e1:87:54:5f:
                    95:73:bb:02:99:cd:e8:50:e6:35:ba:bb:09:06:26:
                    f0:a7:86:07:f9:85:f2:e2:a7:da:84:81:93:65:f4:
                    c9:96:d8:9d:72:cd:6f:b8:fa:fd:17:6b:8c:f9:8f:
                    92:f1:d7:6e:56:91:cf:37:27:20:a3:75:ad:ad:f1:
                    ab:93:21:1f:75:87:9e:5e:b9:a6:51:b5:02:0e:62:
                    a7:85:a2:c5:88:5f:c4:a4:7c:a4:86:60:85:91:b2:
                    de:54:bf:79:78:ba:7e:0e:d3:34:90:3b:58:e4:94:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:6A:E6:F1:88:38:E2:25:7D:55:AB:B5:00:63:6F:50:92:36:E3
            Subject Information Access:
                CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/0/
                RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/0/D4606AE6F18838E2257D55ABB500636F509236E3.mft
                RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl

            X509v3 Authority Key Identifier:
                keyid:8E:12:A5:9C:11:20:6D:2D:11:85:61:D3:CA:3A:96:46:C8:6D:95:8F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13527

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:81:b0:7a:ab:86:85:52:c7:21:44:f1:f1:79:2a:bb:8a:
         be:d9:04:e6:02:7c:c5:dd:c9:a9:c8:78:11:df:b8:dd:5c:8a:
         0e:f6:a5:d1:e6:e2:ed:4d:bc:84:19:0d:71:d0:83:00:c1:7b:
         7a:7d:21:93:e2:06:4c:c7:a7:24:ad:1d:0c:05:6d:8c:3a:43:
         4b:1e:f9:f5:17:eb:e6:e7:5c:de:43:30:07:14:97:91:e9:c7:
         03:12:ce:5b:44:8f:a1:7a:5b:54:6c:f9:f9:88:cd:54:0b:b9:
         20:1a:44:e2:11:4e:3f:35:d9:40:a4:79:64:7d:e1:b2:a0:39:
         20:5a:5a:6c:36:2d:b5:7d:ef:dc:cc:6b:6b:d5:48:78:4e:e9:
         99:25:ac:e5:e0:fd:a0:12:f8:e4:11:3f:2b:74:28:2a:6f:95:
         20:bf:02:de:b8:26:97:92:51:59:de:c5:e4:47:1e:50:31:90:
         50:f4:98:44:af:2d:ed:7c:53:06:2f:79:3c:82:1b:62:26:8b:
         7c:6f:41:7a:64:ab:8d:fa:c4:19:44:d1:40:a7:70:df:7b:22:
         7b:a0:49:7f:0e:41:f9:a9:90:dc:26:f8:d0:1e:ae:5a:90:30:
         2f:d3:f3:b9:81:87:93:f5:62:6b:54:93:07:40:49:30:ab:1f:
         bd:dd:cf:49
-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEe/NEg290hBBfWF1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M5YjE5NDctYjgxMy00M2IzLTkxNTItYzRjY2JmZjFj
ZGU3MB4XDTI0MTEwMjE1MDQ0MVoXDTI3MDIwNTE2MDQ0MVowPTE7MDkGA1UEAxMy
ODZkZTk2NWQ3MTBhZWVlMTk4MTQyZjQ2MGY4MmQzMWJjNWE4YWFlMmIyZjQ4ZTBj
NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD85ICWeNAPxd1sW3
zOLE8uLxjUzdPhwF/ueXYrKdrt0dLh9NPSQENhTCICrRHfdZJFCBgVzsXUQYGTWZ
Kfs94MDuWZHL0tZR1sjQCan0fL1KhTzp4ge+LJB1mm5NOuXWSZSB+DQrb8iClnln
E6r+DS9AY2JzBJxLjdXhONysNoq5ckl3ltkglm8XKYaMXMm04YdUX5VzuwKZzehQ
5jW6uwkGJvCnhgf5hfLip9qEgZNl9MmW2J1yzW+4+v0Xa4z5j5Lx125Wkc83JyCj
da2t8auTIR91h55euaZRtQIOYqeFosWIX8SkfKSGYIWRst5Uv3l4un4O0zSQO1jk
lLb/AgMBAAGjggNvMIIDazAdBgNVHQ4EFgQU1GBq5vGIOOIlfVWrtQBjb1CSNuMw
gdEGCCsGAQUFBwELBIHEMIHBMC0GCCsGAQUFBzAFhiFyc3luYzovL3Jwa2ktcHAu
Y29tL3JlcG8vR09PRkwvMC8wWQYIKwYBBQUHMAqGTXJzeW5jOi8vcnBraS1wcC5j
b20vcmVwby9HT09GTC8wL0Q0NjA2QUU2RjE4ODM4RTIyNTdENTVBQkI1MDA2MzZG
NTA5MjM2RTMubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3Jwa2ktcHAuY29tL3Jy
ZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8EgdQw
gdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YzliMTk0Ny1i
ODEzLTQzYjMtOTE1Mi1jNGNjYmZmMWNkZTcvN2M5YjE5NDctYjgxMy00M2IzLTkx
NTItYzRjY2JmZjFjZGU3LmNybDAfBgNVHSMEGDAWgBSOEqWcESBtLRGFYdPKOpZG
yG2VjzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggrBgEF
BQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBr
aS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAx
NTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzdjOWIxOTQ3LWI4MTMtNDNi
My05MTUyLWM0Y2NiZmYxY2RlNy5jZXIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAvg9ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI01zBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW
oYGwequGhVLHIUTx8Xkqu4q+2QTmAnzF3cmpyHgR37jdXIoO9qXR5uLtTbyEGQ1x
0IMAwXt6fSGT4gZMx6ckrR0MBW2MOkNLHvn1F+vm51zeQzAHFJeR6ccDEs5bRI+h
eltUbPn5iM1UC7kgGkTiEU4/NdlApHlkfeGyoDkgWlpsNi21fe/czGtr1Uh4TumZ
Jazl4P2gEvjkET8rdCgqb5UgvwLeuCaXklFZ3sXkRx5QMZBQ9JhEry3tfFMGL3k8
ghtiJot8b0F6ZKuN+sQZRNFAp3DfeyJ7oEl/DkH5qZDcJvjQHq5akDAv0/O5gYeT
9WJrVJMHQEkwqx+93c9J
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:52 2024 by rpki-client on console-ams.rpki-client.org