Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09.cer
File:                     81565da9-aab9-45ca-b99c-0684053daa09.cer (raw, json)
Hash identifier:          JFZy5f2xeC1+bTxknhxYcq2YnK2LFo0Z8pdNneITfMA=
Subject key identifier:   D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A0790C0E8764B39C636DB3E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Oct 2024 14:53:11 +0000
Certificate not after:    Mon 25 Jan 2027 15:53:11 +0000
Subordinate resources:    AS: 188
                          AS: 14968
                          AS: 399261
                          IP: 139.121.0.0/16
                          IP: 149.64.0.0/16
                          IP: 192.26.8.0/24
                          IP: 192.83.105.0/24
                          IP: 192.94.168.0/24
                          IP: 192.103.128.0/24
                          IP: 192.112.183.0/24
                          IP: 192.133.18.0/24
                          IP: 192.138.169.0/24
                          IP: 192.173.8.0/23
                          IP: 192.173.12.0/24
                          IP: 192.206.249.0 -- 192.206.252.255
                          IP: 198.22.11.0 -- 198.22.15.255
                          IP: 198.133.156.0/24
                          IP: 198.151.8.0/21
                          IP: 198.184.177.0/24
                          IP: 199.242.230.0/24
                          IP: 2620:0:a0::/48
                          IP: 2620:131:9000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:79:0c:0e:87:64:b3:9c:63:6d:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 22 14:53:11 2024 GMT
            Not After : Jan 25 15:53:11 2027 GMT
        Subject: CN=81565da9-aab9-45ca-b99c-0684053daa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:f4:aa:e1:85:98:c2:50:eb:1b:07:dd:26:
                    0c:c9:bd:70:06:a9:6e:62:38:a3:6e:d1:a7:df:79:
                    c7:6d:a3:f9:e4:cb:cd:a3:92:a3:d2:9c:77:31:2c:
                    dc:d5:22:48:9c:f9:6d:61:e6:db:24:bf:8c:7b:54:
                    6e:ed:e1:35:09:8f:b4:6d:1d:04:ec:c0:33:1a:66:
                    5a:ce:0e:75:3f:80:a1:8c:6e:6a:cb:f1:ab:71:03:
                    41:be:72:12:79:ee:26:10:e3:a7:49:42:57:82:85:
                    d3:49:f3:0d:32:3d:21:5e:98:ee:a4:01:30:c4:dc:
                    01:84:21:a9:2a:e6:62:cb:93:31:83:06:9e:79:10:
                    2d:dc:51:46:4c:be:4a:14:1d:58:b8:af:13:df:47:
                    5c:81:6e:88:9d:82:32:ae:2e:8b:f9:b2:d5:e2:54:
                    37:bd:85:6c:bb:5f:3a:3a:0f:ad:63:e0:e8:27:25:
                    41:7a:16:3f:1c:7b:e5:0a:3f:2d:4b:6d:ae:3a:ed:
                    38:36:af:22:e4:48:14:7a:93:4f:cd:dd:89:5d:a1:
                    09:df:84:21:c8:09:d7:f0:88:67:2f:1f:ca:77:58:
                    25:85:f9:4f:0c:ae:2f:d3:f0:4f:d5:9d:7f:46:ca:
                    fb:e0:66:32:d7:19:be:25:6f:65:87:39:e2:d8:21:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5C:90:A0:F6:CD:17:C6:44:68:A9:C4:16:61:D5:7E:64:23:2D:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/81565da9-aab9-45ca-b99c-0684053daa09/81565da9-aab9-45ca-b99c-0684053daa09.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.121.0.0/16
                  149.64.0.0/16
                  192.26.8.0/24
                  192.83.105.0/24
                  192.94.168.0/24
                  192.103.128.0/24
                  192.112.183.0/24
                  192.133.18.0/24
                  192.138.169.0/24
                  192.173.8.0/23
                  192.173.12.0/24
                  192.206.249.0-192.206.252.255
                  198.22.11.0-198.22.15.255
                  198.133.156.0/24
                  198.151.8.0/21
                  198.184.177.0/24
                  199.242.230.0/24
                IPv6:
                  2620:0:a0::/48
                  2620:131:9000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  188
                  14968
                  399261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d5:50:03:99:86:ab:c1:66:5a:27:db:7c:86:15:26:ef:de:
         c9:1a:48:f7:47:10:f1:1d:c7:bd:95:41:11:ac:e9:60:ff:59:
         84:cb:03:4c:2e:eb:fc:78:92:ce:52:cf:0a:45:86:71:9a:b3:
         1e:5f:16:f8:06:53:99:00:71:aa:26:cb:2a:30:b8:85:cb:2b:
         c0:98:93:a3:e3:89:6c:f4:cd:0b:d2:a7:a6:f3:67:44:f8:9e:
         89:53:83:86:f4:6c:5d:96:8a:35:da:b1:92:dc:ab:97:e4:59:
         cc:63:61:66:87:b2:92:84:64:fc:9c:e7:39:e4:af:92:58:46:
         5c:67:bd:20:57:e4:f7:b0:e7:0c:34:7a:54:1a:74:91:60:95:
         99:6b:da:86:21:6b:5f:be:9f:38:36:ca:4f:1d:90:0f:ff:d2:
         e1:7d:6b:7d:d7:f7:a7:13:15:e4:f4:19:b7:05:6d:1e:cc:c7:
         94:ca:aa:fd:a1:4a:b8:0a:e1:bb:9f:18:c3:23:1f:4a:d0:3b:
         c2:31:73:8d:7c:7a:50:b6:ef:e9:bd:5e:53:58:85:af:fa:89:
         f6:0a:01:08:95:ed:93:2f:81:63:cd:00:0a:5d:5e:5e:7b:87:
         4e:58:9d:89:b1:8a:d0:4e:7a:30:e5:db:59:7b:dd:77:05:bc:
         53:b7:8e:a4
-----BEGIN CERTIFICATE-----
MIIHmzCCBoOgAwIBAgIUAQ0Mn0MoWEegeQwOh2SznGNts+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAyMjE0NTMxMVoXDTI3MDEyNTE1NTMxMVowLzEtMCsGA1UEAxMk
ODE1NjVkYTktYWFiOS00NWNhLWI5OWMtMDY4NDA1M2RhYTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimj0quGFmMJQ6xsH3SYMyb1wBqluYjijbtGn
33nHbaP55MvNo5Kj0px3MSzc1SJInPltYebbJL+Me1Ru7eE1CY+0bR0E7MAzGmZa
zg51P4ChjG5qy/GrcQNBvnISee4mEOOnSUJXgoXTSfMNMj0hXpjupAEwxNwBhCGp
KuZiy5MxgwaeeRAt3FFGTL5KFB1YuK8T30dcgW6InYIyri6L+bLV4lQ3vYVsu186
Og+tY+DoJyVBehY/HHvlCj8tS22uOu04Nq8i5EgUepNPzd2JXaEJ34QhyAnX8Ihn
Lx/Kd1glhflPDK4v0/BP1Z1/Rsr74GYy1xm+JW9lhzni2CHFIQIDAQABo4IErTCC
BKkwHQYDVR0OBBYEFNdckKD2zRfGRGipxBZh1X5kIy3IMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84
MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUzZGFhMDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzgxNTY1ZGE5LWFhYjktNDVjYS1i
OTljLTA2ODQwNTNkYWEwOS84MTU2NWRhOS1hYWI5LTQ1Y2EtYjk5Yy0wNjg0MDUz
ZGFhMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwgagGCCsGAQUF
BwEHAQH/BIGYMIGVMHoEAgABMHQDAwCLeQMDAJVAAwQAwBoIAwQAwFNpAwQAwF6o
AwQAwGeAAwQAwHC3AwQAwIUSAwQAwIqpAwQBwK0IAwQAwK0MMAwDBADAzvkDBADA
zvwwDAMEAMYWCwMEBMYWAAMEAMaFnAMEA8aXCAMEAMa4sQMEAMfy5jAXBAIAAjAR
AwcAJiAAAACgAwYAJiABMZAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICALwCAjp4
AgMGF50wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEANdVQA5mGq8FmWifbfIYVJu/eyRpI90cQ8R3HvZVBEazp
YP9ZhMsDTC7r/HiSzlLPCkWGcZqzHl8W+AZTmQBxqibLKjC4hcsrwJiTo+OJbPTN
C9KnpvNnRPieiVODhvRsXZaKNdqxktyrl+RZzGNhZoeykoRk/JznOeSvklhGXGe9
IFfk97DnDDR6VBp0kWCVmWvahiFrX76fODbKTx2QD//S4X1rfdf3pxMV5PQZtwVt
HszHlMqq/aFKuArhu58YwyMfStA7wjFzjXx6ULbv6b1eU1iFr/qJ9goBCJXtky+B
Y80ACl1eXnuHTlidibGK0E56MOXbWXvddwW8U7eOpA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 22:45:19 2024 by rpki-client on console-ams.rpki-client.org