Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
File:                     a4530197-8968-425f-b6ab-d075941dc95c.cer (raw, json)
Hash identifier:          y7bl+8vD/ar+GuWJ6stj13if/iqbOOvR1kfbuay4SlU=
Subject key identifier:   AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B926435E18F58618FE610B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Oct 2024 11:01:35 +0000
Certificate not after:    Wed 03 Feb 2027 12:01:35 +0000
Subordinate resources:    AS: 397443
                          AS: 401085
                          IP: 192.112.176.0/23
                          IP: 2602:f802::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:26:43:5e:18:f5:86:18:fe:61:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 31 11:01:35 2024 GMT
            Not After : Feb  3 12:01:35 2027 GMT
        Subject: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:97:db:d4:8f:8d:1f:ce:81:62:14:9f:50:
                    b2:8b:08:17:e3:1c:ae:fc:c8:cf:c1:0b:dd:56:a0:
                    73:c3:39:6f:d1:1b:46:e2:36:84:dd:61:0a:8f:e2:
                    5e:95:02:d9:83:c2:a4:37:22:25:b2:2f:e5:52:09:
                    db:7c:b2:96:68:62:c5:5a:27:9e:61:79:cc:a9:ef:
                    2f:39:b1:1b:f5:5e:84:0b:b1:c4:02:db:17:10:65:
                    53:06:75:06:f7:36:4d:d8:b5:09:e4:59:73:9f:ff:
                    33:58:bc:1e:6d:04:3b:54:2d:98:e9:96:84:be:22:
                    d1:e3:1f:9f:39:44:95:4e:ff:9a:df:73:30:a4:f6:
                    87:1b:25:49:58:8c:a6:f1:f3:81:22:36:cc:9c:fd:
                    c7:35:93:9c:a8:76:20:81:5b:e1:c4:66:57:55:9f:
                    e7:a3:04:b8:b8:91:47:8b:fe:53:0f:c5:e1:13:3f:
                    a1:a8:7c:97:a7:f1:23:6a:54:35:65:49:8e:25:dd:
                    e0:a3:4e:7c:d3:42:b1:2f:56:2f:36:a5:96:8b:77:
                    5c:28:28:db:0a:2d:54:c1:67:09:3f:17:ef:8c:ab:
                    8e:be:cb:e1:e0:92:19:cd:63:28:15:44:77:a3:e9:
                    8e:dd:e8:a8:17:3a:b5:15:1c:65:25:de:7a:d0:60:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.176.0/23
                IPv6:
                  2602:f802::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397443
                  401085

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:92:e6:55:6a:71:9a:9b:9f:d5:51:22:14:f3:6d:84:7b:d9:
         d7:4a:5e:f8:3f:8e:84:35:07:47:5f:a2:f9:05:a2:e5:b5:d5:
         f1:1d:29:40:a3:45:ab:2e:e2:61:1f:c1:5f:fa:19:a8:17:f8:
         78:36:4a:84:a6:85:97:b3:2b:27:ba:1f:05:9d:b0:b0:31:63:
         26:77:72:0b:b8:74:32:d6:ee:c1:1c:79:9e:d3:6b:89:8a:ce:
         bf:83:ab:a5:82:ac:fd:40:10:77:8a:7a:73:62:22:81:60:ec:
         a3:e1:42:1f:14:da:e0:2f:b3:59:8d:13:96:c3:59:61:9e:9e:
         1c:9a:5a:5e:66:48:d9:af:c0:74:0e:37:a4:64:ea:5b:b3:f2:
         60:d9:6e:f2:b3:38:e5:8b:e1:16:86:ef:ed:e3:f9:fe:7e:76:
         ef:6e:12:66:4c:e0:49:7d:5b:18:6f:b5:b8:42:7f:d0:ac:c5:
         11:e1:4f:83:d6:1c:c3:11:83:b2:25:2d:88:5e:b8:37:ad:6a:
         d2:47:18:7a:21:b7:81:d3:d7:33:1a:27:6b:96:3a:c1:df:f0:
         cd:43:e4:cb:e5:bf:d7:8b:70:6b:eb:d5:9f:89:56:09:55:3c:
         b6:44:44:08:99:d4:c6:19:f5:cb:4d:2d:be:6a:3f:ea:99:35:
         80:1a:57:3f
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEe5JkNeGPWGGP5hC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAzMTExMDEzNVoXDTI3MDIwMzEyMDEzNVowLzEtMCsGA1UEAxMk
YTQ1MzAxOTctODk2OC00MjVmLWI2YWItZDA3NTk0MWRjOTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZOX29SPjR/OgWIUn1CyiwgX4xyu/MjPwQvd
VqBzwzlv0RtG4jaE3WEKj+JelQLZg8KkNyIlsi/lUgnbfLKWaGLFWieeYXnMqe8v
ObEb9V6EC7HEAtsXEGVTBnUG9zZN2LUJ5Flzn/8zWLwebQQ7VC2Y6ZaEviLR4x+f
OUSVTv+a33MwpPaHGyVJWIym8fOBIjbMnP3HNZOcqHYggVvhxGZXVZ/nowS4uJFH
i/5TD8XhEz+hqHyXp/EjalQ1ZUmOJd3go05800KxL1YvNqWWi3dcKCjbCi1UwWcJ
PxfvjKuOvsvh4JIZzWMoFUR3o+mO3eioFzq1FRxlJd560GBRdQIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFKx1neGYjf79ShQe0qwwM8OxdeL5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h
NDUzMDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1OTQxZGM5NWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2E0NTMwMTk3LTg5NjgtNDI1Zi1i
NmFiLWQwNzU5NDFkYzk1Yy9hNDUzMDE5Ny04OTY4LTQyNWYtYjZhYi1kMDc1OTQx
ZGM5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAHAcLAwDgQCAAIwCAMGACYC+AIAMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwYQgwIDBh69MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIOS5lVqcZqbn9VRIhTz
bYR72ddKXvg/joQ1B0dfovkFouW11fEdKUCjRasu4mEfwV/6GagX+Hg2SoSmhZez
Kye6HwWdsLAxYyZ3cgu4dDLW7sEceZ7Ta4mKzr+Dq6WCrP1AEHeKenNiIoFg7KPh
Qh8U2uAvs1mNE5bDWWGenhyaWl5mSNmvwHQON6Rk6luz8mDZbvKzOOWL4RaG7+3j
+f5+du9uEmZM4El9WxhvtbhCf9CsxRHhT4PWHMMRg7IlLYheuDetatJHGHoht4HT
1zMaJ2uWOsHf8M1D5Mvlv9eLcGvr1Z+JVglVPLZERAiZ1MYZ9ctNLb5qP+qZNYAa
Vz8=
-----END CERTIFICATE-----