Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
File:                     aec61144-8dba-4096-a6cb-11d1d289ff0f.cer (raw, json)
Hash identifier:          N5o54L7P3+yWuWBujIxl+UtGuTDmi5xyUnWVpm9bpLM=
Subject key identifier:   31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847C4BD734EE31BEA8F32363E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 04 Nov 2024 14:40:06 +0000
Certificate not after:    Sun 07 Feb 2027 14:40:06 +0000
Subordinate resources:    AS: 396967
                          IP: 23.171.120.0/24
                          IP: 2607:9040::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:bd:73:4e:e3:1b:ea:8f:32:36:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  4 14:40:06 2024 GMT
            Not After : Feb  7 14:40:06 2027 GMT
        Subject: CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:59:e8:ef:ce:af:f4:a8:60:69:a9:00:a0:
                    0d:b9:26:4c:38:46:00:5b:04:f1:2b:d0:07:79:22:
                    36:f7:4d:9d:5b:1e:cd:12:9e:f1:15:2d:52:9b:46:
                    67:5c:83:f0:43:87:6a:d0:97:5b:07:b1:f7:b7:35:
                    18:9d:41:b6:b0:49:26:10:77:17:8d:ec:1e:90:1b:
                    c7:bf:5e:4c:32:56:a2:17:ce:23:bc:4f:17:58:5e:
                    75:da:46:fd:f6:f5:e1:e9:ca:24:99:91:70:27:9c:
                    94:ae:46:0a:4e:46:5c:e0:d5:1a:32:53:f3:5e:92:
                    43:c6:42:22:82:c3:0f:69:0f:0c:0f:af:53:36:b1:
                    83:93:b6:9a:18:b7:c0:6c:ee:df:d5:a7:2b:57:96:
                    12:c0:52:e0:2e:58:04:1d:20:dc:aa:0f:33:f8:4f:
                    c9:4f:cd:23:64:87:d5:13:d4:7c:56:13:13:6f:5f:
                    05:c1:70:c0:d5:3d:25:48:d6:ba:10:c2:31:56:7c:
                    a0:9f:70:62:fc:1a:a4:b7:66:78:cb:c8:ec:53:83:
                    3c:d4:f5:26:c0:0b:a0:fe:04:6b:ab:ad:36:3f:af:
                    f0:14:20:37:f3:9f:29:51:a5:1e:de:fa:aa:ec:7a:
                    be:c8:ea:06:df:43:8e:69:a6:79:16:de:d3:49:66:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.120.0/24
                IPv6:
                  2607:9040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396967

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:96:ff:ff:16:6d:33:23:19:8f:50:08:6a:09:99:b7:2c:
         17:d0:6b:1d:3d:f7:b7:4b:41:9f:95:23:3c:22:8a:a0:71:53:
         28:a3:28:66:dc:bf:17:88:fd:6f:4d:8e:f6:80:47:ce:1c:39:
         ec:32:57:8c:9c:30:1b:f5:a1:98:e5:7a:37:e5:f9:6b:7c:a4:
         91:3b:84:78:b2:49:69:d8:23:77:6c:37:88:ad:c5:68:cc:6b:
         10:05:44:ca:8e:ba:bf:2d:df:f9:09:25:26:67:a5:29:ea:b4:
         f7:c1:55:82:8d:c5:1e:73:51:ad:1b:bf:a0:f5:ec:45:ed:15:
         9e:0e:69:0d:94:25:8d:ea:58:3a:11:c9:1c:8c:99:a6:1a:71:
         34:f2:ca:3d:bf:64:9e:4d:4a:ac:70:03:1c:bd:ea:7b:f6:60:
         a8:53:fb:f3:7a:4c:6e:70:7c:bc:e7:a4:5c:31:26:45:86:e0:
         fb:4f:b4:7d:f0:8a:7d:c2:f0:49:c3:05:c3:b9:95:e1:95:4c:
         ee:fe:62:80:d8:0d:fb:16:48:41:4a:87:e8:7e:84:7c:7f:48:
         e8:07:35:6b:e3:10:83:47:20:ce:ec:a0:9e:f5:d6:0c:1a:08:
         57:38:b4:3c:36:2d:40:36:d7:1f:48:31:5e:6a:e8:6b:2d:7e:
         60:9f:1e:b9
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEfEvXNO4xvqjzI2PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTEwNDE0NDAwNloXDTI3MDIwNzE0NDAwNlowLzEtMCsGA1UEAxMk
YWVjNjExNDQtOGRiYS00MDk2LWE2Y2ItMTFkMWQyODlmZjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NFZ6O/Or/SoYGmpAKANuSZMOEYAWwTxK9AH
eSI2902dWx7NEp7xFS1Sm0ZnXIPwQ4dq0JdbB7H3tzUYnUG2sEkmEHcXjewekBvH
v15MMlaiF84jvE8XWF512kb99vXh6cokmZFwJ5yUrkYKTkZc4NUaMlPzXpJDxkIi
gsMPaQ8MD69TNrGDk7aaGLfAbO7f1acrV5YSwFLgLlgEHSDcqg8z+E/JT80jZIfV
E9R8VhMTb18FwXDA1T0lSNa6EMIxVnygn3Bi/Bqkt2Z4y8jsU4M81PUmwAug/gRr
q602P6/wFCA3858pUaUe3vqq7Hq+yOoG30OOaaZ5Ft7TSWbETQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFDF+ZZ4NY28XvhaafnvNkPp1DEN2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h
ZWM2MTE0NC04ZGJhLTQwOTYtYTZjYi0xMWQxZDI4OWZmMGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FlYzYxMTQ0LThkYmEtNDA5Ni1h
NmNiLTExZDFkMjg5ZmYwZi9hZWM2MTE0NC04ZGJhLTQwOTYtYTZjYi0xMWQxZDI4
OWZmMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXq3gwDQQCAAIwBwMFACYHkEAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBg6nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABi9lv//Fm0zIxmPUAhqCZm3LBfQ
ax0997dLQZ+VIzwiiqBxUyijKGbcvxeI/W9NjvaAR84cOewyV4ycMBv1oZjlejfl
+Wt8pJE7hHiySWnYI3dsN4itxWjMaxAFRMqOur8t3/kJJSZnpSnqtPfBVYKNxR5z
Ua0bv6D17EXtFZ4OaQ2UJY3qWDoRyRyMmaYacTTyyj2/ZJ5NSqxwAxy96nv2YKhT
+/N6TG5wfLznpFwxJkWG4PtPtH3win3C8EnDBcO5leGVTO7+YoDYDfsWSEFKh+h+
hHx/SOgHNWvjEINHIM7soJ711gwaCFc4tDw2LUA21x9IMV5q6GstfmCfHrk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:29 2024 by rpki-client on console-fra.rpki-client.org