Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer
File:                     f97b644e-a01f-43c5-83e0-146254941d5f.cer (raw, json)
Hash identifier:          jyBg40Eug9l8AF27lI/mnQPsRFapr/5x6WCkaJQRYvo=
Subject key identifier:   6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847E3F5711CB8508E90B25B8C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Nov 2024 19:02:59 +0000
Certificate not after:    Thu 18 Feb 2027 19:02:59 +0000
Subordinate resources:    AS: 36290
                          IP: 199.21.164.0/22
                          IP: 204.16.8.0/22
                          IP: 204.19.200.0/22
                          IP: 208.70.92.0/22
                          IP: 208.81.160.0/22
                          IP: 208.87.144.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:f5:71:1c:b8:50:8e:90:b2:5b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 15 19:02:59 2024 GMT
            Not After : Feb 18 19:02:59 2027 GMT
        Subject: CN=f97b644e-a01f-43c5-83e0-146254941d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:fb:a5:53:be:33:87:17:a2:63:28:1c:2b:
                    22:7c:c1:bd:14:ed:84:81:79:7d:42:d0:66:e6:ae:
                    3d:41:a9:42:30:83:60:bd:7f:c4:ce:00:56:7f:34:
                    75:52:9e:a1:02:f5:c4:da:ed:80:28:d2:70:6b:e3:
                    de:b0:97:44:d1:ba:44:8d:a7:d4:7f:d3:d6:6e:f5:
                    df:68:ee:d3:4d:df:a4:d4:b3:4f:fa:65:7a:1d:f1:
                    e6:b2:3d:4f:01:8f:c3:4a:93:df:5c:35:f2:b7:c6:
                    01:36:ca:81:14:31:75:23:86:9c:97:e3:7d:03:fc:
                    85:e2:f9:24:42:d4:00:70:a5:a4:76:da:eb:09:35:
                    91:6e:e9:36:64:54:98:d2:64:b2:71:8c:60:73:d5:
                    0b:79:65:2b:f8:79:01:15:5d:d6:27:55:86:c1:f9:
                    9e:c0:88:a1:bb:a6:44:95:83:fd:f5:cf:16:cd:dc:
                    40:7b:8b:84:30:78:15:19:d4:1c:cc:51:15:89:27:
                    fa:ec:a8:ee:48:95:c0:bf:40:ae:56:38:bd:2a:95:
                    94:c4:4b:77:d9:36:54:4c:6b:eb:cb:65:ee:2b:22:
                    cb:70:6c:89:42:87:66:d6:e2:8f:20:26:e8:d7:0c:
                    5f:e8:54:d6:76:a9:74:0f:aa:dd:b1:86:a4:92:71:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.164.0/22
                  204.16.8.0/22
                  204.19.200.0/22
                  208.70.92.0/22
                  208.81.160.0/22
                  208.87.144.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36290

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:11:6e:70:3e:15:b9:a1:e4:6d:42:89:78:ce:3b:4e:bc:bc:
         25:3c:00:45:c7:11:5a:f0:a7:4f:6a:57:9b:6b:03:28:07:7f:
         c8:80:6a:f6:8a:63:72:3d:d3:92:25:00:2b:15:e1:4a:b7:47:
         b6:2a:de:5b:79:39:80:32:13:bf:a8:35:20:1b:9d:6c:b2:0d:
         38:87:35:4d:61:0a:80:46:46:43:05:4d:cd:85:e1:5d:1c:28:
         ff:14:4c:53:8c:26:30:a6:09:ae:0d:fc:1d:22:08:70:fa:59:
         50:7c:cb:c2:49:eb:b7:e4:b7:b0:c4:3a:37:02:c7:2d:29:e2:
         e4:c7:c9:94:5c:94:89:fd:78:6b:6c:e5:5e:6a:ca:f6:67:fa:
         c5:44:08:26:36:f1:01:cc:c9:64:f0:11:b4:b6:fb:78:ba:1a:
         b4:db:9b:59:56:41:13:32:10:7a:a2:0d:49:06:2e:03:be:56:
         fa:23:3d:19:ad:d7:e5:8d:8a:0e:3d:09:45:e4:70:db:f0:51:
         f8:e4:44:7b:6c:93:0b:2b:aa:ad:5a:d4:dc:95:52:bc:20:c0:
         a3:6a:5b:66:9e:81:cf:43:6b:3e:bb:56:ff:e4:4c:24:6f:d4:
         00:a6:f5:74:e4:c3:ec:bb:bf:c3:d3:35:89:c9:96:94:3f:bd:
         db:b8:ed:20
-----BEGIN CERTIFICATE-----
MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEfj9XEcuFCOkLJbjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTExNTE5MDI1OVoXDTI3MDIxODE5MDI1OVowLzEtMCsGA1UEAxMk
Zjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQxZDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eL7pVO+M4cXomMoHCsifMG9FO2EgXl9QtBm
5q49QalCMINgvX/EzgBWfzR1Up6hAvXE2u2AKNJwa+PesJdE0bpEjafUf9PWbvXf
aO7TTd+k1LNP+mV6HfHmsj1PAY/DSpPfXDXyt8YBNsqBFDF1I4acl+N9A/yF4vkk
QtQAcKWkdtrrCTWRbuk2ZFSY0mSycYxgc9ULeWUr+HkBFV3WJ1WGwfmewIihu6ZE
lYP99c8WzdxAe4uEMHgVGdQczFEViSf67KjuSJXAv0CuVji9KpWUxEt32TZUTGvr
y2XuKyLLcGyJQodm1uKPICbo1wxf6FTWdql0D6rdsYakknHR6wIDAQABo4IEOTCC
BDUwHQYDVR0OBBYEFGuH1T2u+9bQnSxiKdGYXHjjELbpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9m
OTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Y5N2I2NDRlLWEwMWYtNDNjNS04
M2UwLTE0NjI1NDk0MWQ1Zi9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5
NDFkNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwPQYIKwYBBQUH
AQcBAf8ELjAsMCoEAgABMCQDBALHFaQDBALMEAgDBALME8gDBALQRlwDBALQUaAD
BALQV5AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAI3CMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC0RbnA+
Fbmh5G1CiXjOO068vCU8AEXHEVrwp09qV5trAygHf8iAavaKY3I905IlACsV4Uq3
R7Yq3lt5OYAyE7+oNSAbnWyyDTiHNU1hCoBGRkMFTc2F4V0cKP8UTFOMJjCmCa4N
/B0iCHD6WVB8y8JJ67fkt7DEOjcCxy0p4uTHyZRclIn9eGts5V5qyvZn+sVECCY2
8QHMyWTwEbS2+3i6GrTbm1lWQRMyEHqiDUkGLgO+VvojPRmt1+WNig49CUXkcNvw
UfjkRHtskwsrqq1a1NyVUrwgwKNqW2aegc9Daz67Vv/kTCRv1ACm9XTkw+y7v8PT
NYnJlpQ/vdu47SA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:33 2024 by rpki-client on console-fra.rpki-client.org