Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f.cer
File:                     c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f.cer (raw, json)
Hash identifier:          wek6f36n1xQbydDZMATboEJPxI3PcPiHVyOqrPd+KIs=
Subject key identifier:   60:C6:FD:62:49:EA:87:A5:38:43:36:34:46:A0:04:3D:55:A2:FD:27
Authority key identifier: 53:C3:DD:F8:47:89:4D:D8:85:34:85:0D:A4:2B:41:BB:4D:3B:D1:76
Certificate issuer:       /CN=57c17bd2-6e1f-4d80-b76e-8c7ae850878e
Certificate serial:       010D0C9F43285847B72FE265C32308736037CD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/60C6FD6249EA87A53843363446A0043D55A2FD27.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 30 Oct 2024 16:14:58 +0000
Certificate not after:    Tue 02 Feb 2027 17:14:58 +0000
Subordinate resources:    IP: 2620:10:6000::/48
                          IP: 2620:63:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:2f:e2:65:c3:23:08:73:60:37:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c17bd2-6e1f-4d80-b76e-8c7ae850878e
        Validity
            Not Before: Oct 30 16:14:58 2024 GMT
            Not After : Feb  2 17:14:58 2027 GMT
        Subject: CN=c09ad5c4404490e24ad0ec400d6fd4ed69296e55cb53f6684f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:37:64:50:53:19:16:e2:ee:99:5d:ca:d7:
                    ff:60:31:62:11:2f:49:ad:fd:e0:82:ea:ef:cc:14:
                    02:42:6f:17:4b:a1:42:ec:e3:69:10:1c:86:70:d9:
                    60:a6:cd:6d:d8:64:27:32:19:0a:2a:ca:14:14:d3:
                    f6:69:58:7f:59:9e:5a:0b:4c:e5:34:98:a7:93:c6:
                    ef:85:d5:2b:0b:af:5d:f1:b3:92:3b:3b:75:74:40:
                    07:48:29:14:6c:9c:60:59:5d:57:30:4b:bb:55:69:
                    60:9a:31:ef:13:3b:0d:bf:f3:81:3e:9f:1b:39:8c:
                    fc:33:d2:eb:98:f5:b3:ec:d8:31:0f:67:12:f2:c9:
                    b9:a2:a0:0d:a2:46:c2:6e:49:94:a5:1f:f6:48:64:
                    4f:d7:d4:01:19:c4:07:c3:ae:71:71:c7:c0:c1:be:
                    69:36:66:39:0e:f8:04:bd:57:10:eb:58:77:fd:78:
                    ed:ee:ff:95:17:a4:2c:b1:50:b1:da:09:cb:b2:a3:
                    8e:46:b3:b5:7a:f7:39:cd:bf:16:e7:d3:e5:60:6c:
                    ee:98:52:48:11:47:b5:7a:19:09:67:93:7e:3e:e5:
                    55:10:86:5e:a1:87:2c:75:eb:59:46:10:eb:8c:9e:
                    4f:8c:f7:17:01:f1:53:b3:23:3b:21:66:21:ea:10:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C6:FD:62:49:EA:87:A5:38:43:36:34:46:A0:04:3D:55:A2:FD:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/1/60C6FD6249EA87A53843363446A0043D55A2FD27.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:DD:F8:47:89:4D:D8:85:34:85:0D:A4:2B:41:BB:4D:3B:D1:76

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/57c17bd2-6e1f-4d80-b76e-8c7ae850878e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48
                  2620:63:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:6d:dd:c9:df:f7:f4:2c:f2:ef:e2:c5:ca:9c:fd:9a:33:
         4e:5c:0c:6a:e3:ff:31:f8:20:6d:8f:c1:9f:5a:4e:67:96:50:
         a3:3e:b4:28:09:73:98:97:ae:3d:f6:3f:b3:73:26:a4:f1:76:
         f9:a6:d2:31:4b:67:fa:03:43:4d:9d:8f:98:b9:79:5a:c5:2a:
         0d:d7:37:7c:cf:71:0e:19:82:08:1b:45:c6:24:01:bd:12:7d:
         5d:36:80:74:aa:52:c3:61:8f:d6:55:de:eb:d8:09:e4:7e:4e:
         ab:ca:d3:ac:a0:25:e7:ce:f9:6f:42:35:3b:b7:43:61:5b:df:
         fb:14:f5:91:92:dd:48:4e:1d:b9:25:8b:2a:b2:a9:04:0f:da:
         eb:a8:98:f6:d9:cc:35:6c:6d:b4:d9:b1:f5:39:07:ae:50:ed:
         0b:4b:d8:41:47:19:76:2f:ab:5d:3e:ed:19:5b:0e:41:4b:b1:
         24:e9:42:2e:3f:8e:d9:8f:63:8a:6a:c0:1d:b5:f7:7a:f2:9d:
         41:3a:34:a7:38:33:c4:d7:60:40:e2:f7:72:89:58:e1:f9:a7:
         a9:0f:6e:98:46:6a:ce:db:c4:1b:8b:f1:91:27:e0:e2:62:3f:
         5a:2f:69:57:ff:c2:bc:52:90:e0:38:23:8f:71:70:c4:b9:84:
         64:61:34:ea
-----BEGIN CERTIFICATE-----
MIIGrTCCBZWgAwIBAgIUAQ0Mn0MoWEe3L+JlwyMIc2A3zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTdjMTdiZDItNmUxZi00ZDgwLWI3NmUtOGM3YWU4NTA4
NzhlMB4XDTI0MTAzMDE2MTQ1OFoXDTI3MDIwMjE3MTQ1OFowPTE7MDkGA1UEAxMy
YzA5YWQ1YzQ0MDQ0OTBlMjRhZDBlYzQwMGQ2ZmQ0ZWQ2OTI5NmU1NWNiNTNmNjY4
NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIDdkUFMZFuLumV3K
1/9gMWIRL0mt/eCC6u/MFAJCbxdLoULs42kQHIZw2WCmzW3YZCcyGQoqyhQU0/Zp
WH9ZnloLTOU0mKeTxu+F1SsLr13xs5I7O3V0QAdIKRRsnGBZXVcwS7tVaWCaMe8T
Ow2/84E+nxs5jPwz0uuY9bPs2DEPZxLyybmioA2iRsJuSZSlH/ZIZE/X1AEZxAfD
rnFxx8DBvmk2ZjkO+AS9VxDrWHf9eO3u/5UXpCyxULHaCcuyo45Gs7V69znNvxbn
0+VgbO6YUkgRR7V6GQlnk34+5VUQhl6hhyx161lGEOuMnk+M9xcB8VOzIzshZiHq
EK1VAgMBAAGjggOxMIIDrTAdBgNVHQ4EFgQUYMb9Yknqh6U4QzY0RqAEPVWi/Scw
ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MGM2NDdhYzAxOTExNGIz
YmFkNzU2ZjEvMS8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MGM2NDdhYzAxOTExNGIzYmFkNzU2ZjEv
MS82MEM2RkQ2MjQ5RUE4N0E1Mzg0MzM2MzQ0NkEwMDQzRDU1QTJGRDI3Lm1mdDA2
BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp
b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm
MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzU3YzE3YmQyLTZlMWYtNGQ4MC1iNzZl
LThjN2FlODUwODc4ZS81N2MxN2JkMi02ZTFmLTRkODAtYjc2ZS04YzdhZTg1MDg3
OGUuY3JsMB8GA1UdIwQYMBaAFFPD3fhHiU3YhTSFDaQrQbtNO9F2MA4GA1UdDwEB
/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1iOWYwLTQ1MjMt
YjM5ZS1hM2M3ZGFiOTdjMjUvNTdjMTdiZDItNmUxZi00ZDgwLWI3NmUtOGM3YWU4
NTA4NzhlLmNlcjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACYgABBgAAMH
ACYgAGOgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQA0/23dyd/39Czy7+LFypz9mjNOXAxq4/8x+CBtj8Gf
Wk5nllCjPrQoCXOYl6499j+zcyak8Xb5ptIxS2f6A0NNnY+YuXlaxSoN1zd8z3EO
GYIIG0XGJAG9En1dNoB0qlLDYY/WVd7r2Ankfk6rytOsoCXnzvlvQjU7t0NhW9/7
FPWRkt1ITh25JYsqsqkED9rrqJj22cw1bG202bH1OQeuUO0LS9hBRxl2L6tdPu0Z
Ww5BS7Ek6UIuP47Zj2OKasAdtfd68p1BOjSnODPE12BA4vdyiVjh+aepD26YRmrO
28Qbi/GRJ+DiYj9aL2lX/8K8UpDgOCOPcXDEuYRkYTTq
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org