Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
File:                     87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer (raw, json)
Hash identifier:          xBpL3chfcSt/+08sm9VNd4NR8qYHBNW3VOAuQeYUzsw=
Subject key identifier:   BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858469000D143A30237DEE17D5FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jul 2024 00:31:04 +0000
Certificate not after:    Tue 20 Oct 2026 00:31:04 +0000
Subordinate resources:    AS: 11
                          AS: 1742
                          AS: 10578
                          IP: 128.103.0.0/16
                          IP: 140.247.0.0/16
                          IP: 192.5.66.0/24
                          IP: 192.5.89.0/24
                          IP: 192.43.216.0/24
                          IP: 192.54.223.0/24
                          IP: 192.131.102.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Oct 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:90:00:d1:43:a3:02:37:de:e1:7d:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 17 00:31:04 2024 GMT
            Not After : Oct 20 00:31:04 2026 GMT
        Subject: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:c6:17:4b:bb:7b:8b:e9:b5:a8:c4:8a:30:
                    74:99:04:e3:56:31:ae:58:c8:2b:38:98:0e:51:2f:
                    78:ac:2b:e1:ea:06:dc:8b:82:6c:0a:00:88:d1:31:
                    22:a1:a8:0a:b6:fd:2e:95:fe:a3:71:55:03:45:d7:
                    a2:0e:55:07:d3:be:a9:97:a0:05:5a:e8:69:49:c8:
                    54:0d:bb:eb:e6:b6:96:44:71:be:4c:29:1f:8f:ab:
                    1e:b4:67:5f:50:74:f0:f9:db:d1:92:89:38:28:c5:
                    d3:7e:3f:0b:02:b5:15:2f:be:03:22:42:2b:1d:3f:
                    09:87:e1:85:92:74:5c:a4:14:82:7e:99:43:35:25:
                    a2:61:8e:78:f0:9c:3d:b6:98:da:49:3e:2e:cd:ac:
                    e2:7e:29:54:51:42:4e:5a:1a:36:1d:4a:ed:b0:03:
                    ab:9d:81:d2:c3:df:76:0f:d8:d1:8f:db:33:a4:b1:
                    9b:3f:a3:89:43:eb:8f:bd:50:e6:25:7e:80:c1:3f:
                    6f:af:3c:43:94:a2:bf:6d:5a:62:81:4a:ad:f4:10:
                    d6:16:81:33:0f:29:32:fd:f9:6b:cb:76:04:9d:ba:
                    e1:3a:0e:16:4a:3a:6e:ca:9f:98:8e:54:0d:b1:22:
                    e2:d3:c6:a5:99:87:35:7a:d4:c8:59:02:4d:c3:62:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.0.0/16
                  140.247.0.0/16
                  192.5.66.0/24
                  192.5.89.0/24
                  192.43.216.0/24
                  192.54.223.0/24
                  192.131.102.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11
                  1742
                  10578

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9b:9d:a8:93:b5:27:f9:a4:93:1e:f0:b9:ca:2f:14:fe:71:
         48:87:73:7f:98:93:a6:74:80:50:c0:67:91:cb:4c:e7:48:ff:
         d3:53:51:38:67:38:9b:20:db:18:4e:32:63:61:86:4f:c6:6c:
         29:e5:a4:ff:49:8d:88:e3:28:d9:59:ec:51:8f:b3:1e:b3:4e:
         b6:2d:f3:fc:fa:da:86:d2:b3:24:03:cb:8c:ef:8d:b2:a3:07:
         a4:53:f6:e3:4a:3d:99:c4:69:8e:b1:47:b7:ac:d5:d1:9f:34:
         88:57:f2:cb:76:8e:da:19:6c:d2:8d:2a:86:eb:01:e8:45:4f:
         dd:fe:a0:2c:54:c6:13:d4:55:5f:54:5e:4f:1b:0f:b6:8f:30:
         ac:e3:6e:0d:2b:53:36:bb:69:a4:cc:e2:8a:2f:f3:5b:2d:7b:
         29:a7:85:70:90:d3:de:99:84:b3:d4:9c:7d:af:e0:03:eb:65:
         73:21:ec:41:1f:2d:f6:25:bb:49:28:33:7e:5e:0e:65:d9:0a:
         d6:ca:f3:63:b9:ba:ed:3f:48:b3:cc:fe:14:bb:cc:2a:b0:4d:
         bf:d5:44:7c:a5:4d:a0:4a:58:f7:70:92:fb:a1:62:58:6e:4c:
         62:8f:bd:29:fe:7d:f1:9d:aa:f3:29:80:ec:f8:41:8d:a4:21:
         5e:f7:3c:06
-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEaQANFDowI33uF9X8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcxNzAwMzEwNFoXDTI2MTAyMDAwMzEwNFowLzEtMCsGA1UEAxMk
ODc0MTdmZTYtMTc5MC00ODFhLTliZGMtNjU3NGMwZWY3ZDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQbGF0u7e4vptajEijB0mQTjVjGuWMgrOJgO
US94rCvh6gbci4JsCgCI0TEioagKtv0ulf6jcVUDRdeiDlUH076pl6AFWuhpSchU
Dbvr5raWRHG+TCkfj6setGdfUHTw+dvRkok4KMXTfj8LArUVL74DIkIrHT8Jh+GF
knRcpBSCfplDNSWiYY548Jw9tpjaST4uzazifilUUUJOWho2HUrtsAOrnYHSw992
D9jRj9szpLGbP6OJQ+uPvVDmJX6AwT9vrzxDlKK/bVpigUqt9BDWFoEzDyky/flr
y3YEnbrhOg4WSjpuyp+YjlQNsSLi08almYc1etTIWQJNw2IrBQIDAQABo4IEQzCC
BD8wHQYDVR0OBBYEFLq3DwLemnFypPDpQBOvAA7Ymlz9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84
NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBlZjdkN2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg3NDE3ZmU2LTE3OTAtNDgxYS05
YmRjLTY1NzRjMGVmN2Q3Yy84NzQxN2ZlNi0xNzkwLTQ4MWEtOWJkYy02NTc0YzBl
ZjdkN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwQQYIKwYBBQUH
AQcBAf8EMjAwMC4EAgABMCgDAwCAZwMDAIz3AwQAwAVCAwQAwAVZAwQAwCvYAwQA
wDbfAwQAwINmMCAGCCsGAQUFBwEIAQH/BBEwD6ANMAsCAQsCAgbOAgIpUjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQA4m52ok7Un+aSTHvC5yi8U/nFIh3N/mJOmdIBQwGeRy0znSP/TU1E4Zzib
INsYTjJjYYZPxmwp5aT/SY2I4yjZWexRj7Mes062LfP8+tqG0rMkA8uM742yowek
U/bjSj2ZxGmOsUe3rNXRnzSIV/LLdo7aGWzSjSqG6wHoRU/d/qAsVMYT1FVfVF5P
Gw+2jzCs424NK1M2u2mkzOKKL/NbLXspp4VwkNPemYSz1Jx9r+AD62VzIexBHy32
JbtJKDN+Xg5l2QrWyvNjubrtP0izzP4Uu8wqsE2/1UR8pU2gSlj3cJL7oWJYbkxi
j70p/n3xnarzKYDs+EGNpCFe9zwG
-----END CERTIFICATE-----
Generated at Fri Oct 25 17:06:55 2024 by rpki-client on console-fra.rpki-client.org