Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e.cer
File:                     31ca4c15-e2f8-453a-aff9-954e3ccbaf9e.cer (raw, json)
Hash identifier:          ++Dn9fANc79P64wPMRedvC5U/KiBit6fv47ICLUAsf4=
Subject key identifier:   B6:BC:12:08:7B:DB:86:74:8F:F1:AF:A2:77:0C:D2:CA:A3:7A:04:DA
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584668F252401AB0CF197B7FDA60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 03 Jul 2024 00:45:19 +0000
Certificate not after:    Tue 06 Oct 2026 00:45:19 +0000
Subordinate resources:    IP: 23.142.176.0/24
                          IP: 136.175.192.0/22
                          IP: 2605:66c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:68:f2:52:40:1a:b0:cf:19:7b:7f:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul  3 00:45:19 2024 GMT
            Not After : Oct  6 00:45:19 2026 GMT
        Subject: CN=31ca4c15-e2f8-453a-aff9-954e3ccbaf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:06:3d:75:34:44:84:4b:64:ae:02:c0:1a:
                    e0:5b:aa:94:4b:44:16:5a:21:fa:0b:22:bf:68:2f:
                    15:f1:64:94:95:74:7b:32:a3:1b:70:38:8b:1d:1a:
                    ab:9b:ed:6f:34:fe:e1:98:ce:e9:6d:01:cd:ad:0a:
                    52:e5:e2:ce:70:d2:e6:cd:4e:43:1b:96:12:51:5d:
                    ff:90:7a:08:74:94:07:f4:4a:df:c4:1e:5e:c9:46:
                    51:cf:57:e0:9e:df:2c:90:4d:5e:f1:06:48:1a:8b:
                    73:55:09:10:5f:5f:a8:df:c3:6b:88:66:c4:f1:29:
                    62:31:1c:c7:7c:c9:19:c8:85:4f:38:68:52:0e:89:
                    67:d7:a0:73:2b:9c:a7:30:72:47:1a:0b:4f:6c:3d:
                    07:58:3a:e7:dc:27:5a:4e:09:97:d0:2e:0a:1d:83:
                    d3:2d:ff:45:7a:34:7a:d0:43:ca:51:37:67:cd:a3:
                    be:9d:20:1c:57:51:66:46:e8:d4:19:eb:ff:33:9e:
                    73:ee:26:dc:c4:a9:9c:d3:f2:62:7d:e0:65:d5:ee:
                    98:0a:b1:0d:ec:86:5f:3e:bc:40:d6:bc:34:17:e4:
                    cf:68:5f:9a:e9:10:3c:81:5c:7b:7b:e9:b9:c6:8b:
                    09:9b:b5:7d:9b:e3:19:9e:c1:f1:43:13:88:b2:5a:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:12:08:7B:DB:86:74:8F:F1:AF:A2:77:0C:D2:CA:A3:7A:04:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e/31ca4c15-e2f8-453a-aff9-954e3ccbaf9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.176.0/24
                  136.175.192.0/22
                IPv6:
                  2605:66c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:e5:d7:7a:19:0b:7e:45:5d:1e:08:b2:96:ff:59:8b:4c:
         9b:ad:fa:5a:b6:03:4f:0b:05:75:df:14:e5:76:3c:4a:fc:20:
         18:78:cb:d0:47:d2:f8:ed:ec:c3:e8:e9:5a:f7:4c:45:d8:11:
         fd:05:99:61:3d:ed:6c:c8:85:70:16:ef:7e:ed:a0:79:a8:d5:
         ca:54:a9:82:42:96:21:c6:cd:8c:e0:a9:6b:c2:26:7a:19:fc:
         37:8f:9d:af:ef:ce:6f:f3:14:8b:69:1b:4f:40:a6:78:50:8c:
         93:6f:4b:2b:2a:8c:72:0c:44:22:8d:f0:73:d3:7b:b0:67:3a:
         d9:e5:5f:5e:09:8c:71:95:41:30:11:4d:7a:ef:32:87:96:19:
         ca:51:1f:86:e8:3a:70:fa:c4:f8:ad:93:af:3c:86:5d:61:59:
         87:bd:f0:52:6d:44:3e:10:99:ae:20:68:90:30:4a:34:2d:c8:
         21:e5:55:74:18:ac:25:8d:d8:1d:1f:76:14:d0:ff:36:14:df:
         30:af:99:10:5b:c2:c3:2a:ea:cb:54:f7:0d:9b:27:cf:97:f8:
         6c:51:42:f7:57:0a:34:06:ea:f8:b2:12:d8:86:8c:6e:c5:52:
         67:9b:42:4e:95:96:c4:0f:61:09:6c:07:a5:cc:ee:38:ca:cc:
         6e:aa:30:05
-----BEGIN CERTIFICATE-----
MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEZo8lJAGrDPGXt/2mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDcwMzAwNDUxOVoXDTI2MTAwNjAwNDUxOVowLzEtMCsGA1UEAxMk
MzFjYTRjMTUtZTJmOC00NTNhLWFmZjktOTU0ZTNjY2JhZjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowUGPXU0RIRLZK4CwBrgW6qUS0QWWiH6CyK/
aC8V8WSUlXR7MqMbcDiLHRqrm+1vNP7hmM7pbQHNrQpS5eLOcNLmzU5DG5YSUV3/
kHoIdJQH9ErfxB5eyUZRz1fgnt8skE1e8QZIGotzVQkQX1+o38NriGbE8SliMRzH
fMkZyIVPOGhSDoln16BzK5ynMHJHGgtPbD0HWDrn3CdaTgmX0C4KHYPTLf9FejR6
0EPKUTdnzaO+nSAcV1FmRujUGev/M55z7ibcxKmc0/JifeBl1e6YCrEN7IZfPrxA
1rw0F+TPaF+a6RA8gVx7e+m5xosJm7V9m+MZnsHxQxOIslq7NwIDAQABo4IEFDCC
BBAwHQYDVR0OBBYEFLa8Egh724Z0j/GvoncM0sqjegTaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8z
MWNhNGMxNS1lMmY4LTQ1M2EtYWZmOS05NTRlM2NjYmFmOWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzMxY2E0YzE1LWUyZjgtNDUzYS1h
ZmY5LTk1NGUzY2NiYWY5ZS8zMWNhNGMxNS1lMmY4LTQ1M2EtYWZmOS05NTRlM2Nj
YmFmOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAAXjrADBAKIr8AwDQQCAAIwBwMFACYFZsAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPRfl13oZC35FXR4Ispb/WYtMm636WrYDTwsFdd8U5XY8SvwgGHjL0EfS
+O3sw+jpWvdMRdgR/QWZYT3tbMiFcBbvfu2geajVylSpgkKWIcbNjOCpa8Imehn8
N4+dr+/Ob/MUi2kbT0CmeFCMk29LKyqMcgxEIo3wc9N7sGc62eVfXgmMcZVBMBFN
eu8yh5YZylEfhug6cPrE+K2TrzyGXWFZh73wUm1EPhCZriBokDBKNC3IIeVVdBis
JY3YHR92FND/NhTfMK+ZEFvCwyrqy1T3DZsnz5f4bFFC91cKNAbq+LIS2IaMbsVS
Z5tCTpWWxA9hCWwHpczuOMrMbqowBQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 16:26:36 2024 by rpki-client on console-ams.rpki-client.org