Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer
File:                     d2acdbd8-f1ce-4bef-aafd-16a56d585345.cer (raw, json)
Hash identifier:          FreWn7eFwtfJJIMrIF/+3O29hG5fBYKosM1CjKzIcQM=
Subject key identifier:   AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858446A91A9DB0B0DC62565B95580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jan 2024 05:08:19 +0000
Certificate not after:    Mon 06 Apr 2026 04:08:19 +0000
Subordinate resources:    AS: 11289
                          AS: 13723
                          AS: 22332
                          AS: 33045
                          IP: 129.253.0.0/16
                          IP: 199.255.44.0/22
                          IP: 2620:ff::/48
                          IP: 2620:12a:7000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6a:91:a9:db:0b:0d:c6:25:65:b9:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  2 05:08:19 2024 GMT
            Not After : Apr  6 04:08:19 2026 GMT
        Subject: CN=d2acdbd8-f1ce-4bef-aafd-16a56d585345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:fa:77:05:69:40:b3:aa:83:99:9d:e2:71:
                    44:b3:3b:d6:22:c4:b2:47:41:48:0c:ec:60:ff:8b:
                    63:3f:f6:ad:3e:e5:90:81:9c:86:61:b0:59:c7:ff:
                    b6:9e:49:66:c1:db:f0:42:5d:28:87:e5:94:5a:76:
                    35:68:fa:0a:3c:9d:8f:0f:6d:74:c3:69:68:52:d9:
                    df:22:60:04:af:85:ff:05:4b:6f:64:ef:1d:c6:0c:
                    56:36:1e:a6:dc:ad:20:3d:e7:64:31:d4:e7:a5:0a:
                    3b:b7:2f:31:38:a9:2f:ea:38:7c:19:39:ca:75:af:
                    e4:d7:3a:8a:62:09:fa:66:f1:b6:c2:18:f4:40:3c:
                    33:07:d4:68:58:bf:b2:a7:0f:d5:47:37:50:29:d0:
                    da:fb:7f:d4:77:2f:23:e2:ef:c4:8d:7f:77:71:15:
                    6a:d2:d7:ab:76:4a:30:c8:8e:78:c2:bb:ed:0e:b1:
                    25:a0:19:d0:55:6d:3a:2d:55:f9:38:1c:e2:e4:3f:
                    a2:65:8e:e0:d7:89:bb:7c:61:34:44:b0:e0:81:9b:
                    e8:7d:43:75:81:87:19:2f:3c:55:ea:86:9a:3a:6c:
                    2b:3c:0a:d5:e8:79:ae:f9:e2:99:0f:56:f2:f2:d0:
                    a5:ba:5d:81:43:f1:da:06:53:23:f0:de:09:9b:72:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:0F:8D:37:C2:14:D1:71:06:1A:D3:44:20:48:D7:F7:6B:5D:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d2acdbd8-f1ce-4bef-aafd-16a56d585345/d2acdbd8-f1ce-4bef-aafd-16a56d585345.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.253.0.0/16
                  199.255.44.0/22
                IPv6:
                  2620:ff::/48
                  2620:12a:7000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11289
                  13723
                  22332
                  33045

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:78:dc:de:34:49:e2:82:23:47:2a:80:48:32:22:f6:ec:
         bb:32:3d:06:f0:5e:e4:94:da:2f:5c:75:af:4a:c5:43:ea:cf:
         c6:77:2c:0f:2d:d0:95:53:fe:01:d2:e9:0d:30:da:5f:b3:34:
         1b:35:80:63:09:f9:61:97:07:df:e4:9f:25:d7:01:f2:30:ba:
         39:fe:d9:81:ea:46:6b:29:93:da:0e:65:29:bf:54:1c:b6:41:
         02:94:b4:cd:eb:59:8e:d0:cf:5b:e7:ea:13:ed:9d:c7:2d:df:
         b4:be:0b:9a:ad:b7:2e:1b:03:52:fe:9c:ba:6a:04:d6:7b:b6:
         5a:da:77:7c:d1:ed:5e:4a:a9:b1:23:12:06:cd:3d:ca:0f:02:
         e1:bc:c7:4b:c6:70:c1:4c:89:9f:55:35:27:85:0d:73:b4:fb:
         ae:e9:81:cc:f8:4b:53:8f:bf:23:f5:33:0f:dd:07:8a:70:bd:
         70:50:3a:31:77:ad:b3:5b:30:0e:f0:46:8e:9a:70:37:62:bc:
         45:81:88:ac:0b:e7:bd:95:86:61:f0:ca:12:b8:37:b3:3e:62:
         0c:b0:d9:34:75:0c:ca:03:59:7c:89:7d:bc:3a:3c:1a:ff:24:
         fc:3a:fa:2d:62:f5:86:8b:80:15:9e:41:af:6a:a1:71:81:e5:
         6d:89:cb:98
-----BEGIN CERTIFICATE-----
MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWERqkanbCw3GJWW5VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI0MDEwMjA1MDgxOVoXDTI2MDQwNjA0MDgxOVowLzEtMCsGA1UEAxMk
ZDJhY2RiZDgtZjFjZS00YmVmLWFhZmQtMTZhNTZkNTg1MzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFj6dwVpQLOqg5md4nFEszvWIsSyR0FIDOxg
/4tjP/atPuWQgZyGYbBZx/+2nklmwdvwQl0oh+WUWnY1aPoKPJ2PD210w2loUtnf
ImAEr4X/BUtvZO8dxgxWNh6m3K0gPedkMdTnpQo7ty8xOKkv6jh8GTnKda/k1zqK
Ygn6ZvG2whj0QDwzB9RoWL+ypw/VRzdQKdDa+3/Udy8j4u/EjX93cRVq0terdkow
yI54wrvtDrEloBnQVW06LVX5OBzi5D+iZY7g14m7fGE0RLDggZvofUN1gYcZLzxV
6oaaOmwrPArV6Hmu+eKZD1by8tClul2BQ/HaBlMj8N4Jm3L/RQIDAQABo4IERTCC
BEEwHQYDVR0OBBYEFKxGD403whTRcQYa00QgSNf3a13WMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k
MmFjZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1NmQ1ODUzNDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QyYWNkYmQ4LWYxY2UtNGJlZi1h
YWZkLTE2YTU2ZDU4NTM0NS9kMmFjZGJkOC1mMWNlLTRiZWYtYWFmZC0xNmE1NmQ1
ODUzNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwPQYIKwYBBQUH
AQcBAf8ELjAsMBEEAgABMAsDAwCB/QMEAsf/LDAXBAIAAjARAwcAJiAA/wAAAwYA
JiABKnAwJgYIKwYBBQUHAQgBAf8EFzAVoBMwEQICLBkCAjWbAgJXPAIDAIEVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/4eNzeNEnigiNHKoBIMiL27LsyPQbwXuSU2i9cda9KxUPqz8Z3LA8t
0JVT/gHS6Q0w2l+zNBs1gGMJ+WGXB9/knyXXAfIwujn+2YHqRmspk9oOZSm/VBy2
QQKUtM3rWY7Qz1vn6hPtncct37S+C5qtty4bA1L+nLpqBNZ7tlrad3zR7V5KqbEj
EgbNPcoPAuG8x0vGcMFMiZ9VNSeFDXO0+67pgcz4S1OPvyP1Mw/dB4pwvXBQOjF3
rbNbMA7wRo6acDdivEWBiKwL572VhmHwyhK4N7M+Ygyw2TR1DMoDWXyJfbw6PBr/
JPw6+i1i9YaLgBWeQa9qoXGB5W2Jy5g=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:44 2024 by rpki-client on console-fra.rpki-client.org