Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer
File:                     3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer (raw, json)
Hash identifier:          nuXQY3EsGWkwuWwkdGQr2MZ27VID5lM26/3FOzrfeFI=
Subject key identifier:   34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846F1BDE4B14BF74A40B8916C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 00:45:26 +0000
Certificate not after:    Tue 24 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 17015
                          IP: 23.153.152.0/24
                          IP: 130.51.79.0/24
                          IP: 2606:6bc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:bd:e4:b1:4b:f7:4a:40:b8:91:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 21 00:45:26 2024 GMT
            Not After : Nov 24 01:45:26 2026 GMT
        Subject: CN=3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e0:0c:d3:c4:3a:83:ec:a6:d8:cf:df:31:7a:
                    71:bd:f4:c3:f0:5e:d9:6c:37:02:f9:9c:7b:9b:f3:
                    bb:1f:dd:b8:1c:f4:b5:68:d4:7e:a2:65:ea:8c:1f:
                    e3:c2:54:09:f2:b8:90:5f:96:a4:2c:b8:ff:8e:21:
                    b4:1a:f7:07:f5:7c:a9:b1:b2:df:b0:03:1d:cc:86:
                    2a:57:72:73:06:dd:4b:2a:ff:d5:9d:b1:31:92:9a:
                    aa:c2:85:9c:e0:6b:f7:3e:3b:71:de:d5:77:59:60:
                    ea:40:90:34:31:a6:23:4d:84:20:2c:ac:b1:4b:f4:
                    c7:f0:8f:2f:32:9e:f6:9a:ab:9b:fe:66:b7:15:67:
                    69:0c:1f:c9:ce:6a:23:a1:72:b8:4c:6a:ce:25:c8:
                    9c:b5:12:8b:aa:b9:81:a6:bf:07:e0:0d:e1:5d:24:
                    5f:78:79:82:3c:3a:1e:77:f2:f8:c5:71:39:38:e7:
                    10:4a:ee:80:b2:89:4d:3a:a0:ae:a2:ac:fe:b8:eb:
                    b3:73:57:88:19:76:ee:bf:42:4b:5d:96:c5:5d:d7:
                    6c:3f:cb:40:c8:fa:4b:ec:71:94:e2:47:1c:cb:cc:
                    26:c7:fc:32:95:3d:ab:b1:d7:b5:be:04:df:62:f0:
                    ba:b6:d1:5e:cb:b1:2a:3b:3b:41:87:61:ec:24:fe:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.152.0/24
                  130.51.79.0/24
                IPv6:
                  2606:6bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17015

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:f6:f6:b2:e1:d3:b1:b4:3f:d7:97:05:4c:21:ed:a3:8c:
         50:50:89:fb:c0:2b:72:9e:cc:41:51:f6:66:d3:89:a6:75:4a:
         67:64:d2:46:14:38:85:81:10:d9:55:de:5d:05:df:e0:a7:d8:
         16:60:6d:0f:e0:8b:8b:9f:93:2e:76:36:1c:3a:e5:29:d7:a5:
         01:59:0d:4e:ba:01:1b:59:5b:66:0b:5d:7a:15:0b:a5:6a:d9:
         ef:8d:e2:33:0c:a1:ae:26:53:24:30:97:99:36:42:c7:82:9a:
         6c:a9:49:e9:b7:e8:f9:96:98:41:5e:2c:c3:d0:5e:2a:44:9b:
         02:68:9d:25:f9:27:e7:55:85:87:2b:d4:2a:47:1a:bd:ee:45:
         11:8c:a0:9a:9d:75:bb:25:0e:ce:83:6b:ee:60:3c:c1:f0:30:
         50:45:ec:dc:6a:9e:3b:26:35:a9:c1:16:24:8f:44:42:5c:e1:
         f4:ff:53:91:80:72:fe:7c:1b:c0:a7:98:87:0d:be:eb:90:64:
         33:68:e8:91:7b:88:86:17:c6:d9:0a:39:1e:dc:ea:96:f2:6e:
         f7:eb:38:ba:d0:87:5a:cb:8f:e1:5a:5c:4c:48:82:cb:3f:51:
         35:6d:c1:83:33:35:6d:c9:30:1d:c6:e1:db:74:1e:97:ca:09:
         f5:e0:fc:bf
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEbxveSxS/dKQLiRbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI0MDgyMTAwNDUyNloXDTI2MTEyNDAxNDUyNlowLzEtMCsGA1UEAxMk
M2FkMzNlOGMtODk4Yy00Y2YxLWI3ZWYtNDhmN2U0NGY0YmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluAM08Q6g+ym2M/fMXpxvfTD8F7ZbDcC+Zx7
m/O7H924HPS1aNR+omXqjB/jwlQJ8riQX5akLLj/jiG0GvcH9XypsbLfsAMdzIYq
V3JzBt1LKv/VnbExkpqqwoWc4Gv3Pjtx3tV3WWDqQJA0MaYjTYQgLKyxS/TH8I8v
Mp72mqub/ma3FWdpDB/JzmojoXK4TGrOJcictRKLqrmBpr8H4A3hXSRfeHmCPDoe
d/L4xXE5OOcQSu6AsolNOqCuoqz+uOuzc1eIGXbuv0JLXZbFXddsP8tAyPpL7HGU
4kccy8wmx/wylT2rsde1vgTfYvC6ttFey7EqOztBh2HsJP5+gQIDAQABo4IELzCC
BCswHQYDVR0OBBYEFDR1pM1IlrTXmUkaKsqBNvYB6GcgMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z
YWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0ZjRiZjYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNhZDMzZThjLTg5OGMtNGNmMS1i
N2VmLTQ4ZjdlNDRmNGJmNi8zYWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0
ZjRiZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAAXmZgDBACCM08wDQQCAAIwBwMFACYGa8AwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICQncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJyr29rLh07G0P9eXBUwh
7aOMUFCJ+8Arcp7MQVH2ZtOJpnVKZ2TSRhQ4hYEQ2VXeXQXf4KfYFmBtD+CLi5+T
LnY2HDrlKdelAVkNTroBG1lbZgtdehULpWrZ743iMwyhriZTJDCXmTZCx4KabKlJ
6bfo+ZaYQV4sw9BeKkSbAmidJfkn51WFhyvUKkcave5FEYygmp11uyUOzoNr7mA8
wfAwUEXs3GqeOyY1qcEWJI9EQlzh9P9TkYBy/nwbwKeYhw2+65BkM2jokXuIhhfG
2Qo5HtzqlvJu9+s4utCHWsuP4VpcTEiCyz9RNW3BgzM1bckwHcbh23Qel8oJ9eD8
vw==
-----END CERTIFICATE-----