Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d.cer
File:                     2aa9f898-6727-4155-9669-aa60100f6c8d.cer (raw, json)
Hash identifier:          Et4bbxx3ZEaCwtrX7Pxr9BeUvIrZN1gP2Ln2DyIB3Lw=
Subject key identifier:   72:54:1B:C0:07:2D:B0:60:29:78:9B:2B:ED:DF:6E:2B:01:D4:D8:BB
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483FB27E95E699FEAEFDD81D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/2aa9f898-6727-4155-9669-aa60100f6c8d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Dec 2024 15:42:27 +0000
Certificate not after:    Thu 18 Mar 2027 19:26:19 +0000
Subordinate resources:    AS: 53343
                          IP: 23.131.12.0/24
                          IP: 2602:f765::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:b2:7e:95:e6:99:fe:ae:fd:d8:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 18 15:42:27 2024 GMT
            Not After : Mar 18 19:26:19 2027 GMT
        Subject: CN=2aa9f898-6727-4155-9669-aa60100f6c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:0b:7f:88:4c:e6:e8:d3:6c:51:ed:2b:95:
                    68:8a:a8:36:a3:06:24:ac:e2:5c:76:25:61:82:af:
                    ff:26:07:88:bd:0a:05:27:14:f2:63:39:39:a6:04:
                    3b:67:ba:0e:99:0c:81:72:c3:ee:6d:65:2c:27:ff:
                    4b:90:47:7b:19:33:ed:bc:07:55:23:f4:60:17:19:
                    00:8e:82:c7:3e:de:fd:11:62:34:46:d9:6c:11:24:
                    05:f5:36:07:ff:83:27:25:dc:ab:82:cf:93:04:7e:
                    c1:0a:d9:7e:a7:63:cc:cc:ff:3b:71:f2:f0:d6:cc:
                    5b:cb:4b:cb:e4:6c:46:3e:53:6d:bf:32:bc:75:f4:
                    a7:94:b0:12:1d:53:fd:6c:58:dc:6b:3c:4b:a4:ee:
                    46:00:3d:fc:10:8c:32:b8:54:cf:f3:f4:e7:83:a2:
                    8e:09:2d:41:a4:b9:d1:7d:e7:30:7d:07:af:d9:4f:
                    25:79:e1:63:78:e4:0d:1a:ea:12:eb:27:e4:07:44:
                    12:4f:78:95:67:61:41:5a:1e:58:fa:c0:0a:fa:de:
                    45:6a:74:9e:e2:b6:e6:e7:86:68:66:3b:e1:7a:5b:
                    2a:87:e6:a9:ba:fd:53:f2:f3:35:8a:42:4c:3a:a8:
                    53:02:55:ee:d8:7e:8b:9e:ec:9f:12:77:42:0c:21:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:54:1B:C0:07:2D:B0:60:29:78:9B:2B:ED:DF:6E:2B:01:D4:D8:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2aa9f898-6727-4155-9669-aa60100f6c8d/2aa9f898-6727-4155-9669-aa60100f6c8d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.12.0/24
                IPv6:
                  2602:f765::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53343

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:e0:07:d5:f0:b7:32:95:b2:ac:fd:d6:98:30:fc:cb:9a:
         65:b6:51:7a:d5:66:40:e3:be:ab:ac:2d:9a:2d:e1:1f:4b:6f:
         2e:2b:72:12:5c:ff:91:f5:fb:4d:d1:47:70:8f:d6:8e:89:fd:
         96:3a:e1:93:42:e8:92:14:75:e4:a9:7b:60:62:ef:da:ae:20:
         a4:8e:73:43:ae:83:97:44:6e:0c:ca:da:df:8c:65:4d:6a:d1:
         da:f7:79:a1:40:ef:1a:15:38:98:f4:44:8b:a4:91:33:4e:24:
         aa:1f:77:f3:a2:d4:e2:7b:da:7d:56:82:6d:59:63:a6:bc:4a:
         52:01:e2:f3:54:37:84:8c:77:18:8d:a9:53:be:26:08:8b:9c:
         b0:64:f3:2c:05:ee:1d:95:40:11:e3:14:c6:54:00:be:59:cf:
         db:c0:d5:4e:a0:b0:37:1d:2e:a6:8c:b3:69:13:25:c0:b1:e4:
         dd:2c:05:32:e5:87:4b:7c:ef:57:c7:c5:c4:26:57:da:95:fb:
         c2:79:59:00:35:ec:1f:14:c4:fb:7c:38:55:f8:cb:84:39:38:
         10:a2:2b:2e:c8:d3:7d:94:da:5b:03:13:21:27:f9:9e:68:5b:
         c6:28:4c:0f:0b:19:3c:19:62:ad:d7:24:4e:f6:62:fb:fa:0e:
         05:1a:06:e2
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEg/sn6V5pn+rv3YHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI0MTIxODE1NDIyN1oXDTI3MDMxODE5MjYxOVowLzEtMCsGA1UEAxMk
MmFhOWY4OTgtNjcyNy00MTU1LTk2NjktYWE2MDEwMGY2YzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKgLf4hM5ujTbFHtK5Voiqg2owYkrOJcdiVh
gq//JgeIvQoFJxTyYzk5pgQ7Z7oOmQyBcsPubWUsJ/9LkEd7GTPtvAdVI/RgFxkA
joLHPt79EWI0RtlsESQF9TYH/4MnJdyrgs+TBH7BCtl+p2PMzP87cfLw1sxby0vL
5GxGPlNtvzK8dfSnlLASHVP9bFjcazxLpO5GAD38EIwyuFTP8/Tng6KOCS1BpLnR
fecwfQev2U8leeFjeOQNGuoS6yfkB0QST3iVZ2FBWh5Y+sAK+t5FanSe4rbm54Zo
Zjvhelsqh+apuv1T8vM1ikJMOqhTAlXu2H6LnuyfEndCDCGvTQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFHJUG8AHLbBgKXibK+3fbisB1Ni7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y
YWE5Zjg5OC02NzI3LTQxNTUtOTY2OS1hYTYwMTAwZjZjOGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJhYTlmODk4LTY3MjctNDE1NS05
NjY5LWFhNjAxMDBmNmM4ZC8yYWE5Zjg5OC02NzI3LTQxNTUtOTY2OS1hYTYwMTAw
ZjZjOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXgwwwDgQCAAIwCAMGBCYC92UAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDQXzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrY+AH1fC3MpWyrP3WmDD8y5pl
tlF61WZA476rrC2aLeEfS28uK3ISXP+R9ftN0Udwj9aOif2WOuGTQuiSFHXkqXtg
Yu/ariCkjnNDroOXRG4MytrfjGVNatHa93mhQO8aFTiY9ESLpJEzTiSqH3fzotTi
e9p9VoJtWWOmvEpSAeLzVDeEjHcYjalTviYIi5ywZPMsBe4dlUAR4xTGVAC+Wc/b
wNVOoLA3HS6mjLNpEyXAseTdLAUy5YdLfO9Xx8XEJlfalfvCeVkANewfFMT7fDhV
+MuEOTgQoisuyNN9lNpbAxMhJ/meaFvGKEwPCxk8GWKt1yRO9mL7+g4FGgbi
-----END CERTIFICATE-----