Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24a7522d-9e32-498e-a021-a5c3f46d53fc.cer
File:                     24a7522d-9e32-498e-a021-a5c3f46d53fc.cer (raw, json)
Hash identifier:          xAv8iFxAkjzkDZh8+G7wkWUkzBmQgONTmfljyoJhqwY=
Subject key identifier:   7F:7E:D3:8C:40:66:1D:1C:8C:46:3D:59:96:50:4C:2B:1F:1E:C2:99
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F43285849B711C0BE7945561D08827E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24a7522d-9e32-498e-a021-a5c3f46d53fc/24a7522d-9e32-498e-a021-a5c3f46d53fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24a7522d-9e32-498e-a021-a5c3f46d53fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 02 May 2025 02:42:31 +0000
Certificate not after:    Thu 05 Aug 2027 02:42:31 +0000
Subordinate resources:    AS: 55192
                          IP: 23.150.16.0 -- 23.150.20.255
                          IP: 130.51.204.0/22
                          IP: 208.99.28.0/22
                          IP: 2602:fd7c::/36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b7:11:c0:be:79:45:56:1d:08:82:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: May  2 02:42:31 2025 GMT
            Not After : Aug  5 02:42:31 2027 GMT
        Subject: CN=24a7522d-9e32-498e-a021-a5c3f46d53fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:aa:38:97:3f:f6:15:8e:52:f9:d8:55:28:
                    73:03:56:c3:93:b6:e4:71:3c:0a:d4:b7:34:72:ee:
                    87:66:e2:31:5e:f0:51:f8:21:7c:0c:18:7b:c3:30:
                    0a:cb:1b:3c:ec:55:4e:06:e7:cb:35:9d:aa:49:60:
                    de:71:d3:cf:51:c9:64:67:3f:07:3e:6f:5e:37:39:
                    bf:98:65:25:77:93:8d:c2:c0:ee:03:b2:53:54:cc:
                    77:dd:ed:e7:d1:84:d7:e4:27:a2:7b:41:51:45:32:
                    c9:63:47:ec:e2:0b:72:cb:50:57:98:10:5e:98:45:
                    ab:e8:ae:1b:03:4c:a9:75:60:3a:86:3f:33:ee:f8:
                    6c:a4:51:95:73:74:6b:e1:cb:47:18:34:5b:8d:8f:
                    a1:5a:e5:7b:ee:9d:5d:83:d1:63:31:2d:f8:1b:51:
                    3a:1c:e2:83:11:e2:20:ce:92:a6:3e:7c:87:0b:1b:
                    97:42:60:19:4a:92:e1:fb:95:6a:1b:be:c3:a4:f1:
                    0f:12:ab:69:2e:24:d6:13:41:39:47:86:3c:b5:20:
                    f4:de:4f:d8:29:06:b3:bf:95:d2:ab:da:42:8d:ad:
                    26:3b:cf:ee:2e:0e:81:db:ea:1f:ad:ef:00:8e:14:
                    be:4c:15:d5:52:d4:8d:db:c0:02:75:bf:27:6e:7c:
                    ce:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7E:D3:8C:40:66:1D:1C:8C:46:3D:59:96:50:4C:2B:1F:1E:C2:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24a7522d-9e32-498e-a021-a5c3f46d53fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24a7522d-9e32-498e-a021-a5c3f46d53fc/24a7522d-9e32-498e-a021-a5c3f46d53fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.16.0-23.150.20.255
                  130.51.204.0/22
                  208.99.28.0/22
                IPv6:
                  2602:fd7c::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55192

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:19:88:cb:fe:79:28:0c:51:2e:a1:39:52:26:43:88:fb:
         2d:a4:14:75:8d:f4:58:f8:8d:7d:c4:a5:7c:40:6d:f8:d5:59:
         50:21:fc:1c:f5:bb:56:bf:1c:50:87:6c:96:87:10:f2:f9:99:
         b2:00:2e:12:5d:96:58:94:4d:56:87:d4:62:7e:93:a5:db:0b:
         05:fd:1b:cc:52:6c:51:8a:73:f2:04:ff:83:27:ee:ed:a7:78:
         e9:12:28:e0:4e:2d:78:3c:de:fc:75:dd:c1:91:b8:ec:24:ec:
         c3:5b:3a:49:c2:98:a7:05:b9:62:63:50:e0:61:47:6d:7a:70:
         83:e7:0e:c2:76:45:d3:56:94:0b:69:5b:18:f9:d5:85:24:6b:
         a4:30:b0:8a:7c:55:6f:c3:85:02:33:c4:bf:25:db:dc:07:5d:
         21:dd:3b:5c:55:bb:db:3a:92:bf:d8:93:e3:34:09:15:7f:96:
         23:30:c0:bb:5e:cb:78:8c:1d:ef:b6:a0:d4:3b:a7:26:8c:3d:
         7e:21:f4:a8:e6:ed:52:bd:e5:22:b2:fb:02:f0:7c:3c:e8:75:
         9e:4f:4a:a8:84:ca:46:c8:48:9a:d7:2a:d0:ae:33:10:7a:16:
         86:23:05:f9:cf:d9:7a:5c:24:84:91:81:f6:e2:34:eb:a6:3e:
         f2:38:2f:99
-----BEGIN CERTIFICATE-----
MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEm3EcC+eUVWHQiCfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4
N2MzMB4XDTI1MDUwMjAyNDIzMVoXDTI3MDgwNTAyNDIzMVowLzEtMCsGA1UEAxMk
MjRhNzUyMmQtOWUzMi00OThlLWEwMjEtYTVjM2Y0NmQ1M2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhmqOJc/9hWOUvnYVShzA1bDk7bkcTwK1Lc0
cu6HZuIxXvBR+CF8DBh7wzAKyxs87FVOBufLNZ2qSWDecdPPUclkZz8HPm9eNzm/
mGUld5ONwsDuA7JTVMx33e3n0YTX5Ceie0FRRTLJY0fs4gtyy1BXmBBemEWr6K4b
A0ypdWA6hj8z7vhspFGVc3Rr4ctHGDRbjY+hWuV77p1dg9FjMS34G1E6HOKDEeIg
zpKmPnyHCxuXQmAZSpLh+5VqG77DpPEPEqtpLiTWE0E5R4Y8tSD03k/YKQazv5XS
q9pCja0mO8/uLg6B2+ofre8AjhS+TBXVUtSN28ACdb8nbnzOqwIDAQABo4IEPzCC
BDswHQYDVR0OBBYEFH9+04xAZh0cjEY9WZZQTCsfHsKZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y
NGE3NTIyZC05ZTMyLTQ5OGUtYTAyMS1hNWMzZjQ2ZDUzZmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt
MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzI0YTc1MjJkLTllMzItNDk4ZS1h
MDIxLWE1YzNmNDZkNTNmYy8yNGE3NTIyZC05ZTMyLTQ5OGUtYTAyMS1hNWMzZjQ2
ZDUzZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh
ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3
YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf
xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2
YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwQwYIKwYBBQUH
AQcBAf8ENDAyMCAEAgABMBowDAMEBBeWEAMEABeWFAMEAoIzzAMEAtBjHDAOBAIA
AjAIAwYEJgL9fAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANeYMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ABQKGYjL/nkoDFEuoTlSJkOI+y2kFHWN9Fj4jX3EpXxAbfjVWVAh/Bz1u1a/HFCH
bJaHEPL5mbIALhJdlliUTVaH1GJ+k6XbCwX9G8xSbFGKc/IE/4Mn7u2neOkSKOBO
LXg83vx13cGRuOwk7MNbOknCmKcFuWJjUOBhR216cIPnDsJ2RdNWlAtpWxj51YUk
a6QwsIp8VW/DhQIzxL8l29wHXSHdO1xVu9s6kr/Yk+M0CRV/liMwwLtey3iMHe+2
oNQ7pyaMPX4h9Kjm7VK95SKy+wLwfDzodZ5PSqiEykbISJrXKtCuMxB6FoYjBfnP
2XpcJISRgfbiNOumPvI4L5k=
-----END CERTIFICATE-----
Generated at Mon May 12 20:51:27 2025 by rpki-client