Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/d33bee70df06db3ff547fcc29d8bf4dce054d952dcb7d87edf.cer
File:                     d33bee70df06db3ff547fcc29d8bf4dce054d952dcb7d87edf.cer (raw, json)
Hash identifier:          WJMqO3f1cy/4MWrU7KUtHy0Z31M/hC28Xp+q5FOcsW8=
Subject key identifier:   73:A8:BD:73:2D:93:79:08:78:D7:03:3E:C4:55:8A:FD:0D:11:F9:32
Authority key identifier: F0:59:EC:09:2F:2B:57:F1:78:B2:89:C0:9C:C8:00:DF:A8:11:53:57
Certificate issuer:       /CN=492b5237-6113-4678-8542-d7f56ce00782
Certificate serial:       010D0C9F43285845A3D14B8412381713766DAC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/73A8BD732D93790878D7033EC4558AFD0D11F932.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 23 Apr 2024 10:04:32 +0000
Certificate not after:    Mon 27 Jul 2026 10:04:32 +0000
Subordinate resources:    AS: 400806

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/492b5237-6113-4678-8542-d7f56ce00782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/492b5237-6113-4678-8542-d7f56ce00782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a3:d1:4b:84:12:38:17:13:76:6d:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492b5237-6113-4678-8542-d7f56ce00782
        Validity
            Not Before: Apr 23 10:04:32 2024 GMT
            Not After : Jul 27 10:04:32 2026 GMT
        Subject: CN=d33bee70df06db3ff547fcc29d8bf4dce054d952dcb7d87edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:6b:88:42:f1:57:c8:01:28:2c:d2:59:52:
                    33:f8:6a:d7:73:68:f1:8b:fb:8a:76:38:71:57:4b:
                    0d:d8:9b:ec:31:43:8a:7e:31:cb:33:9b:bc:d1:c4:
                    b2:2d:c7:31:5d:bf:a4:47:6e:4d:93:f2:00:2a:e9:
                    3e:37:7f:4f:38:f8:99:b2:05:f9:d0:1e:03:7d:20:
                    ed:ac:08:45:d0:3b:61:1c:2a:3b:17:d8:6d:d6:b1:
                    b5:56:4d:a2:e5:16:ed:cb:a8:24:84:9b:66:5e:1e:
                    0e:4e:2b:6a:78:97:80:a3:a2:56:85:45:d1:6c:78:
                    2f:8c:8f:32:8d:1a:f4:93:67:92:25:09:e3:ba:c4:
                    97:b8:80:66:2d:3b:26:dc:ce:9b:91:f8:cc:41:ae:
                    f3:97:0d:fd:91:76:be:d8:34:1e:8f:23:79:fa:fd:
                    94:24:01:4a:a9:0f:6b:29:08:72:d5:5e:43:9a:21:
                    d2:4d:25:9e:0e:44:ca:c5:fd:45:cf:e7:b1:89:96:
                    89:22:ce:8d:02:1b:9b:b5:3d:cb:0e:c3:3d:30:68:
                    cd:07:91:41:76:33:bb:b8:e3:8c:28:16:da:52:fe:
                    11:82:3c:0d:74:51:3a:ce:70:fa:94:f6:34:06:72:
                    ae:09:01:3f:30:7c:64:67:2b:d9:3f:3f:fb:4c:66:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:BD:73:2D:93:79:08:78:D7:03:3E:C4:55:8A:FD:0D:11:F9:32
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/73A8BD732D93790878D7033EC4558AFD0D11F932.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782/492b5237-6113-4678-8542-d7f56ce00782.crl

            X509v3 Authority Key Identifier:
                keyid:F0:59:EC:09:2F:2B:57:F1:78:B2:89:C0:9C:C8:00:DF:A8:11:53:57

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/492b5237-6113-4678-8542-d7f56ce00782.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400806

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:0b:b4:e0:e8:d5:78:ee:b4:c4:70:ff:b1:68:14:be:be:
         07:70:4e:53:89:62:1c:6c:ef:33:1a:fd:50:0b:35:b4:f4:0e:
         df:b7:6f:85:38:8c:37:ff:c0:fc:4c:8f:67:9e:d9:a4:b9:ce:
         08:8d:3a:5e:0e:d3:90:69:5a:bf:de:fc:37:64:78:0e:e9:75:
         4b:63:bb:48:4d:b5:d9:bc:0f:ba:46:36:8b:55:30:06:4c:c0:
         a6:48:78:d2:29:31:2c:98:2b:75:d7:2c:79:3f:98:2d:93:4b:
         7f:4d:00:45:86:eb:4e:eb:ab:d9:c4:b2:f3:5b:3a:a7:ac:0d:
         2d:4b:d3:01:fb:87:90:f2:d9:df:af:1a:da:cf:84:32:fb:34:
         96:dd:9d:c6:6d:0c:24:1f:04:c8:30:89:fe:0c:33:20:e0:21:
         d5:ab:81:de:e4:7f:32:b1:18:1c:4f:14:d1:59:d1:18:c4:07:
         e8:c4:2c:31:c7:fa:dd:dc:f5:a0:fd:5b:38:d0:9b:1f:e6:b2:
         13:8f:0f:e1:38:3a:47:16:47:14:9f:0d:a1:e9:6e:d5:d9:a1:
         5d:48:69:4a:de:e8:ad:1c:e2:ff:f6:6d:c4:9c:f2:30:0d:37:
         eb:77:94:48:4b:ab:d0:1c:dc:9e:3e:a9:3b:65:64:00:72:32:
         b9:4b:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----